[
 {
  "id": "b0b0266a-9cb6-4fde-ae1d-7796c1b791bb",
  "name": "western-early-cougar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 58892,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 297,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:14:45.268099+00:00",
  "ended_at": "2026-08-27T12:14:47.079215+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2240
 },
 {
  "id": "a41ca91b-4f90-430a-9ab3-b49e791077e7",
  "name": "reedy-gleaming-turnstone",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 58910,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:14:30.222168+00:00",
  "ended_at": "2026-08-27T12:14:30.853385+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ff093cec-f590-4c1c-bd7f-e90971facd80",
  "name": "inland-tender-vulture",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 55966,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 349,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:33:52.709062+00:00",
  "ended_at": "2026-08-27T11:33:53.939195+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2057
 },
 {
  "id": "21802301-fd48-4d60-ba5c-a3abf5b01cc8",
  "name": "wandering-proud-macaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 55984,
  "username": "anu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:33:42.702220+00:00",
  "ended_at": "2026-08-27T11:33:43.309468+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]