[
 {
  "id": "3c8a58e8-62e7-43b5-ad7c-8cf90e2d120e",
  "name": "regal-slender-goldfinch",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 50998,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T15:05:32.726271+00:00",
  "ended_at": "2026-08-26T15:05:34.184077+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "30db74f5-79a5-4ca9-a2a4-22cd2d389aa2",
  "name": "nautical-emerald-rook",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40680,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 758,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:00:51.104083+00:00",
  "ended_at": "2026-08-26T14:00:52.317010+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2128
 },
 {
  "id": "3248d717-3fd0-465f-8193-0b9b2257996f",
  "name": "ruddy-blunt-jerboa",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.233.213.67",
  "src_port": 38870,
  "username": "syncuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 726,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:31:50.657780+00:00",
  "ended_at": "2026-08-26T13:31:51.456511+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2040
 }
]