[
 {
  "id": "eabb46c1-d88e-42ec-91c4-8f9f201e4e05",
  "name": "gallant-nautical-wallaby",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40826,
  "username": "ehsan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 754,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:19:07.570401+00:00",
  "ended_at": "2026-08-26T15:19:09.068552+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2248
 },
 {
  "id": "ba76cb7f-ee81-427d-b1cb-cf103b7902b4",
  "name": "hardy-somber-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40828,
  "username": "ehsan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:18:45.109104+00:00",
  "ended_at": "2026-08-26T15:18:47.183028+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e2b4b756-6462-49fb-ae83-fbcb35286ae4",
  "name": "honest-icy-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52380,
  "username": "ehsan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:03:29.803087+00:00",
  "ended_at": "2026-08-26T14:03:30.720604+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2184
 },
 {
  "id": "9695177d-5c53-468a-8c9b-de9dac64ff8c",
  "name": "keen-stoic-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 52394,
  "username": "ehsan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:03:07.555709+00:00",
  "ended_at": "2026-08-26T14:03:08.857895+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]