[
 {
  "id": "d33947eb-53b3-405c-91a6-f98649ff6c5c",
  "name": "scarlet-mellow-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 55332,
  "username": "promo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 302,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:47:42.878274+00:00",
  "ended_at": "2026-08-26T14:47:44.735311+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "e1039607-53cd-4916-ae6a-e550e313b5a4",
  "name": "frosty-somber-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "157.245.34.56",
  "src_port": 55932,
  "username": "promo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T14:47:26.351133+00:00",
  "ended_at": "2026-08-26T14:47:27.060332+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "0af7d103-2e98-4bdb-876a-147ebe8b9ad0",
  "name": "honest-thrifty-quoll",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40606,
  "username": "promo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 753,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:49:39.315397+00:00",
  "ended_at": "2026-08-26T13:49:40.995564+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2085
 },
 {
  "id": "b0008d69-3daa-41b3-81e3-cf0329c83e2e",
  "name": "ginger-whispering-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "168.167.228.123",
  "src_port": 40608,
  "username": "promo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T13:49:16.311970+00:00",
  "ended_at": "2026-08-26T13:49:18.449908+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]