[
 {
  "id": "28a4ee71-6a88-4b33-8da9-041526a4ef56",
  "name": "hazel-cobalt-narwhal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 33152,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 730,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:23:18.917772+00:00",
  "ended_at": "2026-08-27T12:23:20.111497+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2243
 },
 {
  "id": "3714f82b-a475-4738-8c29-603e0ca03865",
  "name": "hazy-merry-springbok",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59156,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 448,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:40:03.459700+00:00",
  "ended_at": "2026-08-27T11:40:05.021398+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2221
 },
 {
  "id": "98ec9487-31d4-4515-8367-f0bbe33257ec",
  "name": "eager-polar-antelope",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "168.167.228.123",
  "src_port": 40689,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 749,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T14:09:21.961709+00:00",
  "ended_at": "2026-08-26T14:09:22.996074+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2159
 },
 {
  "id": "1acaed3f-f46f-4bc5-bb50-d204692265c4",
  "name": "solemn-sandy-impala",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "157.245.34.56",
  "src_port": 53458,
  "username": "fs",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 294,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T13:51:45.885664+00:00",
  "ended_at": "2026-08-26T13:51:47.363054+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2115
 }
]