[
 {
  "id": "968341c1-d34d-4470-806b-cb94fa62108f",
  "name": "languid-ivory-pangolin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59630,
  "username": "zsolt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 444,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:26:45.087105+00:00",
  "ended_at": "2026-08-27T12:26:46.215932+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2250
 },
 {
  "id": "c23adb4a-128c-4966-a030-6d229fb93564",
  "name": "rapid-watchful-sparrow",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59652,
  "username": "zsolt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:26:27.916026+00:00",
  "ended_at": "2026-08-27T12:26:29.424429+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cfc4bd2b-d7d2-4909-869e-dd8260b74390",
  "name": "cunning-bashful-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 54944,
  "username": "zsolt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 733,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:36:56.632904+00:00",
  "ended_at": "2026-08-27T11:36:57.998390+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2206
 },
 {
  "id": "0159a5b6-b8fb-4ad4-a291-95b17c2b13d5",
  "name": "mindful-fleeting-fieldfare",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 47672,
  "username": "zsolt",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:36:33.754902+00:00",
  "ended_at": "2026-08-27T11:36:35.080416+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]