[
 {
  "id": "7721f4ad-4e82-489a-bbb8-fabdb93f19bd",
  "name": "steady-freckled-goshawk",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59126,
  "username": "marco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:37:28.743030+00:00",
  "ended_at": "2026-08-27T11:37:30.363744+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2211
 },
 {
  "id": "7d73f8c0-875f-4198-b988-604b073effbc",
  "name": "vernal-cunning-lorikeet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59152,
  "username": "marco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:37:10.653926+00:00",
  "ended_at": "2026-08-27T11:37:12.109461+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "04ea648e-eb3a-4197-afa5-799e6ab971c2",
  "name": "obsidian-bitter-brambling",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 34330,
  "username": "marco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 763,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:01:36.654589+00:00",
  "ended_at": "2026-08-27T11:01:38.022511+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2070
 },
 {
  "id": "67585d9f-a9fe-4a92-bcb2-d7a3e5d5d9e1",
  "name": "inland-lonesome-oxpecker",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 34352,
  "username": "marco",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:01:15.395243+00:00",
  "ended_at": "2026-08-27T11:01:16.849017+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]