[
 {
  "id": "cdbf87b6-6b07-439a-9813-fa0a635c4e99",
  "name": "feathered-prickly-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 42238,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T14:59:09.573722+00:00",
  "ended_at": "2026-08-20T14:59:09.578555+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "16ce8ab6-9ac3-48a6-8acf-2f1f38563712",
  "name": "meadow-northern-bison",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "81.193.216.17",
  "src_port": 56682,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 408,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T12:49:19.537181+00:00",
  "ended_at": "2026-08-20T12:49:19.664175+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3907
 },
 {
  "id": "8706d8f0-bbaf-4f71-80fa-84f375abd2f0",
  "name": "idle-rugged-quail",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 34176,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:49:03.844882+00:00",
  "ended_at": "2026-08-20T12:49:04.213119+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "e7ea7118-db2a-46c5-bd93-a95f7df5941d",
  "name": "fringed-ashen-tanager",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 57738,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:48:46.952600+00:00",
  "ended_at": "2026-08-20T12:48:48.064238+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4687739b-bc51-4a64-8b4b-5dfc109208ca",
  "name": "flinty-crimson-vole",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 57176,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:48:44.953503+00:00",
  "ended_at": "2026-08-20T12:48:45.600725+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c361c344-b760-4e1b-9f8b-1cf3f9fd7963",
  "name": "sunlit-marine-flamingo",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 37790,
  "username": "test1",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:45:50.864331+00:00",
  "ended_at": "2026-08-20T12:45:51.737479+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "4435726d-e1e5-4a9a-848e-5105f06b4c3a",
  "name": "mighty-russet-stoat",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 47054,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:42:52.179667+00:00",
  "ended_at": "2026-08-20T12:42:52.898619+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "dec57667-a124-4eea-9c9f-8b44e6941fa6",
  "name": "hazel-austere-sable",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "81.193.216.17",
  "src_port": 47884,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.11.1",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T12:39:10.585961+00:00",
  "ended_at": "2026-08-20T12:39:12.562598+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]