[
 {
  "id": "bda5fd82-149a-466a-b1a2-d839e9b74824",
  "name": "emerald-tawny-snipe",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.255.195.46",
  "src_port": 56260,
  "username": "esadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 263,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:31:33.624503+00:00",
  "ended_at": "2026-08-27T12:31:34.849961+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2266
 },
 {
  "id": "c13d7269-efbb-4d3a-b4f5-bef321686ba6",
  "name": "snowy-seaward-antelope",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.255.195.46",
  "src_port": 56284,
  "username": "esadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:31:19.414910+00:00",
  "ended_at": "2026-08-27T12:31:20.550789+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8ac7037e-28ab-4099-85d8-9ddc2d4f14e3",
  "name": "tender-austere-kea",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "104.43.56.65",
  "src_port": 53238,
  "username": "esadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 451,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T23:28:01.778746+00:00",
  "ended_at": "2026-08-25T23:28:03.835542+00:00",
  "ended_reason": "exec complete",
  "commands": 10,
  "transcript_bytes": 1353
 },
 {
  "id": "ee8baafe-679f-4681-a7da-fabaf88bcdb1",
  "name": "amiable-early-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "104.43.56.65",
  "src_port": 54576,
  "username": "esadmin",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T23:27:30.899394+00:00",
  "ended_at": "2026-08-25T23:28:03.833873+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]