[
 {
  "id": "90ab820f-1e5d-45ff-9df5-91cbf696428e",
  "name": "russet-painted-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.86.177",
  "src_port": 42302,
  "username": "toor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 318,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T04:27:20.981649+00:00",
  "ended_at": "2026-08-27T04:27:22.191785+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2091
 },
 {
  "id": "c6e48fae-224a-4804-a8d3-afc7da71ef18",
  "name": "dutiful-smoky-nightjar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.86.177",
  "src_port": 42322,
  "username": "toor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T04:26:52.468629+00:00",
  "ended_at": "2026-08-27T04:26:54.243867+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0da1c8be-1714-4888-b242-0dcaf377c3e3",
  "name": "quaint-shaded-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "143.202.162.212",
  "src_port": 38128,
  "username": "toor",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T16:54:18.537878+00:00",
  "ended_at": "2026-08-21T16:54:20.496779+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]