[
 {
  "id": "155eff6a-eed9-446d-b3d5-afc57e49f2f3",
  "name": "hazy-lanky-stork",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 64135,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T21:59:25.266507+00:00",
  "ended_at": "2026-08-25T21:59:25.269893+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "97698eff-26fd-483a-afc7-fc2c4f06b0dc",
  "name": "ancient-tranquil-addax",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "185.158.22.150",
  "src_port": 32670,
  "username": "mega",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 518,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T20:00:52.318042+00:00",
  "ended_at": "2026-08-25T20:00:52.476609+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3539
 },
 {
  "id": "6cc6e643-2768-4af7-94bf-525aac78b334",
  "name": "cobalt-bronzed-impala",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 27270,
  "username": "mega",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:00:35.815768+00:00",
  "ended_at": "2026-08-25T20:00:36.074467+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "38564a86-182a-4b23-bb24-0dc1bfe4b53f",
  "name": "weathered-courtly-porcupine",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 29491,
  "username": "mega",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:00:21.315113+00:00",
  "ended_at": "2026-08-25T20:00:23.039012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "9401ba9a-3d20-49bf-bbaf-bedb7fd93993",
  "name": "knotted-loyal-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 1723,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T20:00:18.781787+00:00",
  "ended_at": "2026-08-25T20:00:20.259654+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "8c7af539-85a9-452e-9c3d-29e4d35e81dc",
  "name": "foggy-quartz-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 53377,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T13:51:30.569202+00:00",
  "ended_at": "2026-08-25T13:51:30.571839+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e94bbb20-9ab1-4579-83a3-b31d8d25d26c",
  "name": "snowy-prickly-moorhen",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "185.158.22.150",
  "src_port": 51641,
  "username": "eric",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 515,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T12:00:45.324526+00:00",
  "ended_at": "2026-08-25T12:00:45.482622+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3891
 },
 {
  "id": "f9fdf080-0c81-4840-a75f-93144016f2ed",
  "name": "freckled-flinty-gerbil",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 12427,
  "username": "eric",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:00:27.426018+00:00",
  "ended_at": "2026-08-25T12:00:27.770823+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b5d97e73-e332-41a3-a1e3-e110e5488e74",
  "name": "emerald-flinty-puffin",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 22117,
  "username": "eric",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:00:13.856843+00:00",
  "ended_at": "2026-08-25T12:00:14.802555+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "7fe8356e-30f9-4446-a451-82b92940e727",
  "name": "twilight-wistful-brambling",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 36755,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T12:00:11.295285+00:00",
  "ended_at": "2026-08-25T12:00:12.813945+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b627994a-920c-41f8-b246-425b3736ff36",
  "name": "forlorn-brisk-egret",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 56112,
  "username": "deployer",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:57:49.971952+00:00",
  "ended_at": "2026-08-25T11:57:51.691670+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "19b2f198-5c55-4d9f-b6f8-b21c7a8b0536",
  "name": "graceful-tender-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "185.158.22.150",
  "src_port": 27251,
  "username": "fivem",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:55:01.522057+00:00",
  "ended_at": "2026-08-25T11:55:03.524273+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]