[
 {
  "id": "8a180bf0-13c3-42d5-9630-a41f97bfeb2f",
  "name": "watchful-vaulted-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 35922,
  "username": "ymoreno",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 772,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:06:17.365157+00:00",
  "ended_at": "2026-08-27T12:06:18.863737+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2254
 },
 {
  "id": "56cf4207-5928-48cd-be3b-7eadc3ab7873",
  "name": "gloomy-balmy-mink",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 35934,
  "username": "ymoreno",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:55.528189+00:00",
  "ended_at": "2026-08-27T12:05:56.906313+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a220ef4d-9bf8-4bf3-b410-3e6e2c56c42c",
  "name": "boreal-vaulted-marten",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58856,
  "username": "ymoreno",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:09:59.421924+00:00",
  "ended_at": "2026-08-27T11:10:00.922018+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2111
 },
 {
  "id": "23f71583-fd3f-4c90-a350-957b59147c58",
  "name": "mottled-lunar-capuchin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58876,
  "username": "ymoreno",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:09:42.405619+00:00",
  "ended_at": "2026-08-27T11:09:43.785649+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]