[
 {
  "id": "8dcaad64-e205-4415-9abc-8f80854c23a5",
  "name": "subtle-nautical-coyote",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "187.111.28.131",
  "src_port": 59896,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 457,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:50:33.190371+00:00",
  "ended_at": "2026-08-27T12:50:34.730862+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2269
 },
 {
  "id": "e0063e0c-2d86-42e5-9cad-9df45150e8d1",
  "name": "hidden-fickle-chinchilla",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "187.111.28.131",
  "src_port": 59904,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:50:16.154380+00:00",
  "ended_at": "2026-08-27T12:50:17.497116+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "41f9f301-0f99-43d0-b4ad-6d08299e70d8",
  "name": "canny-autumn-jackal",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "202.155.157.112",
  "src_port": 55478,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 756,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T12:17:37.816270+00:00",
  "ended_at": "2026-08-27T12:17:39.130521+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2269
 },
 {
  "id": "c5ac6b47-ec4a-40bf-acd8-6f327c9194c3",
  "name": "thorny-weathered-squirrel",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "202.155.157.112",
  "src_port": 55496,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T12:17:16.232053+00:00",
  "ended_at": "2026-08-27T12:17:17.574814+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d07cf30b-8560-4b85-bbb5-af953dfb9455",
  "name": "early-deft-galago",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "118.194.228.101",
  "src_port": 50678,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 571,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-27T00:17:53.831192+00:00",
  "ended_at": "2026-08-27T00:17:54.534356+00:00",
  "ended_reason": "exec complete",
  "commands": 18,
  "transcript_bytes": 2057
 },
 {
  "id": "2a83dae2-1927-459e-9efd-11b120b47889",
  "name": "murky-vaulted-anteater",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "118.194.228.101",
  "src_port": 52310,
  "username": "ftp_user",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T00:17:41.697466+00:00",
  "ended_at": "2026-08-27T00:17:43.153728+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]