[
 {
  "id": "bbe057e8-b0ac-47a8-9558-f4834431a731",
  "name": "jolly-vivid-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 64410,
  "username": "tu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:17:27.267550+00:00",
  "ended_at": "2026-08-26T14:17:29.291001+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "d9c6fddc-4228-4488-9c64-eb4c0cf979b9",
  "name": "austere-nautical-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 64416,
  "username": "tu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:16:59.415511+00:00",
  "ended_at": "2026-08-26T14:17:01.152261+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9d6f7ec-ae53-46c3-ae66-55da39cd2361",
  "name": "merry-noble-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40674,
  "username": "tu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:55:14.798951+00:00",
  "ended_at": "2026-08-26T13:55:16.062830+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2096
 },
 {
  "id": "1f8b0e84-fcd1-40ee-8532-e1b6b13568ae",
  "name": "sullen-nautical-walrus",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40676,
  "username": "tu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:54:54.026832+00:00",
  "ended_at": "2026-08-26T13:54:54.964263+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]