[
 {
  "id": "a9d9933a-f24d-47c7-b13f-224b574093e8",
  "name": "icy-patient-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 47686,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 884,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:42:43.634788+00:00",
  "ended_at": "2026-08-27T11:42:45.278090+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2225
 },
 {
  "id": "1be4dca7-3c2c-426d-8593-2b0c6da56cfc",
  "name": "lofty-pewter-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 43286,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:42:19.987082+00:00",
  "ended_at": "2026-08-27T11:42:21.125002+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "179f1b43-15f9-4ddc-bfe6-fc456e9b1d7a",
  "name": "gallant-arctic-chickadee",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59104,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T11:34:39.408017+00:00",
  "ended_at": "2026-08-27T11:34:40.897661+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2203
 },
 {
  "id": "b15736ba-104a-43d4-8a50-fdc02741c9fd",
  "name": "hearty-craggy-mole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59116,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T11:34:20.355705+00:00",
  "ended_at": "2026-08-27T11:34:22.165361+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1c289a18-b33d-4216-b800-326121ede8e9",
  "name": "solar-fabled-cicada",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "183.91.11.36",
  "src_port": 59360,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 829,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T10:44:14.502320+00:00",
  "ended_at": "2026-08-27T10:44:15.344863+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2049
 },
 {
  "id": "415b10fc-d6f8-4525-8db0-2797c02c513c",
  "name": "tidal-somber-bowerbird",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "183.91.11.36",
  "src_port": 60560,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T10:43:58.035631+00:00",
  "ended_at": "2026-08-27T10:44:00.122825+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bc359e45-55ba-409e-93c6-17db2ba5c4c0",
  "name": "shaded-hazy-vervet",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "51.12.221.15",
  "src_port": 41514,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 311,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-24T16:31:38.860509+00:00",
  "ended_at": "2026-08-24T16:31:38.948523+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3259
 },
 {
  "id": "d58d717f-bacc-4b1f-a4cb-3051d28328a8",
  "name": "rambling-dewy-cormorant",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 36684,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:31:25.064695+00:00",
  "ended_at": "2026-08-24T16:31:25.383188+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d2aa7c54-d577-450d-afc5-76e986c53a27",
  "name": "honest-lofty-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "51.12.221.15",
  "src_port": 41522,
  "username": "user14",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T16:31:14.836502+00:00",
  "ended_at": "2026-08-24T16:31:16.639642+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]