[
 {
  "id": "910b8f7b-fee8-4c24-b161-48ba24d1dd46",
  "name": "jovial-grassy-finch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59466,
  "username": "remoteuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 460,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:07:45.835551+00:00",
  "ended_at": "2026-08-27T12:07:47.126183+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "0d91c8b7-0592-45b8-a3bf-7bf903662d09",
  "name": "diligent-muted-llama",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59478,
  "username": "remoteuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:07:26.912326+00:00",
  "ended_at": "2026-08-27T12:07:28.931018+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3c33f36c-a630-46af-b19d-d6e7e7451b5e",
  "name": "coastal-quiet-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 33290,
  "username": "remoteuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 756,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:51:34.626497+00:00",
  "ended_at": "2026-08-27T11:51:36.118195+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "a8ee7cdb-720d-4ac2-9eb2-fc3cc27fc771",
  "name": "tender-feral-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 56908,
  "username": "remoteuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:51:11.853188+00:00",
  "ended_at": "2026-08-27T11:51:12.753969+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]