[
 {
  "id": "c986bc7c-a71c-45d6-a6b2-7f701a5e2d8a",
  "name": "obsidian-brazen-dotterel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "182.93.50.90",
  "src_port": 51184,
  "username": "hunter",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 663,
  "probe_flagged": 1,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T19:46:32.384549+00:00",
  "ended_at": "2026-08-23T19:46:32.585281+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 4587
 },
 {
  "id": "489f4736-5e2c-424d-a43b-57f30f018bb8",
  "name": "regal-freckled-koala",
  "protocol": "ssh",
  "channel_kind": "shell",
  "src_ip": "87.87.87.87",
  "src_port": 64318,
  "username": "admin",
  "client_version": "SSH-2.0-OpenSSH_for_Windows_9.5",
  "auth_attempts": 1,
  "automation": "human",
  "think_ms": 5071,
  "probe_flagged": 1,
  "exec_command": null,
  "started_at": "2026-08-20T15:27:00.980760+00:00",
  "ended_at": "2026-08-20T15:39:06.073543+00:00",
  "ended_reason": "logout",
  "commands": 24,
  "transcript_bytes": 1997
 },
 {
  "id": "5a347e5f-7dcf-465a-afb4-b1253e97046e",
  "name": "jagged-proud-barbet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 57080,
  "username": "ftp",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 1,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:00:40.822412+00:00",
  "ended_at": "2026-08-20T11:00:41.357905+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 787
 },
 {
  "id": "a195fa90-fc8f-4538-9214-d67919740a6b",
  "name": "brisk-watchful-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 37940,
  "username": "sam",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 190,
  "probe_flagged": 1,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:54:48.896787+00:00",
  "ended_at": "2026-08-20T10:54:49.572920+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 841
 },
 {
  "id": "8f64d125-d603-4d26-89e3-95b2e7979b3f",
  "name": "marine-curious-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 36462,
  "username": "trader",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 1,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:47:43.796252+00:00",
  "ended_at": "2026-08-20T10:47:46.018668+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1551
 },
 {
  "id": "42cdc15b-b8a3-47a0-867b-bf27199b3bea",
  "name": "airy-ancient-ermine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 43468,
  "username": "admin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 1,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:35:40.917789+00:00",
  "ended_at": "2026-08-20T10:35:41.719192+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 849
 },
 {
  "id": "757dbfd4-49ee-4008-8baf-de5e6cf5ba80",
  "name": "curious-marbled-elk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 49728,
  "username": "ftpuser",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 1,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:02:18.108702+00:00",
  "ended_at": "2026-08-20T10:02:20.471538+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1608
 }
]