[
 {
  "id": "2535591c-2b0a-4f61-a8ab-8cd924229163",
  "name": "stoic-fearless-peccary",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40847,
  "username": "ajay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 762,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:38:13.799757+00:00",
  "ended_at": "2026-08-26T15:38:15.323567+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2255
 },
 {
  "id": "39c06f6f-441e-47fa-88db-4f326e9e8950",
  "name": "velvet-languid-meerkat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40849,
  "username": "ajay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:37:51.638751+00:00",
  "ended_at": "2026-08-26T15:37:52.754414+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2a30883d-7b95-49f9-91bd-66ddac1924e6",
  "name": "fierce-valiant-penguin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 52088,
  "username": "ajay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 298,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:37:42.190540+00:00",
  "ended_at": "2026-08-26T13:37:42.793002+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2046
 },
 {
  "id": "a18a4021-a7d7-4abf-ad17-d3c33a1c8106",
  "name": "twilight-opal-badger",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 54272,
  "username": "ajay",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:37:34.938838+00:00",
  "ended_at": "2026-08-26T13:37:35.960526+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]