[
 {
  "id": "57c97805-7534-4b14-b1d7-46f7c0a8c358",
  "name": "deft-plush-seal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 53642,
  "username": "ts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 565,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T02:42:38.067078+00:00",
  "ended_at": "2026-08-27T02:42:39.177391+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "a68d04a6-cace-4613-be36-8c3013d3a2ae",
  "name": "idle-tranquil-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 41018,
  "username": "ts",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:42:16.725121+00:00",
  "ended_at": "2026-08-27T02:42:18.595507+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "20f331ff-e0f2-4c26-85c7-eac8ce0cfe26",
  "name": "amber-jagged-gazelle",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 58348,
  "username": "ts",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 453,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T22:44:02.833517+00:00",
  "ended_at": "2026-08-25T22:44:04.195386+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "48571ac4-916b-4277-ac76-83635c805d0a",
  "name": "alpine-keen-otter",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 39990,
  "username": "ts",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T22:43:32.030629+00:00",
  "ended_at": "2026-08-25T22:44:04.194094+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "43b0415a-55c3-4487-a2a2-f148701b4eb2",
  "name": "earnest-russet-stoat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 41074,
  "username": "ts",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 308,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:08:30.816337+00:00",
  "ended_at": "2026-08-21T13:08:35.223309+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "7857eca4-1d04-40ef-a30c-1384e455e3b4",
  "name": "lively-velvet-kakapo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 45406,
  "username": "ts",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 183,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:23:45.914659+00:00",
  "ended_at": "2026-08-20T19:23:51.958265+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "2633eac2-c3a8-4c6d-8657-78601a0e7cba",
  "name": "orderly-northern-cardinal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 45996,
  "username": "ts",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 211,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:07:01.193013+00:00",
  "ended_at": "2026-08-20T10:07:02.135503+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 220
 }
]