[
 {
  "id": "8601141e-53d7-4fed-b4c3-ae24d34ccf98",
  "name": "jaunty-knotted-teal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 49574,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:06:01.699560+00:00",
  "ended_at": "2026-08-27T12:06:02.807032+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2219
 },
 {
  "id": "68daff2e-5e47-4b94-a6d2-381c057365bc",
  "name": "sterling-nautical-kingfisher",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "2.26.148.64",
  "src_port": 49594,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:05:45.699456+00:00",
  "ended_at": "2026-08-27T12:05:47.566851+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7338cb8b-e99c-4638-9e23-187ab0939eab",
  "name": "northern-granite-heron",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 47946,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:28:57.550615+00:00",
  "ended_at": "2026-08-27T11:28:58.161223+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2032
 },
 {
  "id": "e93c504c-02f8-4f14-9a11-cde45d9acd15",
  "name": "jolly-kindly-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.218.67.81",
  "src_port": 47954,
  "username": "yf",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:28:49.564318+00:00",
  "ended_at": "2026-08-27T11:28:51.438566+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]