{"ip":"5.226.140.112","first_seen":"2026-10-01T07:36:58.082Z","last_seen":"2026-10-16T20:39:19.693Z","geo":{"country":"United Kingdom","country_code":"GB","city":"City of London","asn":"AS25369 Hydra Communications Ltd","isp":"Hydra Communications Ltd","lat":51.5164,"lon":-0.093},"stats":{"total_events":2,"ssh_events":0,"http_events":2,"ssh_failures":0,"http_4xx":2,"http_5xx":0,"distinct_usernames":0,"distinct_paths":2,"distinct_source_hosts":2},"behavior_tags":["actor.multi_vm","asn.coordinated","subnet.coordinated"],"event_tags":["client.short-ua","protocol.no-language"],"recent_events":[{"ts":"2026-10-16T20:39:19.693Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/mcp/","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":[]},{"ts":"2026-10-01T07:36:58.082Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/mcp","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["client.short-ua","protocol.no-language"]}],"generated_at":"2026-10-25T09:17:41.32576468Z"}