[
 {
  "id": "3c8a58e8-62e7-43b5-ad7c-8cf90e2d120e",
  "name": "regal-slender-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 50998,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:05:32.726271+00:00",
  "ended_at": "2026-08-26T15:05:34.184077+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "aed1cbb5-41b6-43a1-a69d-72c042199632",
  "name": "gloomy-woven-shearwater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 51010,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:05:17.670954+00:00",
  "ended_at": "2026-08-26T15:05:19.122304+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "30db74f5-79a5-4ca9-a2a4-22cd2d389aa2",
  "name": "nautical-emerald-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40680,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:00:51.104083+00:00",
  "ended_at": "2026-08-26T14:00:52.317010+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "89dee331-a6a4-4cac-9932-47dbc0806f2e",
  "name": "vernal-blunt-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40682,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:00:28.054302+00:00",
  "ended_at": "2026-08-26T14:00:29.165691+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3248d717-3fd0-465f-8193-0b9b2257996f",
  "name": "ruddy-blunt-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.233.213.67",
  "src_port": 38870,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 726,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:31:50.657780+00:00",
  "ended_at": "2026-08-26T13:31:51.456511+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2040
 },
 {
  "id": "1e810555-52f1-4c20-b63a-1ea7b8d47573",
  "name": "emerald-pristine-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.233.213.67",
  "src_port": 41408,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:31:24.786340+00:00",
  "ended_at": "2026-08-26T13:31:25.695369+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]