[
 {
  "id": "239806a6-9c70-4712-b3d4-8a85ab130d2a",
  "name": "hazy-buoyant-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55976,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 351,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:03:57.895210+00:00",
  "ended_at": "2026-08-27T02:04:04.187591+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "823b4cff-55e1-4a18-8c7a-d21e2a3ae8ce",
  "name": "downy-tranquil-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55390,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:42:40.189191+00:00",
  "ended_at": "2026-08-26T05:42:46.454759+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "5fcbd15f-d160-42bb-a01f-3cc495df57c0",
  "name": "dappled-plucky-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 40282,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:51:18.374912+00:00",
  "ended_at": "2026-08-20T18:51:26.139234+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "87b53026-df8e-46f2-8889-be73dc547606",
  "name": "foggy-marbled-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 43146,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:28:24.020502+00:00",
  "ended_at": "2026-08-20T10:28:26.339686+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1580
 }
]