{"ip":"20.65.193.203","first_seen":"2026-08-18T13:36:16.933Z","last_seen":"2026-08-23T17:09:30.607Z","geo":{"country":"United States","country_code":"US","city":"San Antonio","asn":"AS8075 Microsoft Corporation","isp":"Microsoft Corporation","lat":29.4167,"lon":-98.5},"stats":{"total_events":3,"ssh_events":0,"http_events":3,"ssh_failures":0,"http_4xx":3,"http_5xx":0,"distinct_usernames":0,"distinct_paths":2,"distinct_source_hosts":1},"behavior_tags":["subnet.coordinated"],"event_tags":["protocol.no-language","scanner.zgrab"],"recent_events":[{"ts":"2026-08-23T17:09:30.607Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/owa/auth/logon.aspx","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":["scanner.zgrab","protocol.no-language","scanner.zgrab"]},{"ts":"2026-08-23T10:09:58.457Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":["scanner.zgrab","protocol.no-language","scanner.zgrab"]},{"ts":"2026-08-18T13:36:16.933Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/owa/auth/logon.aspx","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":["scanner.zgrab","protocol.no-language","scanner.zgrab"]}],"generated_at":"2026-08-25T18:07:00.259626081Z"}