[
 {
  "id": "bdaf581a-cda9-473b-b316-93f54c67069b",
  "name": "foggy-cunning-pipit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.63.62.103",
  "src_port": 38488,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 917,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:46:37.478805+00:00",
  "ended_at": "2026-08-23T13:46:37.768414+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3538
 },
 {
  "id": "1630763a-1328-4896-a396-c8eac5e9fdbc",
  "name": "frank-nautical-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.63.62.103",
  "src_port": 34728,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:41:47.553803+00:00",
  "ended_at": "2026-08-23T13:41:48.507007+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 68
 },
 {
  "id": "3524371a-db6c-47d8-8c58-6d5a4805d974",
  "name": "quaint-weathered-fennec",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "41.63.62.103",
  "src_port": 43436,
  "username": "amir",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1645,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T13:37:37.092215+00:00",
  "ended_at": "2026-08-23T13:37:39.352565+00:00",
  "ended_reason": "exec complete",
  "commands": 4,
  "transcript_bytes": 773
 }
]