[
 {
  "id": "79ebdf76-ed7c-4355-95b7-93cad5300fce",
  "name": "ruddy-solar-onager",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 40406,
  "username": "huser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1303,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:43.763868+00:00",
  "ended_at": "2026-08-27T11:45:45.556381+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2247
 },
 {
  "id": "4e206720-f61b-40ef-bd09-5e14bf814593",
  "name": "diligent-earnest-nuthatch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59210,
  "username": "huser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 447,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:45:30.084868+00:00",
  "ended_at": "2026-08-27T11:45:31.382747+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2256
 },
 {
  "id": "8f084af5-a517-4c7c-9d67-80785f31e713",
  "name": "wandering-amiable-peccary",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59220,
  "username": "huser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:13.516418+00:00",
  "ended_at": "2026-08-27T11:45:15.099093+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ad63b314-b367-4507-a5ee-639c51c8694c",
  "name": "snowy-earnest-firefly",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 35996,
  "username": "huser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:45:09.649453+00:00",
  "ended_at": "2026-08-27T11:45:11.766514+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]