[
 {
  "id": "f20ca156-5938-4013-9223-6f3669e2c19f",
  "name": "kindly-vigilant-magpie",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "14.103.117.85",
  "src_port": 46276,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T08:00:42.628859+00:00",
  "ended_at": "2026-08-26T08:00:44.518169+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "10c096a6-d830-4338-a5e8-b53ab0c3bd95",
  "name": "stoic-pewter-thrush",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "14.103.117.85",
  "src_port": 46272,
  "username": "mk",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T08:00:38.175604+00:00",
  "ended_at": "2026-08-26T08:04:38.682102+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "c24006b0-8986-42fe-aeef-4e27b0e93b1a",
  "name": "rapid-forlorn-ocelot",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "14.103.117.85",
  "src_port": 48826,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-26T07:25:54.117484+00:00",
  "ended_at": "2026-08-26T07:29:54.189080+00:00",
  "ended_reason": "exec complete",
  "commands": 1,
  "transcript_bytes": 65
 },
 {
  "id": "b9f7f7c9-8d56-403c-bf9c-c2a341a8c869",
  "name": "upland-prickly-cicada",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "14.103.117.85",
  "src_port": 42556,
  "username": "gecko",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T07:20:17.270782+00:00",
  "ended_at": "2026-08-26T07:20:19.132215+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]