[
 {
  "id": "6dbcae5e-128a-47be-b4ba-4b55025af095",
  "name": "fearless-early-pheasant",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 54184,
  "username": "inventory",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:37:52.731139+00:00",
  "ended_at": "2026-08-27T12:37:54.330812+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2260
 },
 {
  "id": "a1f41a3c-dbe5-46b1-8eb5-a6ad2b85ae3e",
  "name": "bashful-gallant-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57434,
  "username": "inventory",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 329,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:04:04.569186+00:00",
  "ended_at": "2026-08-27T12:04:06.052124+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2229
 }
]