[
 {
  "id": "7821f2a4-c97d-4d17-94f9-e1d3d89ec220",
  "name": "sullen-pleasant-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59726,
  "username": "dockeruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 442,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:34:45.065151+00:00",
  "ended_at": "2026-08-27T12:34:46.235008+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2261
 },
 {
  "id": "321529d5-90ce-4b2c-a955-2ea421a8bb49",
  "name": "nameless-wistful-dunlin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59754,
  "username": "dockeruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:34:24.688330+00:00",
  "ended_at": "2026-08-27T12:34:25.690124+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e55a5425-53b1-4040-9d4e-3fe62324749d",
  "name": "burly-sturdy-muntjac",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 54118,
  "username": "dockeruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 761,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:04:17.340805+00:00",
  "ended_at": "2026-08-27T11:04:18.702216+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2096
 },
 {
  "id": "4081f3d5-a414-4495-ae65-f35a97250d75",
  "name": "granite-crisp-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 54140,
  "username": "dockeruser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:03:55.604168+00:00",
  "ended_at": "2026-08-27T11:03:56.560351+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]