[
 {
  "id": "98f7846c-2b00-4d02-911d-880d43d131a8",
  "name": "early-salty-marmot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 43030,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:06:02.636910+00:00",
  "ended_at": "2026-08-27T13:06:04.735285+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "2adc65a9-9a2a-48c2-951c-7a9693314980",
  "name": "early-flinty-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 49492,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 300,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:19:01.318517+00:00",
  "ended_at": "2026-08-27T12:19:03.298001+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2258
 },
 {
  "id": "aaa2b28a-6666-4cf6-ad14-ca446e83aab5",
  "name": "northern-bold-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "78.109.200.147",
  "src_port": 51814,
  "username": "pivpn",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 500,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T09:24:27.111292+00:00",
  "ended_at": "2026-08-20T09:24:27.263126+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3785
 }
]