[
 {
  "id": "2607b964-3572-425e-a8f9-b0e4a1652b9d",
  "name": "blunt-wistful-elk",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 52836,
  "username": null,
  "client_version": "",
  "auth_attempts": 0,
  "automation": "unknown",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T11:09:43.313199+00:00",
  "ended_at": "2026-08-25T11:09:43.313878+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "ee9d9728-bdcb-4943-b9e5-368e21f93454",
  "name": "whispering-hazy-blackbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "98.70.50.166",
  "src_port": 41214,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 591,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T08:52:46.484465+00:00",
  "ended_at": "2026-08-25T08:52:46.663187+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3815
 },
 {
  "id": "1081446a-cf30-4337-8a33-37358b3eaa7d",
  "name": "gleaming-solemn-civet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 38154,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:27.664502+00:00",
  "ended_at": "2026-08-25T08:52:27.933723+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "cc0916da-ba0c-4382-b02c-2ba65d8121fa",
  "name": "early-sunlit-eagle",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 41228,
  "username": "ftpuser",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:10.433909+00:00",
  "ended_at": "2026-08-25T08:52:11.568785+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "3378a321-bf56-4821-b609-977dc109b025",
  "name": "tidal-loyal-goldcrest",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 41218,
  "username": "345gs5662d34",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:52:07.788756+00:00",
  "ended_at": "2026-08-25T08:52:09.190564+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "de92c785-2a38-4ecd-a281-ed6af1d51631",
  "name": "jagged-steady-gannet",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 46262,
  "username": "root",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:49:29.258811+00:00",
  "ended_at": "2026-08-25T08:49:30.470086+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "31cf9b4f-5bc9-418b-a38c-dc3a1f696c92",
  "name": "daring-obsidian-oryx",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "98.70.50.166",
  "src_port": 57742,
  "username": "noc",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T08:46:35.454111+00:00",
  "ended_at": "2026-08-25T08:46:37.419114+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]