[
 {
  "id": "815c960d-2ca0-4ed4-8fa8-222a00322bf7",
  "name": "stoic-sincere-waxwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.153.204.5",
  "src_port": 43722,
  "username": "store",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 525,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T16:50:37.663189+00:00",
  "ended_at": "2026-08-26T16:50:39.241651+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2206
 },
 {
  "id": "3f24c622-98ad-46bb-85b9-42d75d63aedd",
  "name": "sincere-hidden-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "20.153.204.5",
  "src_port": 43748,
  "username": "store",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T16:50:19.182780+00:00",
  "ended_at": "2026-08-26T16:50:20.337855+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]