[
 {
  "id": "0df1f6c7-9098-4009-9dbe-b63024e6c927",
  "name": "crimson-crisp-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 36516,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 830,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:05:31.611089+00:00",
  "ended_at": "2026-08-27T14:05:33.842343+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2193
 },
 {
  "id": "522f4b42-b84d-4bf6-91b3-d747fd167d87",
  "name": "rapid-candid-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46664,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:27:42.331054+00:00",
  "ended_at": "2026-08-27T00:27:43.807106+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2078
 },
 {
  "id": "15b8cc85-2e01-49d5-8d23-197de278f1b5",
  "name": "inland-ashen-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "4.224.40.94",
  "src_port": 58494,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 617,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T16:13:55.703155+00:00",
  "ended_at": "2026-08-23T16:13:55.895998+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3943
 }
]