{"actor": {"id": "00ufgmc7x27vTGT1L5d7", "type": "User", "alternateId": "attacker@gmail.com", "displayName": "hackpsy strt", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0", "os": "Windows 10", "browser": "FIREFOX"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "18.185.207.118", "geographicalContext": {"city": "Frankfurt am Main", "state": "Hesse", "country": "Germany", "postalCode": "60313", "geolocation": {"lat": 50.1188, "lon": 8.6843}}}, "device": null, "authenticationContext": {"authenticationProvider": "FACTOR_PROVIDER", "credentialProvider": "OKTA_CREDENTIAL_PROVIDER", "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "idxmMahPZUhQxSOkz9cmrWqHQ"}, "displayMessage": "Authentication of user via MFA", "eventType": "user.authentication.auth_via_mfa", "outcome": {"result": "FAILURE", "reason": "INVALID_CREDENTIALS"}, "published": "2024-03-11T20:16:46.146Z", "securityContext": {"asNumber": 16509, "asOrg": "a100 row gmbh", "isp": "amazon.com inc", "domain": "amazonaws.com", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"authnRequestId": "0133a05b404fa3c4d3e7114045159ec3", "deviceFingerprint": "128b9639e3c7adaa8c891b118a62beca", "requestId": "08922dbff1c89166cb0ffc3f3ee96e10", "authenticatorMethodChallengeTime": "2024-03-11T20:16:23.523Z", "dtHash": "5442ff92898a83c22d6811cc4de3de1be7c9590490d5b26b7a2b25546fd7bfea", "requestUri": "/idp/idx/identify", "threatSuspected": "false", "factor": "PASSWORD_AS_FACTOR", "factorIntent": "AUTHENTICATION", "url": "/idp/idx/identify?"}}, "legacyEventType": "core.user.factor.attempt_fail", "transaction": {"type": "WEB", "id": "08922dbff1c89166cb0ffc3f3ee96e10", "detail": {}}, "uuid": "48c4d2b3-dfe4-11ee-875c-6d92eafabfb2", "version": "0", "request": {"ipChain": [{"ip": "18.185.207.118", "geographicalContext": {"city": "Frankfurt am Main", "state": "Hesse", "country": "Germany", "postalCode": "60313", "geolocation": {"lat": 50.1188, "lon": 8.6843}}, "version": "V4", "source": null}]}, "target": [{"id": "00ufgmc7x27vTGT1L5d7", "type": "User", "alternateId": "attacker@gmail.com", "displayName": "hackpsy strt", "detailEntry": null}, {"id": "lae1qdvnfgSKwDdvn5d7", "type": "AuthenticatorEnrollment", "alternateId": "unknown", "displayName": "Password", "detailEntry": {"methodTypeUsed": "Password"}}]}