[
 {
  "id": "c6bd8dbf-abde-4be4-b73d-76100143e4e1",
  "name": "rugged-scarlet-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40832,
  "username": "acer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 751,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:24:37.976212+00:00",
  "ended_at": "2026-08-26T15:24:39.423750+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "60c5228c-abee-415e-9ec6-50d9ecd0b02a",
  "name": "whispering-crisp-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40834,
  "username": "acer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:24:15.827647+00:00",
  "ended_at": "2026-08-26T15:24:17.509470+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cb7413ea-8ef5-458d-9ae3-1db2b223d063",
  "name": "early-blunt-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 54674,
  "username": "acer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 291,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:45:52.160935+00:00",
  "ended_at": "2026-08-26T13:45:53.165272+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2076
 },
 {
  "id": "3779d44f-2585-4132-895f-a61258f73d2c",
  "name": "muted-amber-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 54694,
  "username": "acer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:45:38.451660+00:00",
  "ended_at": "2026-08-26T13:45:40.021744+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]