[
 {
  "id": "0f682362-d5e7-4e59-b4bd-42fd12ad9a28",
  "name": "orderly-mighty-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 59570,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T13:02:26.363338+00:00",
  "ended_at": "2026-08-27T13:02:28.596587+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "ebcb1848-5249-4fdd-89c3-e9172f22b7e2",
  "name": "feathered-cheerful-starling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 59600,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T13:02:11.508321+00:00",
  "ended_at": "2026-08-27T13:02:12.966551+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "046b6074-3b9c-4437-be5f-664598711280",
  "name": "foggy-snowy-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 42818,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 330,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:27:40.954237+00:00",
  "ended_at": "2026-08-27T12:27:41.855899+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "22892b3d-d131-484e-917f-862a3ce159ef",
  "name": "graceful-vivid-cuckoo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55848,
  "username": "kd",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:27:20.268770+00:00",
  "ended_at": "2026-08-27T12:27:22.206557+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]