[
 {
  "id": "a9d9933a-f24d-47c7-b13f-224b574093e8",
  "name": "icy-patient-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 47686,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 884,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:42:43.634788+00:00",
  "ended_at": "2026-08-27T11:42:45.278090+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2225
 },
 {
  "id": "179f1b43-15f9-4ddc-bfe6-fc456e9b1d7a",
  "name": "gallant-arctic-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59104,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:34:39.408017+00:00",
  "ended_at": "2026-08-27T11:34:40.897661+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2203
 },
 {
  "id": "1c289a18-b33d-4216-b800-326121ede8e9",
  "name": "solar-fabled-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "183.91.11.36",
  "src_port": 59360,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 829,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:44:14.502320+00:00",
  "ended_at": "2026-08-27T10:44:15.344863+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2049
 },
 {
  "id": "bc359e45-55ba-409e-93c6-17db2ba5c4c0",
  "name": "shaded-hazy-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.12.221.15",
  "src_port": 41514,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 311,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T16:31:38.860509+00:00",
  "ended_at": "2026-08-24T16:31:38.948523+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3259
 }
]