[
 {
  "id": "bcc62690-6b13-4e09-9252-beb72e7c31f1",
  "name": "early-foggy-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "106.58.173.254",
  "src_port": 47404,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:09:26.888493+00:00",
  "ended_at": "2026-08-25T20:13:27.452111+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "400e355e-3d22-4db5-acab-ca26b88fa0bd",
  "name": "earnest-honest-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "106.58.173.254",
  "src_port": 60768,
  "username": "admin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:00:20.941435+00:00",
  "ended_at": "2026-08-25T20:04:21.473678+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "7b5df76a-d4dd-41d2-abaa-eea5328df9ab",
  "name": "serene-marbled-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "106.58.173.254",
  "src_port": 37676,
  "username": "max",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T19:10:12.097854+00:00",
  "ended_at": "2026-08-25T19:14:12.106231+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 }
]