[
 {
  "id": "464cf29c-a5b7-42bb-a3fa-d990165de08a",
  "name": "brave-foggy-oryx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "2.26.148.64",
  "src_port": 57670,
  "username": "cuckoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 328,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:17:38.862670+00:00",
  "ended_at": "2026-08-27T12:17:40.888936+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2249
 },
 {
  "id": "7d4b415a-43b3-43d8-a0cb-ff2a3ce124f5",
  "name": "hazel-buoyant-pelican",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.218.67.81",
  "src_port": 60424,
  "username": "cuckoo",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 295,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:41:12.249331+00:00",
  "ended_at": "2026-08-27T11:41:14.246162+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2110
 }
]