[
 {
  "id": "651ec677-83a6-4d7f-b33e-6e77280c89dc",
  "name": "scarlet-candid-reindeer",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.102.98.53",
  "src_port": 38006,
  "username": "es1",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 65,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T09:51:04.655389+00:00",
  "ended_at": "2026-08-25T09:51:04.662733+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3254
 },
 {
  "id": "d0bc5787-46a5-4e4a-8fcb-9ae66d4739cf",
  "name": "earnest-rambling-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "20.102.98.53",
  "src_port": 49848,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 65,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T04:52:11.093291+00:00",
  "ended_at": "2026-08-23T04:52:11.099503+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3537
 }
]