[
 {
  "id": "dd05d352-deb2-4686-8fd3-2bedf4f19476",
  "name": "frosty-electric-shrike",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 40492,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 327,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:49:57.375321+00:00",
  "ended_at": "2026-08-27T12:49:59.504062+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "3c97d983-e6d4-4c13-ae82-f8fb16ae5619",
  "name": "bashful-ruddy-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 37328,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:49:39.449497+00:00",
  "ended_at": "2026-08-27T12:49:40.533083+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5cd78e11-7c61-462e-a56c-3c4ae0d6382f",
  "name": "canny-grassy-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 51418,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 299,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:10:38.041176+00:00",
  "ended_at": "2026-08-27T12:10:39.407092+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2244
 },
 {
  "id": "d2c45826-e87c-44f2-98c3-cf20b94f7a3d",
  "name": "craggy-sunlit-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 51430,
  "username": "dan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:10:23.939006+00:00",
  "ended_at": "2026-08-27T12:10:24.984147+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]