[
 {
  "id": "d27116ad-ef5d-405a-8ba3-900356dd6740",
  "name": "misty-hollow-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 35412,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T20:34:49.297531+00:00",
  "ended_at": "2026-08-23T20:34:49.304902+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "545cffd7-03e3-4536-b36a-0ee8088e6f97",
  "name": "forlorn-foggy-cheetah",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.216.145.2",
  "src_port": 49688,
  "username": "john",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 618,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-23T18:39:50.081206+00:00",
  "ended_at": "2026-08-23T18:39:50.275426+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3384
 },
 {
  "id": "475f7402-9029-45fe-a592-1f194a4e9e8d",
  "name": "rustic-earnest-thrush",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 57866,
  "username": "john",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:39:28.786125+00:00",
  "ended_at": "2026-08-23T18:39:29.113998+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ef334b04-f69b-4b7e-a309-8b33f5f74eaf",
  "name": "noble-buoyant-polecat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 51754,
  "username": "john",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:39:13.739086+00:00",
  "ended_at": "2026-08-23T18:39:15.687196+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7654a3ee-953a-42fe-bcfc-dd9aa3a6eebe",
  "name": "noble-bitter-fennec",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 50608,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:39:10.618144+00:00",
  "ended_at": "2026-08-23T18:39:12.458173+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "253ebc1f-c005-42fb-b3b0-0822ebb67d2a",
  "name": "jolly-jaunty-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 55562,
  "username": "hassan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:36:38.252065+00:00",
  "ended_at": "2026-08-23T18:36:39.073061+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "a6d2123d-a431-4da2-b4f9-a785e41a3f15",
  "name": "jagged-noble-falcon",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 33034,
  "username": "plex",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:34:03.597090+00:00",
  "ended_at": "2026-08-23T18:34:04.885061+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f8d1b88-7ff5-437d-92e7-8c545d3b1780",
  "name": "stoic-languid-wombat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.216.145.2",
  "src_port": 53734,
  "username": "jerry",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-23T18:29:21.966259+00:00",
  "ended_at": "2026-08-23T18:29:23.887066+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]