[
 {
  "id": "ccb26996-e1ac-4a5b-8002-ce994eb21bec",
  "name": "western-quaint-marmot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 39030,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:54:27.326984+00:00",
  "ended_at": "2026-08-20T14:54:27.329240+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9d97c634-71cf-4395-9707-f7b02c0c87c2",
  "name": "deft-frank-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "139.59.28.125",
  "src_port": 34268,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 678,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:57:42.460636+00:00",
  "ended_at": "2026-08-20T12:57:42.669225+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3631
 },
 {
  "id": "af73f2ec-9405-476f-9aa6-2243ed1a57f5",
  "name": "pleasant-zealous-camel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 55556,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:57:23.977012+00:00",
  "ended_at": "2026-08-20T12:57:24.444276+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "41faf6e2-bd18-45b2-81ec-a470d8572d18",
  "name": "shifting-nimble-tinamou",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 34282,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:57:04.152504+00:00",
  "ended_at": "2026-08-20T12:57:05.119045+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7a9125d6-e9a5-4907-ae56-88e9c414c8f3",
  "name": "cunning-tender-gecko",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 34272,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:57:01.369327+00:00",
  "ended_at": "2026-08-20T12:57:02.778791+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "21eda172-ee61-4bcc-831f-ffe1f2d8831c",
  "name": "curious-mossy-agouti",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 48510,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:54:33.250662+00:00",
  "ended_at": "2026-08-20T12:54:34.470073+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c03a6afa-ed7c-49c0-ac82-363db36f42d9",
  "name": "glacial-honest-shrike",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 42364,
  "username": "ems",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:51:56.151877+00:00",
  "ended_at": "2026-08-20T12:51:57.404993+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "206b6ecf-38d5-48b7-9e3e-988c8178eee9",
  "name": "brave-fringed-zebu",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "139.59.28.125",
  "src_port": 45710,
  "username": "ops",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:48:47.453207+00:00",
  "ended_at": "2026-08-20T12:48:48.254666+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]