[
 {
  "id": "ee9d9728-bdcb-4943-b9e5-368e21f93454",
  "name": "whispering-hazy-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "98.70.50.166",
  "src_port": 41214,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T08:52:46.484465+00:00",
  "ended_at": "2026-08-25T08:52:46.663187+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3815
 },
 {
  "id": "4a0c9132-6dee-4f72-9d68-d4faa24a1033",
  "name": "gleaming-placid-osprey",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "171.25.158.70",
  "src_port": 57626,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 373,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T00:58:21.019162+00:00",
  "ended_at": "2026-08-23T00:58:21.109836+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3397
 },
 {
  "id": "cc026bcb-8f37-418f-a853-ad13d79e6f45",
  "name": "slender-northern-dolphin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.230.18.133",
  "src_port": 57384,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 306,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T18:12:23.831896+00:00",
  "ended_at": "2026-08-21T18:12:23.919344+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3758
 }
]