[
 {
  "id": "2f3d1d3c-f051-44e5-b47e-b55406fe1d31",
  "name": "dapper-barren-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40683,
  "username": "pixel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 747,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:03:29.804588+00:00",
  "ended_at": "2026-08-26T14:03:30.806226+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2140
 },
 {
  "id": "23b91b44-6591-4fe9-9a5a-85673528c6bf",
  "name": "bitter-wiry-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40685,
  "username": "pixel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:03:06.926203+00:00",
  "ended_at": "2026-08-26T14:03:08.875271+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e4d6094e-7276-43a2-845a-328c4555f3bf",
  "name": "vigilant-amiable-egret",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 56164,
  "username": "pixel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 278,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:39:44.534056+00:00",
  "ended_at": "2026-08-26T13:39:45.132972+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2052
 },
 {
  "id": "02f33255-4654-4a6c-bbb3-bb4b12a9245c",
  "name": "fabled-snowy-jay",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 56168,
  "username": "pixel",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:39:37.212549+00:00",
  "ended_at": "2026-08-26T13:39:38.690383+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]