[
 {
  "id": "789e6239-f60b-4ff5-a440-79a496634282",
  "name": "marbled-pristine-heron",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.42.147",
  "src_port": 58648,
  "username": "zimbra",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-21T13:13:39.793563+00:00",
  "ended_at": "2026-08-21T13:13:42.331578+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c5b2ffe3-8543-47e1-849c-f955baf46426",
  "name": "boreal-vigilant-chough",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.42.147",
  "src_port": 55160,
  "username": "zimbra",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 224,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-21T13:13:35.785034+00:00",
  "ended_at": "2026-08-21T13:13:42.330762+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1658
 },
 {
  "id": "ee8e11fa-08a7-417f-8fc4-81603f5d779f",
  "name": "northern-wooded-pipit",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "45.156.87.93",
  "src_port": 52056,
  "username": "zimbra",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T19:38:58.230820+00:00",
  "ended_at": "2026-08-20T19:38:59.733518+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "c416d10c-3422-4345-91f0-cb8588b450ff",
  "name": "salty-humble-kiwi",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "45.156.87.93",
  "src_port": 42988,
  "username": "zimbra",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 174,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T19:38:55.074740+00:00",
  "ended_at": "2026-08-20T19:38:59.734550+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1651
 },
 {
  "id": "7db3718a-8ed5-4ba3-a81e-1cddc45c613d",
  "name": "nameless-fickle-mallard",
  "protocol": "ssh",
  "channel_kind": null,
  "src_ip": "91.92.47.66",
  "src_port": 54760,
  "username": "zimbra",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": null,
  "probe_flagged": 0,
  "exec_command": null,
  "started_at": "2026-08-20T10:25:23.534757+00:00",
  "ended_at": "2026-08-20T10:25:25.406794+00:00",
  "ended_reason": "no channel opened",
  "commands": 0,
  "transcript_bytes": 0
 },
 {
  "id": "98bb1525-a7e5-4e61-b01c-adadcd52b12b",
  "name": "barren-umber-bowerbird",
  "protocol": "ssh",
  "channel_kind": "exec",
  "src_ip": "91.92.47.66",
  "src_port": 48418,
  "username": "zimbra",
  "client_version": "SSH-2.0-Go",
  "auth_attempts": 1,
  "automation": "bot",
  "think_ms": 191,
  "probe_flagged": 0,
  "exec_command": "uname -s -v -n -r -m",
  "started_at": "2026-08-20T10:25:23.050437+00:00",
  "ended_at": "2026-08-20T10:25:25.406022+00:00",
  "ended_reason": "exec complete",
  "commands": 14,
  "transcript_bytes": 1656
 }
]