[
 {
  "id": "0df1f6c7-9098-4009-9dbe-b63024e6c927",
  "name": "crimson-crisp-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.4.145.50",
  "src_port": 36516,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 830,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T14:05:31.611089+00:00",
  "ended_at": "2026-08-27T14:05:33.842343+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2193
 },
 {
  "id": "f7bf5d70-b7f4-4600-af85-0c95331b7225",
  "name": "wistful-meadow-bison",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.4.145.50",
  "src_port": 38238,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T14:04:55.553476+00:00",
  "ended_at": "2026-08-27T14:04:56.651194+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "522f4b42-b84d-4bf6-91b3-d747fd167d87",
  "name": "rapid-candid-porcupine",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 46664,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 516,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:27:42.331054+00:00",
  "ended_at": "2026-08-27T00:27:43.807106+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2078
 },
 {
  "id": "718f4a18-c6ec-4f05-8d52-f3eb7b154950",
  "name": "marbled-austere-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 56586,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:27:22.892741+00:00",
  "ended_at": "2026-08-27T00:27:24.656644+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "15b8cc85-2e01-49d5-8d23-197de278f1b5",
  "name": "inland-ashen-capuchin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "4.224.40.94",
  "src_port": 58494,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 617,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T16:13:55.703155+00:00",
  "ended_at": "2026-08-23T16:13:55.895998+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3943
 },
 {
  "id": "fef99d56-3c1c-475d-bfd6-e26b52095e1e",
  "name": "hazy-salty-gibbon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 56066,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:13:38.337085+00:00",
  "ended_at": "2026-08-23T16:13:38.696011+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08d668e1-217a-49ae-a134-756c6ba22cf5",
  "name": "smooth-bold-moorhen",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "4.224.40.94",
  "src_port": 58520,
  "username": "mailuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T16:13:23.635414+00:00",
  "ended_at": "2026-08-23T16:13:24.839876+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]