[
 {
  "id": "a29c6c7a-0f36-4218-847d-a12fca09a8c8",
  "name": "sandy-gallant-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 41764,
  "username": "toto",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 308,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T05:09:39.125729+00:00",
  "ended_at": "2026-08-27T05:09:40.368070+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "8061ace3-cc2f-42b4-ac76-9ac20be922df",
  "name": "sullen-coral-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 54074,
  "username": "toto",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 280,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:55:58.924745+00:00",
  "ended_at": "2026-08-21T12:56:04.958985+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 },
 {
  "id": "272ebda7-70e6-44fa-9e4f-85d99ff88a9a",
  "name": "candid-obsidian-kingfisher",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.29",
  "src_port": 10696,
  "username": "toto",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 4418,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T04:43:09.824052+00:00",
  "ended_at": "2026-08-21T04:43:27.226431+00:00",
  "ended_reason": "exec complete",
  "commands": 7,
  "transcript_bytes": 1087
 },
 {
  "id": "7ded252e-298f-462d-876b-0fd9330dd857",
  "name": "coastal-restless-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 41356,
  "username": "toto",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 184,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:21:27.341520+00:00",
  "ended_at": "2026-08-20T19:21:31.320274+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1649
 },
 {
  "id": "ca0f3bb6-5d52-4f9b-8e93-64f7247f54fe",
  "name": "grumpy-oaken-alpaca",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 33386,
  "username": "toto",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:43:03.167103+00:00",
  "ended_at": "2026-08-20T10:43:04.229013+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 }
]