[
 {
  "id": "226ca8b8-8952-4e81-9e49-94cbe42a94be",
  "name": "leafy-curious-avocet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "179.176.210.17",
  "src_port": 45675,
  "username": "andrew",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 438,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T21:14:31.390603+00:00",
  "ended_at": "2026-08-25T21:14:31.522244+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3935
 },
 {
  "id": "3f5e7320-7a8e-409d-8646-7504151cd6af",
  "name": "russet-salty-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.176.210.17",
  "src_port": 50586,
  "username": "andrew",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:14:10.421187+00:00",
  "ended_at": "2026-08-25T21:14:10.728333+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "60cabf40-cf01-430c-a0aa-82d7795bc4fe",
  "name": "crisp-proud-curlew",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "179.176.210.17",
  "src_port": 46612,
  "username": "andrew",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:13:57.757119+00:00",
  "ended_at": "2026-08-25T21:13:59.267964+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]