[
 {
  "id": "ef9be64f-5e8e-4a96-9bca-4e987a8034c4",
  "name": "proud-watchful-stork",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "159.223.97.218",
  "src_port": 34128,
  "username": "reporting",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 50,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T04:19:17.313792+00:00",
  "ended_at": "2026-08-23T04:19:17.317810+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3514
 }
]