[
 {
  "id": "b2bdfec7-6f61-49a3-9925-bee6d252e6b7",
  "name": "frosty-languid-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "127.0.0.1",
  "src_port": 43702,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.24.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "ls /var/backups",
  "started_at": "2026-08-20T06:35:29.388032+00:00",
  "ended_at": "2026-08-20T06:35:29.891014+00:00",
  "ended_reason": "exec complete",
  "commands": 3,
  "transcript_bytes": 163
 },
 {
  "id": "ea5f6d29-1287-4ea0-977c-34b4fcffcd39",
  "name": "lively-dapper-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "127.0.0.1",
  "src_port": 43694,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.24.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:35:26.838101+00:00",
  "ended_at": "2026-08-20T06:35:27.487019+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ec2b333e-bca8-4398-921f-0dc6980806fd",
  "name": "stoic-silent-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "127.0.0.1",
  "src_port": 50628,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.24.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "ls -la /opt/stable",
  "started_at": "2026-08-20T06:34:50.105624+00:00",
  "ended_at": "2026-08-20T06:34:51.260988+00:00",
  "ended_reason": "exec complete",
  "commands": 5,
  "transcript_bytes": 2024
 },
 {
  "id": "849acd82-1bcb-4d65-bc7b-35d4ce9c75bc",
  "name": "brisk-brave-crane",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "127.0.0.1",
  "src_port": 50624,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.24.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:34:40.509606+00:00",
  "ended_at": "2026-08-20T06:34:42.248099+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]