[
 {
  "id": "d68e795d-0238-423e-96e6-2564f0322124",
  "name": "granite-graceful-gannet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 36960,
  "username": "jose",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 771,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:20:26.707624+00:00",
  "ended_at": "2026-08-27T12:20:28.475440+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2241
 },
 {
  "id": "462bcad2-96e7-4009-8fcf-c480a2a1195a",
  "name": "scarlet-umber-redshank",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 53734,
  "username": "jose",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:20:04.634787+00:00",
  "ended_at": "2026-08-27T12:20:06.896499+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c58e1721-0fd6-46fd-a197-2dbcadda5834",
  "name": "somber-merry-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 58992,
  "username": "jose",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 461,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:23:21.713753+00:00",
  "ended_at": "2026-08-27T11:23:22.669445+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2151
 },
 {
  "id": "ca02d5c0-e6e1-4d0e-a650-7e09dcaa640a",
  "name": "smooth-misty-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59008,
  "username": "jose",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:23:04.638437+00:00",
  "ended_at": "2026-08-27T11:23:05.412928+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]