[
 {
  "id": "bd34f6e4-d94b-47d5-accb-f6619a1343f5",
  "name": "jovial-velvet-pochard",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "172.191.239.155",
  "src_port": 40632,
  "username": "noah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 71,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:08:25.924409+00:00",
  "ended_at": "2026-08-25T20:08:25.932797+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3738
 },
 {
  "id": "5ab389f2-2ab3-4d81-b9ca-0b4d742dd8ff",
  "name": "lunar-orderly-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.174.238.116",
  "src_port": 48254,
  "username": "noah",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 368,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:00:06.348189+00:00",
  "ended_at": "2026-08-25T20:00:06.453476+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3214
 }
]