[
 {
  "id": "a2c236f7-2839-4941-bb53-aa3b458360f4",
  "name": "western-plucky-godwit",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 57616,
  "username": "zhangy",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:24:46.018326+00:00",
  "ended_at": "2026-08-21T02:28:46.524192+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "8013ee7d-8e3d-4266-a959-95e31c27cc7d",
  "name": "fearless-snowy-shearwater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 56818,
  "username": "juan",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:21:25.538532+00:00",
  "ended_at": "2026-08-21T02:25:26.083672+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "c606538a-c1d8-4ce5-903c-5350839f9a6c",
  "name": "indigo-frank-nightjar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 54442,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:12:13.242521+00:00",
  "ended_at": "2026-08-21T02:16:13.759325+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "0bab218b-4396-4d61-93ef-3a5f8b5a3da7",
  "name": "gilded-vernal-mongoose",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 58062,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:08:47.567943+00:00",
  "ended_at": "2026-08-21T02:12:48.070201+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "81574ec3-1616-4a25-821c-6fafd0659ee4",
  "name": "barren-honest-puffin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 51718,
  "username": "hammad",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T02:05:21.120455+00:00",
  "ended_at": "2026-08-21T02:09:21.640155+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "dc7d8eb0-c601-42d5-961b-901c0a5c6f34",
  "name": "gentle-languid-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 45144,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:58:28.159941+00:00",
  "ended_at": "2026-08-21T01:59:26.951486+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "297c7fce-9008-4362-a269-6a8332a37f68",
  "name": "frank-fringed-walrus",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 45128,
  "username": "dylan",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:58:26.498630+00:00",
  "ended_at": "2026-08-21T02:02:27.048301+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "4843135d-4b45-43de-a6fa-09c7f4666a5b",
  "name": "boreal-fierce-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 51026,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:49:24.665911+00:00",
  "ended_at": "2026-08-21T01:50:23.532986+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "33548dd1-e720-41ab-a233-293f0741aea3",
  "name": "marine-zealous-wheatear",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 51020,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:49:23.102371+00:00",
  "ended_at": "2026-08-21T01:53:23.592656+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "d0275f62-63c3-4226-9bea-f34fa27046aa",
  "name": "tranquil-deft-skylark",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 57496,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:42:37.112659+00:00",
  "ended_at": "2026-08-21T01:43:35.967251+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "183acb6a-506c-47d3-9172-6a8c9660c476",
  "name": "brazen-smooth-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 57486,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:42:35.517747+00:00",
  "ended_at": "2026-08-21T01:46:36.048112+00:00",
  "ended_reason": "exec complete",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "353239fd-e706-4544-86a0-34fd8e12acb8",
  "name": "shaded-lofty-avocet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 55458,
  "username": "appuser",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:36:05.063034+00:00",
  "ended_at": "2026-08-21T01:36:06.566252+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98231349-0a42-4fdd-a185-c679db51f430",
  "name": "buoyant-burly-pangolin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 55444,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:36:02.261863+00:00",
  "ended_at": "2026-08-21T01:36:03.692604+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "263b73b0-198f-4236-8b4d-73206eef4f45",
  "name": "mottled-sandy-camel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 55430,
  "username": "appuser",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:36:00.655826+00:00",
  "ended_at": "2026-08-21T01:40:01.203836+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "27cfb488-312b-4e2f-8d96-31ae8c422d9d",
  "name": "autumn-airy-sandpiper",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "36.110.172.218",
  "src_port": 39458,
  "username": "user",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T01:32:28.133574+00:00",
  "ended_at": "2026-08-21T01:36:28.615751+00:00",
  "ended_reason": "connection lost",
  "commands": 2,
  "transcript_bytes": 522
 },
 {
  "id": "1629d22c-18a2-4b71-82f3-b4b23c3bbbcc",
  "name": "wooded-amber-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 55168,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:31:19.954680+00:00",
  "ended_at": "2026-08-21T01:31:20.878174+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ce1a3fa9-94e6-41c5-9a64-3d358e020dd2",
  "name": "lanky-bold-opossum",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "36.110.172.218",
  "src_port": 58176,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T01:23:52.760318+00:00",
  "ended_at": "2026-08-21T01:23:53.985665+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]