[
 {
  "id": "ddfce4b8-589b-49ff-9229-d976ec8e250c",
  "name": "pewter-mottled-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40924,
  "username": "faisal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 750,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:51:50.327883+00:00",
  "ended_at": "2026-08-26T15:51:51.487514+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2251
 },
 {
  "id": "455df0d7-69a8-4955-85fb-65d9caa75566",
  "name": "lunar-lofty-gull",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40926,
  "username": "faisal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T15:51:28.096135+00:00",
  "ended_at": "2026-08-26T15:51:29.527815+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "97d0f088-0d75-4a5c-857f-e2f1d644ec94",
  "name": "glassy-twilight-condor",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 63832,
  "username": "faisal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 285,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:57:47.237455+00:00",
  "ended_at": "2026-08-26T13:57:48.592237+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2154
 },
 {
  "id": "b21444ef-653a-4225-8aa4-0f917f9dc533",
  "name": "noble-cheerful-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 63852,
  "username": "faisal",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:57:21.228079+00:00",
  "ended_at": "2026-08-26T13:57:22.721288+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]