[
 {
  "id": "0711f6bd-c518-4930-b97a-9ae81a912692",
  "name": "russet-fabled-nuthatch",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 48292,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T04:38:04.156263+00:00",
  "ended_at": "2026-08-25T04:38:04.160319+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c9ca2c84-e599-4dfd-b40a-92acfaa16497",
  "name": "stormy-pewter-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "195.178.191.5",
  "src_port": 46574,
  "username": "redmine",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 381,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T03:04:54.158569+00:00",
  "ended_at": "2026-08-25T03:04:54.269691+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3561
 },
 {
  "id": "cfaee1fc-62c8-4777-bf49-13d7c0166af2",
  "name": "bitter-grassy-dipper",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 60494,
  "username": "redmine",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:04:39.625356+00:00",
  "ended_at": "2026-08-25T03:04:39.860656+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "75b4e5b7-c269-410d-a0e9-f843378a75ad",
  "name": "thawing-blithe-cheetah",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 38960,
  "username": "redmine",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:04:28.665422+00:00",
  "ended_at": "2026-08-25T03:04:30.083055+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "f74e8138-d373-4afb-9ce3-f321a2205e66",
  "name": "feathered-glassy-goshawk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 46578,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:04:26.136019+00:00",
  "ended_at": "2026-08-25T03:04:27.960498+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b8ee341e-319c-47e5-ae33-76bae54848cf",
  "name": "stormy-valiant-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 41128,
  "username": "ubuntu",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:02:25.539134+00:00",
  "ended_at": "2026-08-25T03:02:26.493012+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "2d7f44cb-85fd-42b0-a550-93f86a4772cf",
  "name": "ruddy-pewter-vervet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 56976,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T03:00:24.863146+00:00",
  "ended_at": "2026-08-25T03:00:26.229063+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4ff9c3da-ffe7-454b-b542-1a690b92dc36",
  "name": "nimble-sterling-albatross",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "195.178.191.5",
  "src_port": 49572,
  "username": "mehrdad",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T02:57:30.310441+00:00",
  "ended_at": "2026-08-25T02:57:31.148882+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]