[
 {
  "id": "0bb16e03-cfb1-4817-8665-b245caabc272",
  "name": "brazen-idle-bunting",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 40926,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 290,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T03:01:32.689966+00:00",
  "ended_at": "2026-08-27T03:01:38.734094+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "d41a5ed0-aa2a-4cf3-a350-3e27b2e93f4f",
  "name": "sandy-zealous-hoopoe",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.217",
  "src_port": 35240,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-27T02:04:01.607778+00:00",
  "ended_at": "2026-08-27T02:04:04.189374+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "239806a6-9c70-4712-b3d4-8a85ab130d2a",
  "name": "hazy-buoyant-lapwing",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.217",
  "src_port": 55976,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 351,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-27T02:03:57.895210+00:00",
  "ended_at": "2026-08-27T02:04:04.187591+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "defdc84a-81b5-43a5-a985-b173c3b480e8",
  "name": "jaunty-scarlet-ibex",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 51808,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 1190,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T14:01:11.772295+00:00",
  "ended_at": "2026-08-26T14:01:16.170138+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "a3411e99-c6c7-4877-a0c7-513f43f33c44",
  "name": "wandering-solar-toucan",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "77.239.124.249",
  "src_port": 38942,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T12:02:29.254272+00:00",
  "ended_at": "2026-08-26T12:02:35.296860+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "b607e4b1-8409-4bbe-90a7-89d5b6021f89",
  "name": "fearless-lawful-redshank",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "77.239.124.249",
  "src_port": 57194,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 570,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T12:02:22.655548+00:00",
  "ended_at": "2026-08-26T12:02:35.295764+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "c5b24c30-f9b6-4811-bbe5-5ea5f3cef722",
  "name": "humble-creaky-zebu",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 36214,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 235,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T06:11:27.499078+00:00",
  "ended_at": "2026-08-26T06:11:31.653579+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "e32bd2df-211c-4bac-b16a-60a5da3cb5ab",
  "name": "somber-tidal-hyrax",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.40.200",
  "src_port": 33858,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-26T05:42:44.472115+00:00",
  "ended_at": "2026-08-26T05:42:46.453426+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "823b4cff-55e1-4a18-8c7a-d21e2a3ae8ce",
  "name": "downy-tranquil-quokka",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.40.200",
  "src_port": 55390,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 205,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-26T05:42:40.189191+00:00",
  "ended_at": "2026-08-26T05:42:46.454759+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1659
 },
 {
  "id": "8665b94e-2268-4dc1-8f2c-4c460e22e81e",
  "name": "quartz-boreal-lemur",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 47792,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 229,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T02:12:31.205639+00:00",
  "ended_at": "2026-08-25T02:12:35.101260+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "f915e377-f2eb-42c8-bb19-09f5eea0a2fa",
  "name": "lucid-daring-caracal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.153.34.165",
  "src_port": 57934,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-25T01:13:40.910094+00:00",
  "ended_at": "2026-08-25T01:13:42.810390+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d3075879-b261-4873-9c5f-9791ecd79372",
  "name": "obsidian-sunlit-guanaco",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.153.34.165",
  "src_port": 56798,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 209,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-25T01:13:37.907570+00:00",
  "ended_at": "2026-08-25T01:13:42.808523+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "795be882-cbf4-4f25-b1d5-0f646916f8ab",
  "name": "fearless-bitter-sloth",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 33324,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 239,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T10:06:26.733663+00:00",
  "ended_at": "2026-08-24T10:06:31.102491+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "afc340f6-14d3-4f57-a444-5d51c8da4fb1",
  "name": "jagged-fierce-warbler",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.11",
  "src_port": 41330,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-24T09:50:15.831306+00:00",
  "ended_at": "2026-08-24T09:50:17.900065+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "d330b0aa-ffca-47a9-9ac5-b760b9eb75c0",
  "name": "breezy-wandering-agouti",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.11",
  "src_port": 39130,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 218,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-24T09:50:10.729370+00:00",
  "ended_at": "2026-08-24T09:50:17.901358+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "42e7701f-81c2-43d1-a1fb-ea4b37f2591c",
  "name": "brave-burly-merlin",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 43494,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 322,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:57:52.326248+00:00",
  "ended_at": "2026-08-22T11:57:56.971579+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 864
 },
 {
  "id": "af395db6-a1fa-4c24-a09e-aee0d713b06b",
  "name": "spirited-jolly-ocelot",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.120",
  "src_port": 45712,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-22T11:55:52.930171+00:00",
  "ended_at": "2026-08-22T11:55:57.222245+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "db199646-e1a5-425c-96dc-7f0fadaf4b6a",
  "name": "pleasant-nameless-plover",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.120",
  "src_port": 50652,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 562,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-22T11:55:49.585558+00:00",
  "ended_at": "2026-08-22T11:55:57.221005+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1661
 },
 {
  "id": "f2b6d37c-d1e8-4868-a408-cb0ad5bd673f",
  "name": "indigo-hazy-jaguar",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 33958,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 272,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:51:58.500310+00:00",
  "ended_at": "2026-08-21T13:52:03.201423+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 863
 },
 {
  "id": "3226d8c2-70af-4614-adf5-dc818c71c552",
  "name": "verdant-jaunty-cardinal",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 38276,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T13:33:36.892068+00:00",
  "ended_at": "2026-08-21T13:33:40.434393+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "08b53acf-f098-42ce-a213-41f185f62901",
  "name": "blunt-gleaming-redstart",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 35892,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 318,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:33:30.923204+00:00",
  "ended_at": "2026-08-21T13:33:40.435887+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1660
 },
 {
  "id": "6dc698db-385c-4d9a-98b5-1d7eb191a15c",
  "name": "ivory-marine-curlew",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 50828,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 197,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:27:29.258088+00:00",
  "ended_at": "2026-08-20T19:27:32.919758+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 856
 },
 {
  "id": "835e01b1-2ee6-4669-b2e8-0851efab7ebe",
  "name": "inland-wry-vicuna",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 35344,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T18:51:24.475399+00:00",
  "ended_at": "2026-08-20T18:51:26.146743+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "5fcbd15f-d160-42bb-a01f-3cc495df57c0",
  "name": "dappled-plucky-ptarmigan",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 40282,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 192,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T18:51:18.374912+00:00",
  "ended_at": "2026-08-20T18:51:26.139234+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "a3c9e6c6-76c4-414f-8763-d7ff71aa9879",
  "name": "merry-seaward-squirrel",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 51268,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 198,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:29:16.089959+00:00",
  "ended_at": "2026-08-20T10:29:16.719160+00:00",
  "ended_reason": "exec complete",
  "commands": 12,
  "transcript_bytes": 744
 },
 {
  "id": "5b0b7a61-622c-47da-87b1-c7f8a4040145",
  "name": "lanky-thrifty-godwit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 34188,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:28:24.475848+00:00",
  "ended_at": "2026-08-20T10:28:26.339094+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "87b53026-df8e-46f2-8889-be73dc547606",
  "name": "foggy-marbled-raven",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 43146,
  "username": "splunk",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 181,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:28:24.020502+00:00",
  "ended_at": "2026-08-20T10:28:26.339686+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1580
 }
]