[
 {
  "id": "86fccb70-8cc3-4b0d-aa7a-997d8b2ce89f",
  "name": "marine-buoyant-chinchilla",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 49570,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 599,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:02:40.338552+00:00",
  "ended_at": "2026-08-26T12:02:51.869609+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1671
 },
 {
  "id": "c07cce18-d8b2-4942-b5be-c2476fc58d1b",
  "name": "daring-mottled-goldcrest",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 59926,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 223,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:38:33.502322+00:00",
  "ended_at": "2026-08-26T05:38:40.362146+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1671
 },
 {
  "id": "a7199aa3-f5cd-419c-a4e0-0dd79b820130",
  "name": "wooded-flinty-anteater",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 36474,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 168,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-23T08:40:59.210029+00:00",
  "ended_at": "2026-08-23T08:41:05.680012+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1671
 },
 {
  "id": "9134031b-7f03-4e67-bafc-0a2c95ab244c",
  "name": "snowy-oaken-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 49578,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 293,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T12:13:20.757758+00:00",
  "ended_at": "2026-08-22T12:13:27.412849+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1671
 },
 {
  "id": "5af9cfe1-475f-478d-aee0-e5d939f44b82",
  "name": "coral-ashen-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 34268,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 242,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T12:51:30.067684+00:00",
  "ended_at": "2026-08-21T12:51:36.236273+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1670
 },
 {
  "id": "cdc7ce40-2849-4cd0-bbb4-4a39bb352cc4",
  "name": "primal-lofty-kudu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 44582,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:39:10.922518+00:00",
  "ended_at": "2026-08-20T18:39:17.315311+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1663
 },
 {
  "id": "96c0bb3d-c34a-4ee8-a1bd-f5b7914e75ed",
  "name": "nautical-misty-otter",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 42066,
  "username": "elasticsearch",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 185,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T11:06:03.008322+00:00",
  "ended_at": "2026-08-20T11:06:05.668559+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1565
 }
]