[
 {
  "id": "414307d0-dd10-440b-9f46-4fa975f862e3",
  "name": "orderly-thawing-gibbon",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "129.121.114.225",
  "src_port": 47676,
  "username": "test_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T22:46:19.827969+00:00",
  "ended_at": "2026-08-26T22:46:20.812519+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2270
 },
 {
  "id": "45b602c4-0d17-4e60-aaa0-b21022b3b144",
  "name": "tangled-austere-flamingo",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 51220,
  "username": "test_user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 221,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:22:53.142775+00:00",
  "ended_at": "2026-08-21T13:23:00.051894+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1653
 },
 {
  "id": "21488d7f-4f81-47ab-bbcd-6d42f7b2d3ff",
  "name": "jovial-whispering-goose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 51434,
  "username": "test_user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:15:19.281807+00:00",
  "ended_at": "2026-08-20T19:15:26.752631+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1646
 },
 {
  "id": "c9bef0ab-92b5-48f0-b3ea-f268fe667d34",
  "name": "painted-lanky-gull",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 55312,
  "username": "test_user",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 195,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:55:26.832700+00:00",
  "ended_at": "2026-08-20T10:55:28.986576+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1477
 }
]