[
 {
  "id": "15b8cc85-2e01-49d5-8d23-197de278f1b5",
  "name": "inland-ashen-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "4.224.40.94",
  "src_port": 58494,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 617,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T16:13:55.703155+00:00",
  "ended_at": "2026-08-23T16:13:55.895998+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3943
 },
 {
  "id": "fef99d56-3c1c-475d-bfd6-e26b52095e1e",
  "name": "hazy-salty-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 56066,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:13:38.337085+00:00",
  "ended_at": "2026-08-23T16:13:38.696011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08d668e1-217a-49ae-a134-756c6ba22cf5",
  "name": "smooth-bold-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 58520,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:13:23.635414+00:00",
  "ended_at": "2026-08-23T16:13:24.839876+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "6d7e9dcf-9091-4e4a-9a42-a3f5369e719b",
  "name": "whispering-dusty-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 58504,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:13:20.816227+00:00",
  "ended_at": "2026-08-23T16:13:22.373017+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "fc24c732-24c6-48e0-bb86-23859419fd24",
  "name": "wiry-austere-skink",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "4.224.40.94",
  "src_port": 50036,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 612,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T16:10:49.760102+00:00",
  "ended_at": "2026-08-23T16:10:50.485027+00:00",
  "ended_reason": "exec complete",
  "commands": 5,
  "transcript_bytes": 704
 },
 {
  "id": "1cfc70a3-1591-4264-883f-db0022b95f90",
  "name": "airy-brave-wolverine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 37932,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:10:46.655586+00:00",
  "ended_at": "2026-08-23T16:10:48.342413+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "589c6608-e9de-44db-830d-d9c6235156e6",
  "name": "smooth-muted-gull",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 50050,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:10:43.849584+00:00",
  "ended_at": "2026-08-23T16:10:45.489013+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1cd37643-d6fd-4eb0-9ce8-fecfb4a37c13",
  "name": "hazel-thawing-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 47668,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:08:04.172080+00:00",
  "ended_at": "2026-08-23T16:08:05.176005+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "686262a0-f037-45b6-8b9a-c54fe88ba991",
  "name": "quaint-silent-fossa",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 60000,
  "username": "user001",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:02:17.384126+00:00",
  "ended_at": "2026-08-23T16:02:19.373031+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]