[
 {
  "id": "1f08357d-f587-4488-bc04-95d8113c1b3f",
  "name": "solemn-languid-gadwall",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 44708,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:08:12.443806+00:00",
  "ended_at": "2026-08-27T12:08:13.652211+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2239
 },
 {
  "id": "ce01d268-cd51-42b1-b71f-61ca94ade1b8",
  "name": "gritty-hazy-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 44712,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:56.535543+00:00",
  "ended_at": "2026-08-27T12:07:57.962648+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "31cedce7-da43-41ae-8b8c-2ea89c78e982",
  "name": "noble-gallant-albatross",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 37162,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 301,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:53:58.013089+00:00",
  "ended_at": "2026-08-27T11:53:59.410019+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2173
 },
 {
  "id": "ffdc1293-b0a4-42c4-9766-eb675f01c819",
  "name": "nameless-frosty-hamster",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 37178,
  "username": "arash",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:53:42.575213+00:00",
  "ended_at": "2026-08-27T11:53:44.124025+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]