[
 {
  "id": "226ca8b8-8952-4e81-9e49-94cbe42a94be",
  "name": "leafy-curious-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "179.176.210.17",
  "src_port": 45675,
  "username": "andrew",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 438,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T21:14:31.390603+00:00",
  "ended_at": "2026-08-25T21:14:31.522244+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3935
 },
 {
  "id": "c986bc7c-a71c-45d6-a6b2-7f701a5e2d8a",
  "name": "obsidian-brazen-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "182.93.50.90",
  "src_port": 51184,
  "username": "hunter",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 663,
  "probe_flagged": 1,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T19:46:32.384549+00:00",
  "ended_at": "2026-08-23T19:46:32.585281+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4587
 },
 {
  "id": "e4909784-b570-4d6e-b53d-274294e58207",
  "name": "glassy-subtle-wigeon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "58.209.82.184",
  "src_port": 45019,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 795,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T00:50:22.167314+00:00",
  "ended_at": "2026-08-23T00:50:22.411160+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3812
 },
 {
  "id": "586c8448-b441-41be-a6a4-ce51a64e72cd",
  "name": "crimson-frank-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "210.79.142.230",
  "src_port": 56430,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 740,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T22:44:40.988584+00:00",
  "ended_at": "2026-08-21T22:44:41.220167+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3495
 },
 {
  "id": "edca2fad-c59c-4e9a-a8fd-fe79fe36bd95",
  "name": "grassy-peaty-gharial",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "181.129.41.162",
  "src_port": 40408,
  "username": "parth",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T19:52:38.357374+00:00",
  "ended_at": "2026-08-20T19:52:38.429877+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3459
 },
 {
  "id": "9d97c634-71cf-4395-9707-f7b02c0c87c2",
  "name": "deft-frank-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "139.59.28.125",
  "src_port": 34268,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 678,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:57:42.460636+00:00",
  "ended_at": "2026-08-20T12:57:42.669225+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3631
 },
 {
  "id": "16ce8ab6-9ac3-48a6-8acf-2f1f38563712",
  "name": "meadow-northern-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "81.193.216.17",
  "src_port": 56682,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 408,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:49:19.537181+00:00",
  "ended_at": "2026-08-20T12:49:19.664175+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3907
 }
]