{"ip":"166.62.41.26","exported_at":"2026-06-13T21:54:27+00:00","period_days":30,"metrics":{"events7d":0,"distinct_ports":0,"distinct_classifications":0,"max_severity":null,"last_sensor_id":"paris-1","max_waf_score":null,"max_risk_score":null,"attack_stage":null,"threat_family":[],"recommended_action":null,"confidence":null,"risk_breakdown":[],"mitre_tactics":[]},"events":[{"id":7295006,"ip":"166.62.41.26","ts":"2026-05-19 07:39:13.000000","proto":"tcp","src_port":51004,"dst_port":22,"service":"ssh","classification":"ssh_probe","waf_score":null,"waf_tags":null,"http_method":null,"http_target":null,"sensor_id":"paris-1","meta":"{\u0022bytes_in\u0022: 22, \u0022payload_entropy\u0022: 3.879664004902593, \u0022port_category\u0022: \u0022well_known\u0022, \u0022org\u0022: \u0022GoDaddy.com, LLC\u0022, \u0022service\u0022: \u0022ssh\u0022, \u0022app_proto\u0022: \u0022ssh\u0022, \u0022asn\u0022: 398101, \u0022country\u0022: \u0022US\u0022, \u0022tag_count\u0022: 2, \u0022anomaly_count\u0022: 0, \u0022risk_score\u0022: 76, \u0022campaign_key\u0022: \u00224b687cfbd2a2f5b43a89ec258bffd822ae9203ba\u0022, \u0022event_fingerprint\u0022: \u0022bc4e3fa786c83e0db7c1c892cb0c288f6b14388f\u0022, \u0022tags_list\u0022: [\u0022ssh_banner\u0022, \u0022ssh_libssh\u0022]}"}],"total_events":1}