[
 {
  "id": "2fff6f85-2712-4ea8-84b4-cefa73d5075b",
  "name": "sooty-supple-linnet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 52768,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T00:37:57.839522+00:00",
  "ended_at": "2026-08-22T00:37:57.841098+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "14592ca2-05d5-49de-bc8c-a65243d8b786",
  "name": "crisp-thrifty-vole",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "117.193.74.35",
  "src_port": 59762,
  "username": "moodle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 755,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-21T22:41:24.962326+00:00",
  "ended_at": "2026-08-21T22:41:25.198772+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3571
 },
 {
  "id": "00b3cb3c-f875-400b-a02c-f66908386bb1",
  "name": "tangled-silent-roebuck",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 46410,
  "username": "moodle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:41:05.464858+00:00",
  "ended_at": "2026-08-21T22:41:06.007064+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "1f81f91e-f16b-4138-935b-c4cf1f56c3dd",
  "name": "gnarled-gentle-cougar",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 59088,
  "username": "moodle",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:40:46.785466+00:00",
  "ended_at": "2026-08-21T22:40:48.174884+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "bbb9454e-2bd8-49c1-a896-aa1d2f2761c1",
  "name": "shifting-smoky-lynx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 59080,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:40:43.385923+00:00",
  "ended_at": "2026-08-21T22:40:45.287475+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f3118786-b7f2-43d2-ac49-1a16c5cc2b85",
  "name": "polar-hushed-kakapo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 47610,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:38:10.117358+00:00",
  "ended_at": "2026-08-21T22:38:12.097442+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f1af2f3f-874a-418a-9ef8-8243ac7a366a",
  "name": "windswept-sterling-tamarin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 59240,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:35:35.567183+00:00",
  "ended_at": "2026-08-21T22:35:36.777363+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "81763824-00e9-45dd-8f19-eed0b03f43a8",
  "name": "oaken-pewter-penguin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "117.193.74.35",
  "src_port": 35278,
  "username": "juan",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T22:28:34.923097+00:00",
  "ended_at": "2026-08-21T22:28:36.491540+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]