[
 {
  "id": "1add9c6a-d9ed-4411-b852-9745e7fff254",
  "name": "boreal-wry-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "153.75.82.171",
  "src_port": 39510,
  "username": "supervisor",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "dir=\"\"; for d in /tmp /var/tmp /dev/shm /home /root; do if [ -w \"$d\" ]; then dir=\"$d\"; break; fi; done; echo \"$dir\"",
  "started_at": "2026-08-27T08:04:15.482020+00:00",
  "ended_at": "2026-08-27T11:34:34.517602+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 148
 },
 {
  "id": "23b75d17-2529-4a73-beb3-d6e4c79ac5bc",
  "name": "vigilant-noble-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.6",
  "src_port": 53880,
  "username": "supervisor",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 162,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T10:29:27.547442+00:00",
  "ended_at": "2026-08-22T10:29:33.940213+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1664
 }
]