[
 {
  "id": "28a4ee71-6a88-4b33-8da9-041526a4ef56",
  "name": "hazel-cobalt-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 33152,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 730,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:18.917772+00:00",
  "ended_at": "2026-08-27T12:23:20.111497+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "6c999062-d97e-41fa-8813-2603cf53a90f",
  "name": "woven-genial-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 33166,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:22:56.827609+00:00",
  "ended_at": "2026-08-27T12:22:58.443833+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3714f82b-a475-4738-8c29-603e0ca03865",
  "name": "hazy-merry-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59156,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:40:03.459700+00:00",
  "ended_at": "2026-08-27T11:40:05.021398+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2221
 },
 {
  "id": "6c88573f-8a22-4ed1-b088-8da98ed44743",
  "name": "sandy-rapid-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59180,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:39:46.361529+00:00",
  "ended_at": "2026-08-27T11:39:47.493538+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98ec9487-31d4-4515-8367-f0bbe33257ec",
  "name": "eager-polar-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40689,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:09:21.961709+00:00",
  "ended_at": "2026-08-26T14:09:22.996074+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "a5c71891-c601-4e2b-a37e-81dc045a24b4",
  "name": "coastal-dappled-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40691,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:08:58.886372+00:00",
  "ended_at": "2026-08-26T14:09:00.751155+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1acaed3f-f46f-4bc5-bb50-d204692265c4",
  "name": "solemn-sandy-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 53458,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:51:45.885664+00:00",
  "ended_at": "2026-08-26T13:51:47.363054+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2115
 },
 {
  "id": "7173fa52-0fd5-46e0-ba12-6fad9c61e341",
  "name": "patient-airy-pheasant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 53464,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:51:20.819612+00:00",
  "ended_at": "2026-08-26T13:51:22.461320+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]