[
 {
  "id": "cf49f191-7f20-4d33-a3af-a5f254fe1161",
  "name": "glacial-sooty-harrier",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "42.240.164.208",
  "src_port": 35396,
  "username": "ftpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-25T09:15:34.627210+00:00",
  "ended_at": "2026-08-25T09:19:35.428586+00:00",
  "ended_reason": "connection lost",
  "commands": 1,
  "transcript_bytes": 37
 },
 {
  "id": "a9fe09c8-f362-4730-9890-658fe77be56d",
  "name": "tidal-indigo-lynx",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "103.161.113.136",
  "src_port": 53790,
  "username": "ftpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 849,
  "probe_flagged": 0,
  "exec_command": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
  "started_at": "2026-08-20T09:22:05.365710+00:00",
  "ended_at": "2026-08-20T09:22:05.631619+00:00",
  "ended_reason": "exec complete",
  "commands": 27,
  "transcript_bytes": 3812
 },
 {
  "id": "d992fa64-88ca-418f-a3a2-48614f8ca79f",
  "name": "granite-lively-jackdaw",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.161.113.136",
  "src_port": 47640,
  "username": "ftpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:21:45.129118+00:00",
  "ended_at": "2026-08-20T09:21:45.567601+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "12ca58e8-0c63-48fb-aed6-0e182424c9a1",
  "name": "forlorn-boreal-panther",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "103.161.113.136",
  "src_port": 53796,
  "username": "ftpadmin",
  "client_version": "SSH-2.0-libssh_0.9.6",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T09:21:18.701437+00:00",
  "ended_at": "2026-08-20T09:21:20.215365+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 }
]