[
 {
  "id": "0cb00361-436c-4df8-bc06-c4c917339063",
  "name": "crimson-creaky-porcupine",
  "protocol": "ssh",
  "channel_kind": "shell",
  "src_ip": "86.104.23.207",
  "src_port": 17022,
  "username": "ubuntu",
  "client_version": "SSH-2.0-OpenSSH_9.7p1 Debian-5",
  "auth_attempts": 3,
  "automation": "human",
  "think_ms": 5206,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T17:46:46.323836+00:00",
  "ended_at": "2026-08-25T17:51:47.747000+00:00",
  "ended_reason": "eof",
  "commands": 32,
  "transcript_bytes": 10842
 },
 {
  "id": "bd4e374a-71a3-4f10-9577-2f0b994ae77a",
  "name": "proud-whispering-adder",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "211.221.196.103",
  "src_port": 36928,
  "username": "deploy",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 606,
  "probe_flagged": 0,
  "exec_command": "uname -a",
  "started_at": "2026-08-23T12:58:24.747263+00:00",
  "ended_at": "2026-08-23T12:58:25.825009+00:00",
  "ended_reason": "exec complete",
  "commands": 6,
  "transcript_bytes": 2652
 },
 {
  "id": "d8d4986c-595c-49cf-997c-a99158c4685b",
  "name": "languid-idle-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "47.107.183.85",
  "src_port": 34854,
  "username": null,
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 0,
  "automation": "bot",
  "think_ms": 1955,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T06:40:48.583350+00:00",
  "ended_at": "2026-08-20T07:44:44+00:00",
  "ended_reason": "stale: no end frame",
  "commands": 3,
  "transcript_bytes": 1960
 },
 {
  "id": "ec2b333e-bca8-4398-921f-0dc6980806fd",
  "name": "stoic-silent-meerkat",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "127.0.0.1",
  "src_port": 50628,
  "username": "root",
  "client_version": "SSH-2.0-AsyncSSH_2.24.0",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "ls -la /opt/stable",
  "started_at": "2026-08-20T06:34:50.105624+00:00",
  "ended_at": "2026-08-20T06:34:51.260988+00:00",
  "ended_reason": "exec complete",
  "commands": 5,
  "transcript_bytes": 2024
 }
]