{"ip":"91.215.85.104","first_seen":"2026-10-14T19:42:02.983Z","last_seen":"2026-10-22T17:27:50.973Z","geo":{"country":"Russia","country_code":"RU","city":"Moscow","asn":"AS200593 PROSPERO OOO","isp":"Prospero OOO","lat":55.7558,"lon":37.6173},"stats":{"total_events":3,"ssh_events":0,"http_events":3,"ssh_failures":0,"http_4xx":3,"http_5xx":0,"distinct_usernames":0,"distinct_paths":3,"distinct_source_hosts":1},"behavior_tags":[],"event_tags":["client.outdated"],"recent_events":[{"ts":"2026-10-22T17:27:50.973Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/sslmgr","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":[]},{"ts":"2026-10-22T17:27:50.936Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/global-protect/login.esp","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":[]},{"ts":"2026-10-14T19:42:02.983Z","source":"http","category":"request","severity":"warn","method":"POST","uri":"/nf/auth/doAuthentication.do","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":["client.outdated"]},{"ts":"2026-09-02T09:31:44.947Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/Microsoft.Exchange.MailboxReplicationService.ProxyService","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":["client.python_http","protocol.no-language"]}],"generated_at":"2026-10-25T00:46:58.115343615Z"}