[
 {
  "id": "65b2be7b-71af-49b5-95cc-5a8bc3517970",
  "name": "quaint-umber-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 43774,
  "username": "newusername",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 769,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:19:54.975918+00:00",
  "ended_at": "2026-08-27T11:19:56.508392+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2152
 },
 {
  "id": "40cd5ce4-3abb-46ef-b58a-30354e07daa6",
  "name": "stormy-northern-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53064,
  "username": "newusername",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:19:33.121962+00:00",
  "ended_at": "2026-08-27T11:19:33.987006+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d9db2b6a-2f5a-4d3c-8929-928976740fde",
  "name": "dewy-valiant-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58726,
  "username": "newusername",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 461,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:56:20.234678+00:00",
  "ended_at": "2026-08-27T10:56:20.861006+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2064
 },
 {
  "id": "1e6a9bc0-193b-414b-8a50-0a373fa4d9c2",
  "name": "sturdy-bold-bluebird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 58736,
  "username": "newusername",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:56:09.847569+00:00",
  "ended_at": "2026-08-27T10:56:11.486600+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]