{"ip":"94.154.43.203","first_seen":"2026-10-07T20:59:04.008Z","last_seen":"2026-10-07T21:35:46.877Z","geo":{"country":"The Netherlands","country_code":"NL","city":"Amsterdam","asn":"AS219502 Storm Industries LLC","isp":"Storm Industries LLC","lat":52.3716,"lon":4.8883},"stats":{"total_events":6,"ssh_events":0,"http_events":6,"ssh_failures":0,"http_4xx":6,"http_5xx":0,"distinct_usernames":0,"distinct_paths":1,"distinct_source_hosts":3},"behavior_tags":["actor.multi_vm","asn.coordinated","subnet.coordinated"],"event_tags":["client.short-ua","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-10-07T21:35:46.877Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.196.101.57:443","source_host":"aws-euc1","tags":["client.short-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-07T21:35:46.798Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["client.short-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-07T21:13:00.712Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.142.115.158:443","source_host":"aws-apse1","tags":["client.short-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-07T21:13:00.51Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.short-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-07T20:59:04.143Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"54.144.12.123:443","source_host":"aws-use1","tags":["client.short-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-10-07T20:59:04.008Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.short-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-09-11T16:39:51.252693Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]}],"generated_at":"2026-10-25T00:44:47.810187142Z"}