[
  {
    "model": "app.user",
    "pk": 1,
    "fields": {
      "first_name": "Robb",
      "last_name": "Walsh",
      "email": "robb_walsh41@example.org",
      "department": "Sales",
      "number_matching": true,
      "enrolled_at": "2026-04-19T12:47:33Z"
    }
  },
  {
    "model": "app.user",
    "pk": 2,
    "fields": {
      "first_name": "Taryn",
      "last_name": "Aufderhar-Brakus",
      "email": "taryn.aufderhar-brakus44@example.com",
      "department": "Engineering",
      "number_matching": false,
      "enrolled_at": "2026-04-22T21:55:15Z"
    }
  },
  {
    "model": "app.user",
    "pk": 3,
    "fields": {
      "first_name": "Rudy",
      "last_name": "Kemmer-Beatty",
      "email": "rudy.kemmer-beatty@example.net",
      "department": "Finance",
      "number_matching": false,
      "enrolled_at": "2026-03-02T12:10:46Z"
    }
  },
  {
    "model": "app.user",
    "pk": 4,
    "fields": {
      "first_name": "Mindy",
      "last_name": "Legros",
      "email": "mindy_legros40@example.net",
      "department": "Operations",
      "number_matching": true,
      "enrolled_at": "2026-04-17T09:34:04Z"
    }
  },
  {
    "model": "app.user",
    "pk": 5,
    "fields": {
      "first_name": "Chesley",
      "last_name": "Bergnaum",
      "email": "chesley_bergnaum@example.org",
      "department": "Sales",
      "number_matching": false,
      "enrolled_at": "2026-02-14T16:15:59Z"
    }
  },
  {
    "model": "app.user",
    "pk": 6,
    "fields": {
      "first_name": "Verner",
      "last_name": "Douglas",
      "email": "verner.douglas88@example.org",
      "department": "Sales",
      "number_matching": true,
      "enrolled_at": "2026-01-11T11:17:33Z"
    }
  },
  {
    "model": "app.user",
    "pk": 7,
    "fields": {
      "first_name": "Idell",
      "last_name": "Moore",
      "email": "idell_moore90@example.org",
      "department": "Engineering",
      "number_matching": false,
      "enrolled_at": "2026-03-10T17:17:39Z"
    }
  },
  {
    "model": "app.user",
    "pk": 8,
    "fields": {
      "first_name": "Ruthe",
      "last_name": "Carroll",
      "email": "ruthe.carroll@example.org",
      "department": "Sales",
      "number_matching": false,
      "enrolled_at": "2026-04-09T13:12:41Z"
    }
  },
  {
    "model": "app.user",
    "pk": 9,
    "fields": {
      "first_name": "Isaac",
      "last_name": "Mohr",
      "email": "isaac.mohr@example.net",
      "department": "Sales",
      "number_matching": true,
      "enrolled_at": "2026-01-27T11:13:35Z"
    }
  },
  {
    "model": "app.user",
    "pk": 10,
    "fields": {
      "first_name": "Jonathon",
      "last_name": "Dach",
      "email": "jonathon.dach46@example.net",
      "department": "Engineering",
      "number_matching": true,
      "enrolled_at": "2026-02-02T13:40:33Z"
    }
  },
  {
    "model": "app.user",
    "pk": 11,
    "fields": {
      "first_name": "Humberto",
      "last_name": "Veum",
      "email": "humberto_veum69@example.net",
      "department": "Sales",
      "number_matching": false,
      "enrolled_at": "2026-04-04T13:40:17Z"
    }
  },
  {
    "model": "app.user",
    "pk": 12,
    "fields": {
      "first_name": "Lorine",
      "last_name": "Beer",
      "email": "lorine_beer16@example.com",
      "department": "Engineering",
      "number_matching": true,
      "enrolled_at": "2026-02-28T12:13:21Z"
    }
  },
  {
    "model": "app.user",
    "pk": 13,
    "fields": {
      "first_name": "Leonel",
      "last_name": "Greenholt",
      "email": "leonel_greenholt@example.org",
      "department": "Engineering",
      "number_matching": true,
      "enrolled_at": "2026-03-08T08:05:45Z"
    }
  },
  {
    "model": "app.user",
    "pk": 14,
    "fields": {
      "first_name": "Liliana",
      "last_name": "Davis",
      "email": "liliana_davis@example.org",
      "department": "Operations",
      "number_matching": false,
      "enrolled_at": "2026-02-21T11:06:11Z"
    }
  },
  {
    "model": "app.user",
    "pk": 15,
    "fields": {
      "first_name": "Hubert",
      "last_name": "Ebert",
      "email": "hubert_ebert66@example.com",
      "department": "Sales",
      "number_matching": false,
      "enrolled_at": "2026-03-27T15:38:55Z"
    }
  },
  {
    "model": "app.user",
    "pk": 16,
    "fields": {
      "first_name": "Brooks",
      "last_name": "Goyette",
      "email": "brooks_goyette@example.org",
      "department": "Finance",
      "number_matching": true,
      "enrolled_at": "2026-01-11T08:38:53Z"
    }
  },
  {
    "model": "app.user",
    "pk": 17,
    "fields": {
      "first_name": "Payton",
      "last_name": "Sawayn",
      "email": "payton.sawayn@example.net",
      "department": "Engineering",
      "number_matching": false,
      "enrolled_at": "2026-01-07T11:20:27Z"
    }
  },
  {
    "model": "app.user",
    "pk": 18,
    "fields": {
      "first_name": "Aylin",
      "last_name": "Klocko",
      "email": "aylin_klocko@example.net",
      "department": "Engineering",
      "number_matching": true,
      "enrolled_at": "2026-02-05T13:26:16Z"
    }
  },
  {
    "model": "app.user",
    "pk": 19,
    "fields": {
      "first_name": "Juwan",
      "last_name": "Bruen",
      "email": "juwan_bruen60@example.org",
      "department": "Finance",
      "number_matching": false,
      "enrolled_at": "2026-01-24T14:23:40Z"
    }
  },
  {
    "model": "app.user",
    "pk": 20,
    "fields": {
      "first_name": "Ewell",
      "last_name": "O'Keefe",
      "email": "ewell.okeefe@example.net",
      "department": "Support",
      "number_matching": false,
      "enrolled_at": "2026-01-20T11:37:07Z"
    }
  },
  {
    "model": "app.user",
    "pk": 21,
    "fields": {
      "first_name": "Doyle",
      "last_name": "Crona",
      "email": "doyle.crona28@example.org",
      "department": "Finance",
      "number_matching": false,
      "enrolled_at": "2026-03-20T08:48:41Z"
    }
  },
  {
    "model": "app.user",
    "pk": 22,
    "fields": {
      "first_name": "Elyse",
      "last_name": "Rippin",
      "email": "elyse_rippin@example.org",
      "department": "Engineering",
      "number_matching": false,
      "enrolled_at": "2026-03-10T12:12:30Z"
    }
  },
  {
    "model": "app.user",
    "pk": 23,
    "fields": {
      "first_name": "Chanelle",
      "last_name": "Reinger",
      "email": "chanelle.reinger71@example.net",
      "department": "Operations",
      "number_matching": false,
      "enrolled_at": "2026-03-04T09:48:32Z"
    }
  },
  {
    "model": "app.user",
    "pk": 24,
    "fields": {
      "first_name": "Ashton",
      "last_name": "Heller",
      "email": "ashton.heller93@example.net",
      "department": "Sales",
      "number_matching": true,
      "enrolled_at": "2026-01-10T08:42:28Z"
    }
  },
  {
    "model": "app.user",
    "pk": 25,
    "fields": {
      "first_name": "Mac",
      "last_name": "Bailey",
      "email": "mac.bailey49@example.net",
      "department": "Sales",
      "number_matching": false,
      "enrolled_at": "2026-04-25T11:30:48Z"
    }
  },
  {
    "model": "app.user",
    "pk": 26,
    "fields": {
      "first_name": "Gianni",
      "last_name": "Weber",
      "email": "gianni_weber@example.org",
      "department": "Support",
      "number_matching": false,
      "enrolled_at": "2026-03-01T09:12:13Z"
    }
  },
  {
    "model": "app.user",
    "pk": 27,
    "fields": {
      "first_name": "Clayton",
      "last_name": "Schinner",
      "email": "clayton.schinner77@example.net",
      "department": "Finance",
      "number_matching": false,
      "enrolled_at": "2026-02-06T14:02:06Z"
    }
  },
  {
    "model": "app.user",
    "pk": 28,
    "fields": {
      "first_name": "Laila",
      "last_name": "Schowalter",
      "email": "laila_schowalter@example.net",
      "department": "Support",
      "number_matching": false,
      "enrolled_at": "2026-04-04T10:45:13Z"
    }
  },
  {
    "model": "app.user",
    "pk": 29,
    "fields": {
      "first_name": "Mae",
      "last_name": "Hayes",
      "email": "mae.hayes22@example.org",
      "department": "Engineering",
      "number_matching": true,
      "enrolled_at": "2026-01-26T15:25:11Z"
    }
  },
  {
    "model": "app.user",
    "pk": 30,
    "fields": {
      "first_name": "Camila",
      "last_name": "Lakin",
      "email": "camila.lakin41@example.com",
      "department": "Engineering",
      "number_matching": false,
      "enrolled_at": "2026-02-22T17:51:39Z"
    }
  },
  {
    "model": "app.user",
    "pk": 31,
    "fields": {
      "first_name": "Tess",
      "last_name": "Frami",
      "email": "tess.frami68@example.org",
      "department": "Executive office",
      "number_matching": true,
      "enrolled_at": "2026-02-08T08:02:19Z"
    }
  },
  {
    "model": "app.user",
    "pk": 32,
    "fields": {
      "first_name": "Jaime",
      "last_name": "Klein",
      "email": "jaime_klein88@example.com",
      "department": "Operations",
      "number_matching": false,
      "enrolled_at": "2026-02-07T16:12:40Z"
    }
  },
  {
    "model": "app.user",
    "pk": 33,
    "fields": {
      "first_name": "Cleo",
      "last_name": "Farrell-Cole",
      "email": "cleo.farrell-cole@example.com",
      "department": "Finance",
      "number_matching": true,
      "enrolled_at": "2026-03-31T13:08:28Z"
    }
  },
  {
    "model": "app.user",
    "pk": 34,
    "fields": {
      "first_name": "Darien",
      "last_name": "Shields",
      "email": "darien.shields@example.org",
      "department": "Engineering",
      "number_matching": false,
      "enrolled_at": "2026-01-13T15:28:00Z"
    }
  },
  {
    "model": "app.user",
    "pk": 35,
    "fields": {
      "first_name": "Madaline",
      "last_name": "Gutkowski",
      "email": "madaline_gutkowski0@example.net",
      "department": "Sales",
      "number_matching": false,
      "enrolled_at": "2026-03-28T15:54:12Z"
    }
  },
  {
    "model": "app.user",
    "pk": 36,
    "fields": {
      "first_name": "Chelsey",
      "last_name": "Bernier",
      "email": "chelsey.bernier@example.net",
      "department": "Engineering",
      "number_matching": true,
      "enrolled_at": "2026-01-14T13:15:53Z"
    }
  },
  {
    "model": "app.user",
    "pk": 37,
    "fields": {
      "first_name": "Kiana",
      "last_name": "Mueller",
      "email": "kiana_mueller@example.com",
      "department": "Support",
      "number_matching": false,
      "enrolled_at": "2026-03-06T15:14:29Z"
    }
  },
  {
    "model": "app.user",
    "pk": 38,
    "fields": {
      "first_name": "Micaela",
      "last_name": "Grant",
      "email": "micaela.grant@example.com",
      "department": "Sales",
      "number_matching": true,
      "enrolled_at": "2026-04-29T09:31:09Z"
    }
  },
  {
    "model": "app.user",
    "pk": 39,
    "fields": {
      "first_name": "Malvina",
      "last_name": "Krajcik",
      "email": "malvina_krajcik@example.net",
      "department": "Executive office",
      "number_matching": false,
      "enrolled_at": "2026-04-10T10:52:52Z"
    }
  },
  {
    "model": "app.user",
    "pk": 40,
    "fields": {
      "first_name": "Jamie",
      "last_name": "Dibbert",
      "email": "jamie.dibbert@example.org",
      "department": "Support",
      "number_matching": false,
      "enrolled_at": "2026-03-19T14:31:37Z"
    }
  },
  {
    "model": "app.user",
    "pk": 41,
    "fields": {
      "first_name": "Ed",
      "last_name": "Hackett",
      "email": "ed_hackett98@example.org",
      "department": "Finance",
      "number_matching": true,
      "enrolled_at": "2026-01-16T14:30:29Z"
    }
  },
  {
    "model": "app.user",
    "pk": 42,
    "fields": {
      "first_name": "Sylvan",
      "last_name": "McCullough",
      "email": "sylvan_mccullough@example.org",
      "department": "Operations",
      "number_matching": false,
      "enrolled_at": "2026-02-04T12:29:54Z"
    }
  },
  {
    "model": "app.user",
    "pk": 43,
    "fields": {
      "first_name": "Taylor",
      "last_name": "Luettgen",
      "email": "taylor_luettgen@example.com",
      "department": "Support",
      "number_matching": false,
      "enrolled_at": "2026-01-06T12:03:48Z"
    }
  },
  {
    "model": "app.user",
    "pk": 44,
    "fields": {
      "first_name": "Grover",
      "last_name": "Lang",
      "email": "grover.lang64@example.net",
      "department": "Support",
      "number_matching": true,
      "enrolled_at": "2026-04-28T14:34:50Z"
    }
  },
  {
    "model": "app.user",
    "pk": 45,
    "fields": {
      "first_name": "Stephan",
      "last_name": "Kub",
      "email": "stephan.kub39@example.net",
      "department": "Sales",
      "number_matching": true,
      "enrolled_at": "2026-04-20T16:43:52Z"
    }
  },
  {
    "model": "app.user",
    "pk": 46,
    "fields": {
      "first_name": "Omar",
      "last_name": "Christiansen",
      "email": "omar.christiansen@example.org",
      "department": "Finance",
      "number_matching": true,
      "enrolled_at": "2026-03-13T09:28:38Z"
    }
  },
  {
    "model": "app.user",
    "pk": 47,
    "fields": {
      "first_name": "Eryn",
      "last_name": "Homenick",
      "email": "eryn.homenick48@example.org",
      "department": "Operations",
      "number_matching": false,
      "enrolled_at": "2026-04-26T17:59:49Z"
    }
  },
  {
    "model": "app.user",
    "pk": 48,
    "fields": {
      "first_name": "Kaylee",
      "last_name": "Yost",
      "email": "kaylee.yost14@example.org",
      "department": "Engineering",
      "number_matching": false,
      "enrolled_at": "2026-01-13T12:55:06Z"
    }
  },
  {
    "model": "app.user",
    "pk": 49,
    "fields": {
      "first_name": "Hassan",
      "last_name": "Morissette",
      "email": "hassan.morissette6@example.org",
      "department": "Finance",
      "number_matching": true,
      "enrolled_at": "2026-01-24T09:33:09Z"
    }
  },
  {
    "model": "app.user",
    "pk": 50,
    "fields": {
      "first_name": "Sylvester",
      "last_name": "Okuneva",
      "email": "sylvester_okuneva@example.org",
      "department": "Finance",
      "number_matching": true,
      "enrolled_at": "2026-04-26T13:46:09Z"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 1,
    "fields": {
      "user": 4,
      "changed_at": "2026-08-01T03:55:00Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 2,
    "fields": {
      "user": 40,
      "changed_at": "2026-05-31T06:02:28Z",
      "change_type": "new phone enrolled",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 3,
    "fields": {
      "user": 13,
      "changed_at": "2026-05-01T19:49:50Z",
      "change_type": "phone number changed",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 4,
    "fields": {
      "user": 37,
      "changed_at": "2026-08-01T18:58:43Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 5,
    "fields": {
      "user": 21,
      "changed_at": "2026-08-22T09:06:18Z",
      "change_type": "new phone enrolled",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 6,
    "fields": {
      "user": 43,
      "changed_at": "2026-02-24T16:01:47Z",
      "change_type": "method reset by help desk",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 7,
    "fields": {
      "user": 20,
      "changed_at": "2026-05-15T08:35:53Z",
      "change_type": "method reset by help desk",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 8,
    "fields": {
      "user": 25,
      "changed_at": "2026-07-28T19:08:38Z",
      "change_type": "method reset by help desk",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 9,
    "fields": {
      "user": 20,
      "changed_at": "2026-03-14T05:43:09Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 10,
    "fields": {
      "user": 27,
      "changed_at": "2026-06-10T08:56:44Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 11,
    "fields": {
      "user": 31,
      "changed_at": "2026-07-08T00:12:19Z",
      "change_type": "bypass code issued",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 12,
    "fields": {
      "user": 13,
      "changed_at": "2026-06-08T05:46:57Z",
      "change_type": "new phone enrolled",
      "requested_via": "self-service portal",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 13,
    "fields": {
      "user": 34,
      "changed_at": "2026-04-10T09:11:20Z",
      "change_type": "new phone enrolled",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 14,
    "fields": {
      "user": 49,
      "changed_at": "2026-03-13T14:53:38Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 15,
    "fields": {
      "user": 36,
      "changed_at": "2026-03-28T19:48:03Z",
      "change_type": "new phone enrolled",
      "requested_via": "self-service portal",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 16,
    "fields": {
      "user": 29,
      "changed_at": "2026-06-22T01:38:57Z",
      "change_type": "method reset by help desk",
      "requested_via": "help desk call",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 17,
    "fields": {
      "user": 26,
      "changed_at": "2026-03-08T04:41:32Z",
      "change_type": "method reset by help desk",
      "requested_via": "self-service portal",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 18,
    "fields": {
      "user": 25,
      "changed_at": "2026-06-03T06:08:35Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 19,
    "fields": {
      "user": 7,
      "changed_at": "2026-07-28T09:17:39Z",
      "change_type": "bypass code issued",
      "requested_via": "help desk call",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 20,
    "fields": {
      "user": 28,
      "changed_at": "2026-06-04T03:35:36Z",
      "change_type": "bypass code issued",
      "requested_via": "self-service portal",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 21,
    "fields": {
      "user": 25,
      "changed_at": "2026-07-26T18:29:25Z",
      "change_type": "method reset by help desk",
      "requested_via": "self-service portal",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 22,
    "fields": {
      "user": 13,
      "changed_at": "2026-06-07T09:51:51Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 23,
    "fields": {
      "user": 45,
      "changed_at": "2026-08-23T15:26:34Z",
      "change_type": "new phone enrolled",
      "requested_via": "self-service portal",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 24,
    "fields": {
      "user": 7,
      "changed_at": "2026-06-23T07:14:53Z",
      "change_type": "authenticator re-registered",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 25,
    "fields": {
      "user": 29,
      "changed_at": "2026-06-11T03:25:33Z",
      "change_type": "authenticator re-registered",
      "requested_via": "self-service portal",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 26,
    "fields": {
      "user": 37,
      "changed_at": "2026-04-02T05:28:13Z",
      "change_type": "phone number changed",
      "requested_via": "help desk call",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 27,
    "fields": {
      "user": 50,
      "changed_at": "2026-09-22T23:39:52Z",
      "change_type": "authenticator re-registered",
      "requested_via": "help desk call",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 28,
    "fields": {
      "user": 3,
      "changed_at": "2026-04-25T23:14:17Z",
      "change_type": "bypass code issued",
      "requested_via": "admin console",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 29,
    "fields": {
      "user": 47,
      "changed_at": "2026-08-25T07:37:49Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 30,
    "fields": {
      "user": 24,
      "changed_at": "2026-06-04T18:11:19Z",
      "change_type": "bypass code issued",
      "requested_via": "admin console",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 31,
    "fields": {
      "user": 42,
      "changed_at": "2026-07-05T23:49:34Z",
      "change_type": "bypass code issued",
      "requested_via": "admin console",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 32,
    "fields": {
      "user": 42,
      "changed_at": "2026-05-12T15:37:17Z",
      "change_type": "method reset by help desk",
      "requested_via": "admin console",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 33,
    "fields": {
      "user": 3,
      "changed_at": "2026-05-21T16:06:41Z",
      "change_type": "authenticator re-registered",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 34,
    "fields": {
      "user": 39,
      "changed_at": "2026-09-11T09:03:33Z",
      "change_type": "authenticator re-registered",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 35,
    "fields": {
      "user": 20,
      "changed_at": "2026-03-08T18:21:35Z",
      "change_type": "phone number changed",
      "requested_via": "help desk call",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 36,
    "fields": {
      "user": 23,
      "changed_at": "2026-06-17T02:27:05Z",
      "change_type": "method reset by help desk",
      "requested_via": "self-service portal",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 37,
    "fields": {
      "user": 50,
      "changed_at": "2026-08-11T03:51:22Z",
      "change_type": "authenticator re-registered",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 38,
    "fields": {
      "user": 31,
      "changed_at": "2026-06-01T16:47:22Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 39,
    "fields": {
      "user": 37,
      "changed_at": "2026-06-10T13:31:24Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 40,
    "fields": {
      "user": 15,
      "changed_at": "2026-05-27T06:09:37Z",
      "change_type": "new phone enrolled",
      "requested_via": "admin console",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 41,
    "fields": {
      "user": 29,
      "changed_at": "2026-03-31T00:11:37Z",
      "change_type": "authenticator re-registered",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 42,
    "fields": {
      "user": 11,
      "changed_at": "2026-07-24T16:38:35Z",
      "change_type": "new phone enrolled",
      "requested_via": "admin console",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 43,
    "fields": {
      "user": 43,
      "changed_at": "2026-01-14T23:26:58Z",
      "change_type": "phone number changed",
      "requested_via": "self-service portal",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 44,
    "fields": {
      "user": 49,
      "changed_at": "2026-03-25T05:28:35Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 45,
    "fields": {
      "user": 28,
      "changed_at": "2026-05-02T19:53:52Z",
      "change_type": "bypass code issued",
      "requested_via": "admin console",
      "identity_check": "video call"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 46,
    "fields": {
      "user": 41,
      "changed_at": "2026-06-03T19:27:37Z",
      "change_type": "bypass code issued",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 47,
    "fields": {
      "user": 46,
      "changed_at": "2026-06-30T14:47:29Z",
      "change_type": "phone number changed",
      "requested_via": "admin console",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 48,
    "fields": {
      "user": 43,
      "changed_at": "2026-05-16T07:35:44Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 49,
    "fields": {
      "user": 50,
      "changed_at": "2026-06-29T14:06:29Z",
      "change_type": "new phone enrolled",
      "requested_via": "self-service portal",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 50,
    "fields": {
      "user": 39,
      "changed_at": "2026-08-09T08:50:10Z",
      "change_type": "bypass code issued",
      "requested_via": "help desk call",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 51,
    "fields": {
      "user": 5,
      "changed_at": "2026-06-23T12:40:48Z",
      "change_type": "phone number changed",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 52,
    "fields": {
      "user": 1,
      "changed_at": "2026-05-04T06:03:10Z",
      "change_type": "new phone enrolled",
      "requested_via": "help desk call",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 53,
    "fields": {
      "user": 27,
      "changed_at": "2026-05-21T04:14:29Z",
      "change_type": "authenticator re-registered",
      "requested_via": "help desk call",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 54,
    "fields": {
      "user": 49,
      "changed_at": "2026-04-06T03:49:29Z",
      "change_type": "method reset by help desk",
      "requested_via": "self-service portal",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 55,
    "fields": {
      "user": 38,
      "changed_at": "2026-08-16T07:21:44Z",
      "change_type": "bypass code issued",
      "requested_via": "help desk call",
      "identity_check": "manager approval"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 56,
    "fields": {
      "user": 5,
      "changed_at": "2026-05-25T23:46:59Z",
      "change_type": "bypass code issued",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 57,
    "fields": {
      "user": 15,
      "changed_at": "2026-05-01T02:50:30Z",
      "change_type": "bypass code issued",
      "requested_via": "self-service portal",
      "identity_check": "none recorded"
    }
  },
  {
    "model": "app.mfamethodchange",
    "pk": 58,
    "fields": {
      "user": 1,
      "changed_at": "2026-07-16T19:07:06Z",
      "change_type": "bypass code issued",
      "requested_via": "self-service portal",
      "identity_check": "existing MFA prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 1,
    "fields": {
      "user": 43,
      "started_at": "2026-01-10T02:12:35Z",
      "origin": "account owner",
      "source_ip": "192.0.2.109",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 53,
      "prompt_window_s": "53",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 2,
    "fields": {
      "user": 22,
      "started_at": "2026-03-15T09:31:35Z",
      "origin": "account owner",
      "source_ip": "198.51.100.43",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 45,
      "prompt_window_s": "90",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 3,
    "fields": {
      "user": 43,
      "started_at": "2026-01-13T17:42:49Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.63",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 4,
      "prompts_sent": "6",
      "seconds_between_prompts": 29,
      "prompt_window_s": "174",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 4,
    "fields": {
      "user": 13,
      "started_at": "2026-03-12T05:37:25Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.45",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 28,
      "prompts_sent": "30",
      "seconds_between_prompts": 71,
      "prompt_window_s": "2130",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 5,
    "fields": {
      "user": 42,
      "started_at": "2026-02-07T08:48:51Z",
      "origin": "account owner",
      "source_ip": "198.51.100.15",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 82,
      "prompt_window_s": "164",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 6,
    "fields": {
      "user": 37,
      "started_at": "2026-03-12T01:57:59Z",
      "origin": "account owner",
      "source_ip": "198.51.100.107",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 50,
      "prompt_window_s": "50",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 7,
    "fields": {
      "user": 33,
      "started_at": "2026-04-03T18:33:08Z",
      "origin": "account owner",
      "source_ip": "198.51.100.86",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 57,
      "prompt_window_s": "57",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 8,
    "fields": {
      "user": 50,
      "started_at": "2026-04-27T03:37:11Z",
      "origin": "account owner",
      "source_ip": "198.51.100.67",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 63,
      "prompt_window_s": "126",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 9,
    "fields": {
      "user": 34,
      "started_at": "2026-01-18T04:55:09Z",
      "origin": "account owner",
      "source_ip": "192.0.2.59",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 86,
      "prompt_window_s": "86",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 10,
    "fields": {
      "user": 26,
      "started_at": "2026-03-01T23:16:30Z",
      "origin": "account owner",
      "source_ip": "203.0.113.209",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 53,
      "prompt_window_s": "53",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 11,
    "fields": {
      "user": 16,
      "started_at": "2026-01-15T02:09:34Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.24",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": 7,
      "prompts_sent": "8",
      "seconds_between_prompts": 61,
      "prompt_window_s": "488",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 12,
    "fields": {
      "user": 32,
      "started_at": "2026-02-08T10:11:12Z",
      "origin": "account owner",
      "source_ip": "192.0.2.33",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 62,
      "prompt_window_s": "62",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 13,
    "fields": {
      "user": 20,
      "started_at": "2026-01-20T23:08:15Z",
      "origin": "account owner",
      "source_ip": "203.0.113.140",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 53,
      "prompt_window_s": "53",
      "owner_result": "denied by mistake",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 14,
    "fields": {
      "user": 11,
      "started_at": "2026-04-06T12:14:39Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.73",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 20,
      "prompts_sent": "21",
      "seconds_between_prompts": 59,
      "prompt_window_s": "1239",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 15,
    "fields": {
      "user": 25,
      "started_at": "2026-04-29T10:21:57Z",
      "origin": "account owner",
      "source_ip": "203.0.113.117",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 77,
      "prompt_window_s": "154",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 16,
    "fields": {
      "user": 36,
      "started_at": "2026-01-19T10:32:35Z",
      "origin": "account owner",
      "source_ip": "203.0.113.22",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 54,
      "prompt_window_s": "54",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 17,
    "fields": {
      "user": 16,
      "started_at": "2026-01-18T16:51:45Z",
      "origin": "account owner",
      "source_ip": "192.0.2.142",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 42,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 18,
    "fields": {
      "user": 41,
      "started_at": "2026-01-21T22:48:27Z",
      "origin": "account owner",
      "source_ip": "203.0.113.87",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 40,
      "prompt_window_s": "80",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 19,
    "fields": {
      "user": 8,
      "started_at": "2026-04-12T06:26:34Z",
      "origin": "account owner",
      "source_ip": "203.0.113.21",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 87,
      "prompt_window_s": "174",
      "owner_result": "denied by mistake",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 20,
    "fields": {
      "user": 14,
      "started_at": "2026-02-26T14:08:10Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.252",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": 18,
      "prompts_sent": "20",
      "seconds_between_prompts": 77,
      "prompt_window_s": "1540",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 21,
    "fields": {
      "user": 42,
      "started_at": "2026-02-13T03:08:23Z",
      "origin": "account owner",
      "source_ip": "198.51.100.66",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 44,
      "prompt_window_s": "88",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 22,
    "fields": {
      "user": 5,
      "started_at": "2026-02-16T02:27:17Z",
      "origin": "account owner",
      "source_ip": "203.0.113.139",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 38,
      "prompt_window_s": "38",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 23,
    "fields": {
      "user": 7,
      "started_at": "2026-03-13T13:24:10Z",
      "origin": "account owner",
      "source_ip": "192.0.2.165",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 38,
      "prompt_window_s": "76",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 24,
    "fields": {
      "user": 16,
      "started_at": "2026-01-25T07:56:57Z",
      "origin": "account owner",
      "source_ip": "198.51.100.19",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 30,
      "prompt_window_s": "60",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 25,
    "fields": {
      "user": 23,
      "started_at": "2026-03-05T11:33:22Z",
      "origin": "account owner",
      "source_ip": "203.0.113.78",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 61,
      "prompt_window_s": "61",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 26,
    "fields": {
      "user": 36,
      "started_at": "2026-01-22T10:44:29Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.83",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 3,
      "prompts_sent": "4",
      "seconds_between_prompts": 64,
      "prompt_window_s": "256",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 27,
    "fields": {
      "user": 48,
      "started_at": "2026-01-17T04:25:35Z",
      "origin": "account owner",
      "source_ip": "203.0.113.135",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 61,
      "prompt_window_s": "122",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 28,
    "fields": {
      "user": 7,
      "started_at": "2026-03-18T15:01:10Z",
      "origin": "account owner",
      "source_ip": "192.0.2.179",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 51,
      "prompt_window_s": "102",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 29,
    "fields": {
      "user": 49,
      "started_at": "2026-01-26T17:33:40Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.158",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 5,
      "prompts_sent": "6",
      "seconds_between_prompts": 55,
      "prompt_window_s": "330",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 30,
    "fields": {
      "user": 46,
      "started_at": "2026-03-18T22:06:10Z",
      "origin": "account owner",
      "source_ip": "203.0.113.82",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 68,
      "prompt_window_s": "136",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 31,
    "fields": {
      "user": 2,
      "started_at": "2026-04-27T18:40:59Z",
      "origin": "account owner",
      "source_ip": "198.51.100.91",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 77,
      "prompt_window_s": "154",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 32,
    "fields": {
      "user": 36,
      "started_at": "2026-01-23T12:49:18Z",
      "origin": "account owner",
      "source_ip": "192.0.2.119",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 58,
      "prompt_window_s": "116",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 33,
    "fields": {
      "user": 4,
      "started_at": "2026-04-17T21:38:25Z",
      "origin": "account owner",
      "source_ip": "198.51.100.249",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 44,
      "prompt_window_s": "44",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 34,
    "fields": {
      "user": 42,
      "started_at": "2026-02-20T02:50:32Z",
      "origin": "account owner",
      "source_ip": "192.0.2.188",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 36,
      "prompt_window_s": "36",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 35,
    "fields": {
      "user": 12,
      "started_at": "2026-03-03T18:58:45Z",
      "origin": "account owner",
      "source_ip": "198.51.100.90",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 47,
      "prompt_window_s": "94",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 36,
    "fields": {
      "user": 39,
      "started_at": "2026-04-14T22:39:46Z",
      "origin": "account owner",
      "source_ip": "203.0.113.206",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 19,
      "prompt_window_s": "19",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 37,
    "fields": {
      "user": 29,
      "started_at": "2026-01-31T08:00:45Z",
      "origin": "account owner",
      "source_ip": "192.0.2.3",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 34,
      "prompt_window_s": "34",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 38,
    "fields": {
      "user": 26,
      "started_at": "2026-03-05T10:14:27Z",
      "origin": "account owner",
      "source_ip": "192.0.2.126",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 20,
      "prompt_window_s": "40",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 39,
    "fields": {
      "user": 49,
      "started_at": "2026-01-29T05:35:34Z",
      "origin": "account owner",
      "source_ip": "198.51.100.214",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 53,
      "prompt_window_s": "106",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 40,
    "fields": {
      "user": 7,
      "started_at": "2026-03-20T19:06:17Z",
      "origin": "account owner",
      "source_ip": "198.51.100.140",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 90,
      "prompt_window_s": "90",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 41,
    "fields": {
      "user": 29,
      "started_at": "2026-02-03T23:28:38Z",
      "origin": "account owner",
      "source_ip": "198.51.100.38",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 63,
      "prompt_window_s": "63",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 42,
    "fields": {
      "user": 41,
      "started_at": "2026-01-22T23:51:52Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.156",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": 6,
      "prompts_sent": "8",
      "seconds_between_prompts": 80,
      "prompt_window_s": "640",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 43,
    "fields": {
      "user": 34,
      "started_at": "2026-01-21T20:55:36Z",
      "origin": "account owner",
      "source_ip": "203.0.113.102",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 45,
      "prompt_window_s": "90",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 44,
    "fields": {
      "user": 42,
      "started_at": "2026-02-23T15:35:10Z",
      "origin": "account owner",
      "source_ip": "198.51.100.203",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 65,
      "prompt_window_s": "130",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 45,
    "fields": {
      "user": 19,
      "started_at": "2026-01-30T11:43:12Z",
      "origin": "account owner",
      "source_ip": "192.0.2.169",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 71,
      "prompt_window_s": "142",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 46,
    "fields": {
      "user": 2,
      "started_at": "2026-05-01T01:31:11Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.206",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 11,
      "prompts_sent": "12",
      "seconds_between_prompts": 49,
      "prompt_window_s": "588",
      "owner_result": null,
      "attack_result": "attacker gave up"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 47,
    "fields": {
      "user": 4,
      "started_at": "2026-04-22T14:11:28Z",
      "origin": "account owner",
      "source_ip": "203.0.113.173",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 34,
      "prompt_window_s": "68",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 48,
    "fields": {
      "user": 29,
      "started_at": "2026-02-05T22:58:13Z",
      "origin": "account owner",
      "source_ip": "192.0.2.22",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 16,
      "prompt_window_s": "16",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 49,
    "fields": {
      "user": 39,
      "started_at": "2026-04-16T17:44:00Z",
      "origin": "account owner",
      "source_ip": "198.51.100.97",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 88,
      "prompt_window_s": "88",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 50,
    "fields": {
      "user": 3,
      "started_at": "2026-03-06T10:42:22Z",
      "origin": "account owner",
      "source_ip": "203.0.113.4",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 62,
      "prompt_window_s": "124",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 51,
    "fields": {
      "user": 50,
      "started_at": "2026-04-30T05:21:54Z",
      "origin": "account owner",
      "source_ip": "192.0.2.215",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 21,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 52,
    "fields": {
      "user": 14,
      "started_at": "2026-03-02T08:00:20Z",
      "origin": "account owner",
      "source_ip": "198.51.100.181",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 30,
      "prompt_window_s": "30",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 53,
    "fields": {
      "user": 46,
      "started_at": "2026-03-19T23:56:14Z",
      "origin": "account owner",
      "source_ip": "198.51.100.197",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 19,
      "prompt_window_s": "38",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 54,
    "fields": {
      "user": 3,
      "started_at": "2026-03-10T17:55:13Z",
      "origin": "account owner",
      "source_ip": "198.51.100.63",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 67,
      "prompt_window_s": "134",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 55,
    "fields": {
      "user": 9,
      "started_at": "2026-01-31T15:24:25Z",
      "origin": "account owner",
      "source_ip": "203.0.113.174",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 64,
      "prompt_window_s": "128",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 56,
    "fields": {
      "user": 37,
      "started_at": "2026-03-15T15:49:27Z",
      "origin": "account owner",
      "source_ip": "192.0.2.211",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 59,
      "prompt_window_s": "118",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 57,
    "fields": {
      "user": 14,
      "started_at": "2026-03-08T18:05:08Z",
      "origin": "account owner",
      "source_ip": "192.0.2.1",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 79,
      "prompt_window_s": "79",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 58,
    "fields": {
      "user": 25,
      "started_at": "2026-05-05T19:43:12Z",
      "origin": "account owner",
      "source_ip": "198.51.100.252",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 50,
      "prompt_window_s": "100",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 59,
    "fields": {
      "user": 36,
      "started_at": "2026-01-24T16:41:48Z",
      "origin": "account owner",
      "source_ip": "192.0.2.16",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 45,
      "prompt_window_s": "45",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 60,
    "fields": {
      "user": 49,
      "started_at": "2026-02-05T03:06:21Z",
      "origin": "account owner",
      "source_ip": "198.51.100.4",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 65,
      "prompt_window_s": "130",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 61,
    "fields": {
      "user": 19,
      "started_at": "2026-02-01T23:23:16Z",
      "origin": "account owner",
      "source_ip": "198.51.100.241",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 60,
      "prompt_window_s": "120",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 62,
    "fields": {
      "user": 17,
      "started_at": "2026-01-09T23:47:48Z",
      "origin": "account owner",
      "source_ip": "203.0.113.141",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 36,
      "prompt_window_s": "36",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 63,
    "fields": {
      "user": 5,
      "started_at": "2026-02-18T12:54:47Z",
      "origin": "account owner",
      "source_ip": "203.0.113.55",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 43,
      "prompt_window_s": "43",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 64,
    "fields": {
      "user": 48,
      "started_at": "2026-01-18T15:30:08Z",
      "origin": "account owner",
      "source_ip": "192.0.2.187",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 82,
      "prompt_window_s": "82",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 65,
    "fields": {
      "user": 25,
      "started_at": "2026-05-12T14:10:51Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.67",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 3,
      "prompts_sent": "5",
      "seconds_between_prompts": 29,
      "prompt_window_s": "145",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 66,
    "fields": {
      "user": 7,
      "started_at": "2026-03-26T08:13:12Z",
      "origin": "account owner",
      "source_ip": "203.0.113.79",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 64,
      "prompt_window_s": "64",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 67,
    "fields": {
      "user": 24,
      "started_at": "2026-01-12T18:55:13Z",
      "origin": "account owner",
      "source_ip": "192.0.2.129",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 82,
      "prompt_window_s": "164",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 68,
    "fields": {
      "user": 29,
      "started_at": "2026-02-12T10:02:39Z",
      "origin": "account owner",
      "source_ip": "203.0.113.24",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 85,
      "prompt_window_s": "170",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 69,
    "fields": {
      "user": 48,
      "started_at": "2026-01-19T15:46:47Z",
      "origin": "account owner",
      "source_ip": "192.0.2.40",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 62,
      "prompt_window_s": "62",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 70,
    "fields": {
      "user": 31,
      "started_at": "2026-02-12T22:00:13Z",
      "origin": "account owner",
      "source_ip": "203.0.113.87",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 80,
      "prompt_window_s": "80",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 71,
    "fields": {
      "user": 9,
      "started_at": "2026-02-07T02:36:06Z",
      "origin": "account owner",
      "source_ip": "198.51.100.82",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 67,
      "prompt_window_s": "134",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 72,
    "fields": {
      "user": 37,
      "started_at": "2026-03-17T09:00:35Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.238",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": 3,
      "prompts_sent": "4",
      "seconds_between_prompts": 37,
      "prompt_window_s": "148",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 73,
    "fields": {
      "user": 39,
      "started_at": "2026-04-20T23:21:15Z",
      "origin": "account owner",
      "source_ip": "203.0.113.111",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 67,
      "prompt_window_s": "134",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 74,
    "fields": {
      "user": 9,
      "started_at": "2026-02-10T13:51:23Z",
      "origin": "account owner",
      "source_ip": "192.0.2.6",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 21,
      "prompt_window_s": "21",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 75,
    "fields": {
      "user": 47,
      "started_at": "2026-05-01T19:04:46Z",
      "origin": "account owner",
      "source_ip": "192.0.2.180",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 39,
      "prompt_window_s": "39",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 76,
    "fields": {
      "user": 35,
      "started_at": "2026-03-28T23:26:06Z",
      "origin": "account owner",
      "source_ip": "198.51.100.57",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 48,
      "prompt_window_s": "96",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 77,
    "fields": {
      "user": 28,
      "started_at": "2026-04-09T12:54:08Z",
      "origin": "account owner",
      "source_ip": "198.51.100.34",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 33,
      "prompt_window_s": "33",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 78,
    "fields": {
      "user": 36,
      "started_at": "2026-01-30T15:49:29Z",
      "origin": "account owner",
      "source_ip": "192.0.2.245",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 88,
      "prompt_window_s": "176",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 79,
    "fields": {
      "user": 20,
      "started_at": "2026-01-25T10:16:39Z",
      "origin": "account owner",
      "source_ip": "192.0.2.89",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 17,
      "prompt_window_s": "17",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 80,
    "fields": {
      "user": 5,
      "started_at": "2026-02-21T07:33:51Z",
      "origin": "account owner",
      "source_ip": "203.0.113.217",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 88,
      "prompt_window_s": "88",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 81,
    "fields": {
      "user": 25,
      "started_at": "2026-05-16T13:59:09Z",
      "origin": "account owner",
      "source_ip": "198.51.100.207",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 44,
      "prompt_window_s": "88",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 82,
    "fields": {
      "user": 12,
      "started_at": "2026-03-06T00:37:42Z",
      "origin": "account owner",
      "source_ip": "203.0.113.9",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 58,
      "prompt_window_s": "58",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 83,
    "fields": {
      "user": 48,
      "started_at": "2026-01-24T22:27:06Z",
      "origin": "account owner",
      "source_ip": "203.0.113.17",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 43,
      "prompt_window_s": "86",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 84,
    "fields": {
      "user": 9,
      "started_at": "2026-02-15T08:13:21Z",
      "origin": "account owner",
      "source_ip": "203.0.113.228",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 83,
      "prompt_window_s": "166",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 85,
    "fields": {
      "user": 13,
      "started_at": "2026-03-18T23:37:40Z",
      "origin": "account owner",
      "source_ip": "203.0.113.96",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 89,
      "prompt_window_s": "89",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 86,
    "fields": {
      "user": 31,
      "started_at": "2026-02-15T02:56:34Z",
      "origin": "account owner",
      "source_ip": "198.51.100.200",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 81,
      "prompt_window_s": "81",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 87,
    "fields": {
      "user": 9,
      "started_at": "2026-02-16T18:21:47Z",
      "origin": "account owner",
      "source_ip": "198.51.100.239",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 87,
      "prompt_window_s": "87",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 88,
    "fields": {
      "user": 48,
      "started_at": "2026-01-28T10:17:53Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.226",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 22,
      "prompts_sent": "24",
      "seconds_between_prompts": 52,
      "prompt_window_s": "1248",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 89,
    "fields": {
      "user": 35,
      "started_at": "2026-04-04T07:49:05Z",
      "origin": "account owner",
      "source_ip": "192.0.2.217",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 81,
      "prompt_window_s": "81",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 90,
    "fields": {
      "user": 2,
      "started_at": "2026-05-06T06:50:10Z",
      "origin": "account owner",
      "source_ip": "198.51.100.213",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 75,
      "prompt_window_s": "75",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 91,
    "fields": {
      "user": 20,
      "started_at": "2026-01-30T21:52:44Z",
      "origin": "account owner",
      "source_ip": "192.0.2.12",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 71,
      "prompt_window_s": "142",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 92,
    "fields": {
      "user": 40,
      "started_at": "2026-03-20T17:36:05Z",
      "origin": "account owner",
      "source_ip": "192.0.2.146",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 64,
      "prompt_window_s": "64",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 93,
    "fields": {
      "user": 34,
      "started_at": "2026-01-23T01:12:09Z",
      "origin": "account owner",
      "source_ip": "203.0.113.187",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 32,
      "prompt_window_s": "64",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 94,
    "fields": {
      "user": 4,
      "started_at": "2026-04-26T08:31:11Z",
      "origin": "account owner",
      "source_ip": "198.51.100.210",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 69,
      "prompt_window_s": "138",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 95,
    "fields": {
      "user": 43,
      "started_at": "2026-01-14T20:16:50Z",
      "origin": "account owner",
      "source_ip": "203.0.113.219",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 35,
      "prompt_window_s": "35",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 96,
    "fields": {
      "user": 7,
      "started_at": "2026-03-29T18:38:08Z",
      "origin": "account owner",
      "source_ip": "198.51.100.216",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 67,
      "prompt_window_s": "67",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 97,
    "fields": {
      "user": 38,
      "started_at": "2026-05-03T23:34:33Z",
      "origin": "account owner",
      "source_ip": "198.51.100.226",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 51,
      "prompt_window_s": "102",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 98,
    "fields": {
      "user": 40,
      "started_at": "2026-03-22T05:00:28Z",
      "origin": "account owner",
      "source_ip": "192.0.2.215",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 72,
      "prompt_window_s": "72",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 99,
    "fields": {
      "user": 25,
      "started_at": "2026-05-20T00:38:21Z",
      "origin": "account owner",
      "source_ip": "198.51.100.137",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 16,
      "prompt_window_s": "16",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 100,
    "fields": {
      "user": 39,
      "started_at": "2026-04-26T09:36:32Z",
      "origin": "account owner",
      "source_ip": "198.51.100.24",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 48,
      "prompt_window_s": "96",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 101,
    "fields": {
      "user": 34,
      "started_at": "2026-01-24T23:13:01Z",
      "origin": "account owner",
      "source_ip": "192.0.2.13",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 35,
      "prompt_window_s": "35",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 102,
    "fields": {
      "user": 26,
      "started_at": "2026-03-09T01:29:37Z",
      "origin": "account owner",
      "source_ip": "192.0.2.203",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 17,
      "prompt_window_s": "34",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 103,
    "fields": {
      "user": 35,
      "started_at": "2026-04-10T05:44:30Z",
      "origin": "account owner",
      "source_ip": "198.51.100.168",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 37,
      "prompt_window_s": "37",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 104,
    "fields": {
      "user": 40,
      "started_at": "2026-03-24T11:10:55Z",
      "origin": "account owner",
      "source_ip": "192.0.2.118",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 21,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 105,
    "fields": {
      "user": 20,
      "started_at": "2026-02-04T16:08:00Z",
      "origin": "account owner",
      "source_ip": "192.0.2.100",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 58,
      "prompt_window_s": "58",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 106,
    "fields": {
      "user": 7,
      "started_at": "2026-04-01T03:50:36Z",
      "origin": "account owner",
      "source_ip": "192.0.2.55",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 87,
      "prompt_window_s": "174",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 107,
    "fields": {
      "user": 1,
      "started_at": "2026-04-20T20:57:27Z",
      "origin": "account owner",
      "source_ip": "192.0.2.232",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 61,
      "prompt_window_s": "122",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 108,
    "fields": {
      "user": 1,
      "started_at": "2026-04-26T04:04:53Z",
      "origin": "account owner",
      "source_ip": "203.0.113.213",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 57,
      "prompt_window_s": "57",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 109,
    "fields": {
      "user": 13,
      "started_at": "2026-03-24T14:48:19Z",
      "origin": "account owner",
      "source_ip": "198.51.100.105",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 49,
      "prompt_window_s": "98",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 110,
    "fields": {
      "user": 2,
      "started_at": "2026-05-08T17:25:00Z",
      "origin": "account owner",
      "source_ip": "198.51.100.36",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 83,
      "prompt_window_s": "83",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 111,
    "fields": {
      "user": 13,
      "started_at": "2026-03-27T06:06:43Z",
      "origin": "account owner",
      "source_ip": "198.51.100.12",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 37,
      "prompt_window_s": "74",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 112,
    "fields": {
      "user": 41,
      "started_at": "2026-01-26T15:20:56Z",
      "origin": "account owner",
      "source_ip": "203.0.113.54",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 31,
      "prompt_window_s": "31",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 113,
    "fields": {
      "user": 39,
      "started_at": "2026-04-29T01:58:58Z",
      "origin": "account owner",
      "source_ip": "192.0.2.92",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 44,
      "prompt_window_s": "88",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 114,
    "fields": {
      "user": 17,
      "started_at": "2026-01-13T18:18:27Z",
      "origin": "account owner",
      "source_ip": "203.0.113.173",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 57,
      "prompt_window_s": "114",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 115,
    "fields": {
      "user": 1,
      "started_at": "2026-04-29T23:03:41Z",
      "origin": "account owner",
      "source_ip": "203.0.113.174",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 70,
      "prompt_window_s": "140",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 116,
    "fields": {
      "user": 41,
      "started_at": "2026-02-01T06:24:21Z",
      "origin": "account owner",
      "source_ip": "198.51.100.51",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 66,
      "prompt_window_s": "132",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 117,
    "fields": {
      "user": 39,
      "started_at": "2026-05-06T01:18:39Z",
      "origin": "account owner",
      "source_ip": "203.0.113.141",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 80,
      "prompt_window_s": "80",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 118,
    "fields": {
      "user": 48,
      "started_at": "2026-02-01T12:29:39Z",
      "origin": "account owner",
      "source_ip": "198.51.100.243",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 29,
      "prompt_window_s": "29",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 119,
    "fields": {
      "user": 12,
      "started_at": "2026-03-08T06:18:39Z",
      "origin": "account owner",
      "source_ip": "203.0.113.199",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 52,
      "prompt_window_s": "104",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 120,
    "fields": {
      "user": 16,
      "started_at": "2026-01-31T06:22:12Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.38",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": 12,
      "prompts_sent": "13",
      "seconds_between_prompts": 41,
      "prompt_window_s": "533",
      "owner_result": null,
      "attack_result": "attacker gave up"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 121,
    "fields": {
      "user": 35,
      "started_at": "2026-04-16T07:28:43Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.165",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": 27,
      "prompts_sent": "28",
      "seconds_between_prompts": 54,
      "prompt_window_s": "1512",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 122,
    "fields": {
      "user": 20,
      "started_at": "2026-02-08T08:39:38Z",
      "origin": "account owner",
      "source_ip": "203.0.113.112",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 77,
      "prompt_window_s": "154",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 123,
    "fields": {
      "user": 8,
      "started_at": "2026-04-15T21:51:19Z",
      "origin": "account owner",
      "source_ip": "198.51.100.132",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 52,
      "prompt_window_s": "52",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 124,
    "fields": {
      "user": 35,
      "started_at": "2026-04-20T16:18:37Z",
      "origin": "account owner",
      "source_ip": "203.0.113.38",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 64,
      "prompt_window_s": "64",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 125,
    "fields": {
      "user": 50,
      "started_at": "2026-05-03T08:23:27Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.186",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 4,
      "prompts_sent": "6",
      "seconds_between_prompts": 37,
      "prompt_window_s": "222",
      "owner_result": null,
      "attack_result": "attacker gave up"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 126,
    "fields": {
      "user": 43,
      "started_at": "2026-01-21T04:47:13Z",
      "origin": "account owner",
      "source_ip": "203.0.113.172",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 52,
      "prompt_window_s": "104",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 127,
    "fields": {
      "user": 38,
      "started_at": "2026-05-10T16:34:04Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.70",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 22,
      "prompts_sent": "24",
      "seconds_between_prompts": 51,
      "prompt_window_s": "1224",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 128,
    "fields": {
      "user": 42,
      "started_at": "2026-02-28T18:14:48Z",
      "origin": "account owner",
      "source_ip": "203.0.113.232",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 90,
      "prompt_window_s": "180",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 129,
    "fields": {
      "user": 10,
      "started_at": "2026-02-05T14:24:33Z",
      "origin": "account owner",
      "source_ip": "198.51.100.207",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 86,
      "prompt_window_s": "172",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 130,
    "fields": {
      "user": 28,
      "started_at": "2026-04-14T15:25:08Z",
      "origin": "account owner",
      "source_ip": "198.51.100.117",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 29,
      "prompt_window_s": "29",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 131,
    "fields": {
      "user": 2,
      "started_at": "2026-05-14T01:20:24Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.106",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": 20,
      "prompts_sent": "22",
      "seconds_between_prompts": 57,
      "prompt_window_s": "1254",
      "owner_result": null,
      "attack_result": "attacker gave up"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 132,
    "fields": {
      "user": 35,
      "started_at": "2026-04-23T13:54:21Z",
      "origin": "account owner",
      "source_ip": "198.51.100.120",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 21,
      "prompt_window_s": "21",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 133,
    "fields": {
      "user": 40,
      "started_at": "2026-03-29T16:12:44Z",
      "origin": "account owner",
      "source_ip": "192.0.2.216",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 28,
      "prompt_window_s": "56",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 134,
    "fields": {
      "user": 14,
      "started_at": "2026-03-15T05:43:50Z",
      "origin": "account owner",
      "source_ip": "198.51.100.74",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 60,
      "prompt_window_s": "120",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 135,
    "fields": {
      "user": 38,
      "started_at": "2026-05-15T12:50:20Z",
      "origin": "account owner",
      "source_ip": "203.0.113.83",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 15,
      "prompt_window_s": "30",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 136,
    "fields": {
      "user": 25,
      "started_at": "2026-05-24T06:16:10Z",
      "origin": "account owner",
      "source_ip": "198.51.100.111",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 62,
      "prompt_window_s": "124",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 137,
    "fields": {
      "user": 43,
      "started_at": "2026-01-24T20:56:31Z",
      "origin": "account owner",
      "source_ip": "203.0.113.130",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 73,
      "prompt_window_s": "146",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 138,
    "fields": {
      "user": 47,
      "started_at": "2026-05-04T20:42:02Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.20",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 18,
      "prompts_sent": "20",
      "seconds_between_prompts": 39,
      "prompt_window_s": "780",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 139,
    "fields": {
      "user": 16,
      "started_at": "2026-02-02T17:46:21Z",
      "origin": "account owner",
      "source_ip": "198.51.100.250",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 46,
      "prompt_window_s": "46",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 140,
    "fields": {
      "user": 46,
      "started_at": "2026-03-24T08:36:59Z",
      "origin": "account owner",
      "source_ip": "203.0.113.6",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 49,
      "prompt_window_s": "98",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 141,
    "fields": {
      "user": 31,
      "started_at": "2026-02-20T22:27:51Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.54",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": 9,
      "prompts_sent": "10",
      "seconds_between_prompts": 78,
      "prompt_window_s": "780",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 142,
    "fields": {
      "user": 3,
      "started_at": "2026-03-16T18:30:19Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.35",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 4,
      "prompts_sent": "6",
      "seconds_between_prompts": 70,
      "prompt_window_s": "420",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 143,
    "fields": {
      "user": 6,
      "started_at": "2026-01-15T21:45:41Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.233",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": 30,
      "prompts_sent": "31",
      "seconds_between_prompts": 57,
      "prompt_window_s": "1767",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 144,
    "fields": {
      "user": 40,
      "started_at": "2026-04-03T17:53:49Z",
      "origin": "account owner",
      "source_ip": "203.0.113.218",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 47,
      "prompt_window_s": "94",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 145,
    "fields": {
      "user": 23,
      "started_at": "2026-03-11T23:40:58Z",
      "origin": "account owner",
      "source_ip": "203.0.113.76",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 32,
      "prompt_window_s": "32",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 146,
    "fields": {
      "user": 38,
      "started_at": "2026-05-18T12:10:52Z",
      "origin": "account owner",
      "source_ip": "203.0.113.101",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 86,
      "prompt_window_s": "172",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 147,
    "fields": {
      "user": 32,
      "started_at": "2026-02-12T03:04:54Z",
      "origin": "account owner",
      "source_ip": "203.0.113.31",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 40,
      "prompt_window_s": "40",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 148,
    "fields": {
      "user": 40,
      "started_at": "2026-04-05T06:54:34Z",
      "origin": "account owner",
      "source_ip": "192.0.2.178",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 37,
      "prompt_window_s": "74",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 149,
    "fields": {
      "user": 18,
      "started_at": "2026-02-09T04:37:57Z",
      "origin": "account owner",
      "source_ip": "198.51.100.201",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 85,
      "prompt_window_s": "170",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 150,
    "fields": {
      "user": 35,
      "started_at": "2026-04-26T18:01:41Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.168",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 7,
      "prompts_sent": "9",
      "seconds_between_prompts": 42,
      "prompt_window_s": "378",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 151,
    "fields": {
      "user": 15,
      "started_at": "2026-04-02T00:43:39Z",
      "origin": "account owner",
      "source_ip": "198.51.100.46",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 36,
      "prompt_window_s": "72",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 152,
    "fields": {
      "user": 27,
      "started_at": "2026-02-10T20:39:03Z",
      "origin": "account owner",
      "source_ip": "198.51.100.95",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 68,
      "prompt_window_s": "136",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 153,
    "fields": {
      "user": 45,
      "started_at": "2026-04-24T02:43:41Z",
      "origin": "account owner",
      "source_ip": "198.51.100.116",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 42,
      "prompt_window_s": "84",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 154,
    "fields": {
      "user": 13,
      "started_at": "2026-03-30T05:32:25Z",
      "origin": "account owner",
      "source_ip": "192.0.2.32",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 74,
      "prompt_window_s": "74",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 155,
    "fields": {
      "user": 12,
      "started_at": "2026-03-13T11:00:19Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.144",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 23,
      "prompts_sent": "25",
      "seconds_between_prompts": 57,
      "prompt_window_s": "1425",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 156,
    "fields": {
      "user": 16,
      "started_at": "2026-02-05T06:20:39Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.65",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 24,
      "prompts_sent": "26",
      "seconds_between_prompts": 58,
      "prompt_window_s": "1508",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 157,
    "fields": {
      "user": 22,
      "started_at": "2026-03-18T15:09:37Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.69",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": 15,
      "prompts_sent": "17",
      "seconds_between_prompts": 26,
      "prompt_window_s": "442",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 158,
    "fields": {
      "user": 7,
      "started_at": "2026-04-03T11:00:06Z",
      "origin": "account owner",
      "source_ip": "192.0.2.139",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 86,
      "prompt_window_s": "86",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 159,
    "fields": {
      "user": 46,
      "started_at": "2026-03-26T05:39:55Z",
      "origin": "account owner",
      "source_ip": "198.51.100.200",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 47,
      "prompt_window_s": "94",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 160,
    "fields": {
      "user": 17,
      "started_at": "2026-01-19T12:32:07Z",
      "origin": "account owner",
      "source_ip": "203.0.113.24",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 78,
      "prompt_window_s": "156",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 161,
    "fields": {
      "user": 46,
      "started_at": "2026-03-31T17:48:10Z",
      "origin": "account owner",
      "source_ip": "203.0.113.15",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 77,
      "prompt_window_s": "154",
      "owner_result": "denied by mistake",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 162,
    "fields": {
      "user": 9,
      "started_at": "2026-02-21T05:15:28Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.251",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 23,
      "prompts_sent": "25",
      "seconds_between_prompts": 88,
      "prompt_window_s": "2200",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 163,
    "fields": {
      "user": 36,
      "started_at": "2026-02-03T19:57:40Z",
      "origin": "account owner",
      "source_ip": "198.51.100.130",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 65,
      "prompt_window_s": "65",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 164,
    "fields": {
      "user": 5,
      "started_at": "2026-02-23T14:31:50Z",
      "origin": "account owner",
      "source_ip": "198.51.100.176",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 78,
      "prompt_window_s": "78",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 165,
    "fields": {
      "user": 36,
      "started_at": "2026-02-05T00:36:15Z",
      "origin": "account owner",
      "source_ip": "192.0.2.61",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 84,
      "prompt_window_s": "168",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 166,
    "fields": {
      "user": 2,
      "started_at": "2026-05-15T08:29:26Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.98",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 27,
      "prompts_sent": "29",
      "seconds_between_prompts": 30,
      "prompt_window_s": "870",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 167,
    "fields": {
      "user": 4,
      "started_at": "2026-05-01T08:49:31Z",
      "origin": "account owner",
      "source_ip": "203.0.113.201",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 83,
      "prompt_window_s": "166",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 168,
    "fields": {
      "user": 45,
      "started_at": "2026-04-26T23:18:45Z",
      "origin": "account owner",
      "source_ip": "198.51.100.232",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 18,
      "prompt_window_s": "36",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 169,
    "fields": {
      "user": 14,
      "started_at": "2026-03-21T22:30:14Z",
      "origin": "account owner",
      "source_ip": "198.51.100.127",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 34,
      "prompt_window_s": "34",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 170,
    "fields": {
      "user": 19,
      "started_at": "2026-02-03T22:14:17Z",
      "origin": "account owner",
      "source_ip": "192.0.2.145",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 87,
      "prompt_window_s": "174",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 171,
    "fields": {
      "user": 38,
      "started_at": "2026-05-24T04:05:38Z",
      "origin": "account owner",
      "source_ip": "198.51.100.13",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 28,
      "prompt_window_s": "28",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 172,
    "fields": {
      "user": 37,
      "started_at": "2026-03-21T16:02:37Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.170",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": 29,
      "prompts_sent": "31",
      "seconds_between_prompts": 48,
      "prompt_window_s": "1488",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 173,
    "fields": {
      "user": 37,
      "started_at": "2026-03-25T11:33:57Z",
      "origin": "account owner",
      "source_ip": "198.51.100.241",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 75,
      "prompt_window_s": "150",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 174,
    "fields": {
      "user": 8,
      "started_at": "2026-04-20T08:44:54Z",
      "origin": "account owner",
      "source_ip": "198.51.100.142",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 31,
      "prompt_window_s": "62",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 175,
    "fields": {
      "user": 11,
      "started_at": "2026-04-09T08:04:03Z",
      "origin": "account owner",
      "source_ip": "198.51.100.8",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 81,
      "prompt_window_s": "162",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 176,
    "fields": {
      "user": 36,
      "started_at": "2026-02-10T07:48:11Z",
      "origin": "account owner",
      "source_ip": "198.51.100.218",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 76,
      "prompt_window_s": "152",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 177,
    "fields": {
      "user": 47,
      "started_at": "2026-05-11T14:37:09Z",
      "origin": "account owner",
      "source_ip": "198.51.100.164",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 22,
      "prompt_window_s": "22",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 178,
    "fields": {
      "user": 21,
      "started_at": "2026-03-20T11:28:20Z",
      "origin": "account owner",
      "source_ip": "203.0.113.64",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 53,
      "prompt_window_s": "106",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 179,
    "fields": {
      "user": 40,
      "started_at": "2026-04-08T00:44:26Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.16",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 20,
      "prompts_sent": "22",
      "seconds_between_prompts": 79,
      "prompt_window_s": "1738",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 180,
    "fields": {
      "user": 20,
      "started_at": "2026-02-11T16:14:40Z",
      "origin": "account owner",
      "source_ip": "192.0.2.7",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 59,
      "prompt_window_s": "59",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 181,
    "fields": {
      "user": 3,
      "started_at": "2026-03-19T15:34:41Z",
      "origin": "account owner",
      "source_ip": "203.0.113.159",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 53,
      "prompt_window_s": "53",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 182,
    "fields": {
      "user": 26,
      "started_at": "2026-03-13T04:28:39Z",
      "origin": "account owner",
      "source_ip": "203.0.113.20",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 69,
      "prompt_window_s": "138",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 183,
    "fields": {
      "user": 49,
      "started_at": "2026-02-11T22:34:09Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.204",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 14,
      "prompts_sent": "16",
      "seconds_between_prompts": 65,
      "prompt_window_s": "1040",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 184,
    "fields": {
      "user": 48,
      "started_at": "2026-02-05T17:47:15Z",
      "origin": "account owner",
      "source_ip": "198.51.100.58",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 18,
      "prompt_window_s": "36",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 185,
    "fields": {
      "user": 3,
      "started_at": "2026-03-26T10:51:51Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.92",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 7,
      "prompts_sent": "9",
      "seconds_between_prompts": 32,
      "prompt_window_s": "288",
      "owner_result": null,
      "attack_result": "approved under fatigue"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 186,
    "fields": {
      "user": 17,
      "started_at": "2026-01-22T01:46:28Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.52",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 8,
      "prompts_sent": "10",
      "seconds_between_prompts": 36,
      "prompt_window_s": "360",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 187,
    "fields": {
      "user": 4,
      "started_at": "2026-05-05T09:42:31Z",
      "origin": "account owner",
      "source_ip": "203.0.113.157",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 72,
      "prompt_window_s": "144",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 188,
    "fields": {
      "user": 25,
      "started_at": "2026-05-30T19:12:10Z",
      "origin": "account owner",
      "source_ip": "203.0.113.220",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 42,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 189,
    "fields": {
      "user": 5,
      "started_at": "2026-03-02T00:36:50Z",
      "origin": "account owner",
      "source_ip": "198.51.100.113",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 59,
      "prompt_window_s": "118",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 190,
    "fields": {
      "user": 18,
      "started_at": "2026-02-13T21:44:49Z",
      "origin": "account owner",
      "source_ip": "192.0.2.131",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 75,
      "prompt_window_s": "150",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 191,
    "fields": {
      "user": 38,
      "started_at": "2026-05-27T16:40:24Z",
      "origin": "account owner",
      "source_ip": "192.0.2.79",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 36,
      "prompt_window_s": "72",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 192,
    "fields": {
      "user": 41,
      "started_at": "2026-02-03T15:50:12Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.209",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 27,
      "prompts_sent": "28",
      "seconds_between_prompts": 49,
      "prompt_window_s": "1372",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 193,
    "fields": {
      "user": 8,
      "started_at": "2026-04-21T12:04:56Z",
      "origin": "account owner",
      "source_ip": "198.51.100.87",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 55,
      "prompt_window_s": "55",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 194,
    "fields": {
      "user": 3,
      "started_at": "2026-03-31T21:15:30Z",
      "origin": "account owner",
      "source_ip": "203.0.113.145",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 84,
      "prompt_window_s": "84",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 195,
    "fields": {
      "user": 48,
      "started_at": "2026-02-10T20:51:11Z",
      "origin": "account owner",
      "source_ip": "198.51.100.1",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 26,
      "prompt_window_s": "52",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 196,
    "fields": {
      "user": 42,
      "started_at": "2026-03-07T04:49:09Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.134",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": 20,
      "prompts_sent": "21",
      "seconds_between_prompts": 47,
      "prompt_window_s": "987",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 197,
    "fields": {
      "user": 46,
      "started_at": "2026-04-06T17:05:13Z",
      "origin": "account owner",
      "source_ip": "198.51.100.125",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 40,
      "prompt_window_s": "80",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 198,
    "fields": {
      "user": 1,
      "started_at": "2026-05-05T18:04:15Z",
      "origin": "account owner",
      "source_ip": "192.0.2.181",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 42,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 199,
    "fields": {
      "user": 26,
      "started_at": "2026-03-16T03:05:21Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.164",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": 5,
      "prompts_sent": "6",
      "seconds_between_prompts": 81,
      "prompt_window_s": "486",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 200,
    "fields": {
      "user": 16,
      "started_at": "2026-02-11T09:57:52Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.168",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": 9,
      "prompts_sent": "10",
      "seconds_between_prompts": 66,
      "prompt_window_s": "660",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 201,
    "fields": {
      "user": 30,
      "started_at": "2026-02-26T23:24:18Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.177",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 24,
      "prompts_sent": "25",
      "seconds_between_prompts": 27,
      "prompt_window_s": "675",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 202,
    "fields": {
      "user": 42,
      "started_at": "2026-03-09T11:12:11Z",
      "origin": "account owner",
      "source_ip": "203.0.113.31",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 60,
      "prompt_window_s": "120",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 203,
    "fields": {
      "user": 17,
      "started_at": "2026-01-26T01:14:00Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.203",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 22,
      "prompts_sent": "23",
      "seconds_between_prompts": 50,
      "prompt_window_s": "1150",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 204,
    "fields": {
      "user": 7,
      "started_at": "2026-04-06T10:30:06Z",
      "origin": "account owner",
      "source_ip": "192.0.2.222",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 35,
      "prompt_window_s": "35",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 205,
    "fields": {
      "user": 10,
      "started_at": "2026-02-07T17:46:16Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.134",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": 5,
      "prompts_sent": "7",
      "seconds_between_prompts": 44,
      "prompt_window_s": "308",
      "owner_result": null,
      "attack_result": "attacker gave up"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 206,
    "fields": {
      "user": 48,
      "started_at": "2026-02-12T03:29:28Z",
      "origin": "account owner",
      "source_ip": "203.0.113.54",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 60,
      "prompt_window_s": "60",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 207,
    "fields": {
      "user": 41,
      "started_at": "2026-02-05T12:19:36Z",
      "origin": "account owner",
      "source_ip": "198.51.100.252",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 42,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 208,
    "fields": {
      "user": 21,
      "started_at": "2026-03-21T17:53:20Z",
      "origin": "account owner",
      "source_ip": "198.51.100.134",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 79,
      "prompt_window_s": "79",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 209,
    "fields": {
      "user": 23,
      "started_at": "2026-03-14T18:26:33Z",
      "origin": "account owner",
      "source_ip": "203.0.113.98",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 27,
      "prompt_window_s": "27",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 210,
    "fields": {
      "user": 34,
      "started_at": "2026-01-28T19:14:12Z",
      "origin": "account owner",
      "source_ip": "203.0.113.60",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 73,
      "prompt_window_s": "73",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 211,
    "fields": {
      "user": 13,
      "started_at": "2026-04-04T12:46:31Z",
      "origin": "account owner",
      "source_ip": "203.0.113.95",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 87,
      "prompt_window_s": "174",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 212,
    "fields": {
      "user": 42,
      "started_at": "2026-03-12T13:34:26Z",
      "origin": "account owner",
      "source_ip": "198.51.100.98",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 32,
      "prompt_window_s": "64",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 213,
    "fields": {
      "user": 13,
      "started_at": "2026-04-05T18:01:18Z",
      "origin": "account owner",
      "source_ip": "192.0.2.187",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 50,
      "prompt_window_s": "50",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 214,
    "fields": {
      "user": 13,
      "started_at": "2026-04-12T10:01:24Z",
      "origin": "account owner",
      "source_ip": "203.0.113.211",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 26,
      "prompt_window_s": "26",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 215,
    "fields": {
      "user": 38,
      "started_at": "2026-06-03T11:43:44Z",
      "origin": "account owner",
      "source_ip": "192.0.2.117",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 21,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 216,
    "fields": {
      "user": 45,
      "started_at": "2026-04-30T15:57:59Z",
      "origin": "account owner",
      "source_ip": "192.0.2.160",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 81,
      "prompt_window_s": "81",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 217,
    "fields": {
      "user": 35,
      "started_at": "2026-04-29T18:38:54Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.45",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 14,
      "prompts_sent": "15",
      "seconds_between_prompts": 37,
      "prompt_window_s": "555",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 218,
    "fields": {
      "user": 31,
      "started_at": "2026-02-25T01:30:02Z",
      "origin": "account owner",
      "source_ip": "203.0.113.151",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 33,
      "prompt_window_s": "33",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 219,
    "fields": {
      "user": 45,
      "started_at": "2026-05-03T13:01:37Z",
      "origin": "account owner",
      "source_ip": "192.0.2.65",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 20,
      "prompt_window_s": "40",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 220,
    "fields": {
      "user": 37,
      "started_at": "2026-03-28T06:21:43Z",
      "origin": "account owner",
      "source_ip": "198.51.100.52",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 73,
      "prompt_window_s": "146",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 221,
    "fields": {
      "user": 19,
      "started_at": "2026-02-09T06:26:56Z",
      "origin": "account owner",
      "source_ip": "192.0.2.249",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 42,
      "prompt_window_s": "84",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 222,
    "fields": {
      "user": 34,
      "started_at": "2026-01-31T00:52:59Z",
      "origin": "account owner",
      "source_ip": "192.0.2.147",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 49,
      "prompt_window_s": "98",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 223,
    "fields": {
      "user": 3,
      "started_at": "2026-04-02T01:22:37Z",
      "origin": "account owner",
      "source_ip": "203.0.113.47",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 69,
      "prompt_window_s": "69",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 224,
    "fields": {
      "user": 10,
      "started_at": "2026-02-11T22:30:03Z",
      "origin": "account owner",
      "source_ip": "198.51.100.18",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 34,
      "prompt_window_s": "34",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 225,
    "fields": {
      "user": 35,
      "started_at": "2026-05-01T06:28:18Z",
      "origin": "account owner",
      "source_ip": "192.0.2.85",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 57,
      "prompt_window_s": "114",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 226,
    "fields": {
      "user": 11,
      "started_at": "2026-04-15T08:12:38Z",
      "origin": "account owner",
      "source_ip": "192.0.2.20",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 68,
      "prompt_window_s": "68",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 227,
    "fields": {
      "user": 41,
      "started_at": "2026-02-11T19:54:40Z",
      "origin": "account owner",
      "source_ip": "198.51.100.90",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 56,
      "prompt_window_s": "56",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 228,
    "fields": {
      "user": 29,
      "started_at": "2026-02-14T08:02:11Z",
      "origin": "account owner",
      "source_ip": "198.51.100.179",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 22,
      "prompt_window_s": "44",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 229,
    "fields": {
      "user": 36,
      "started_at": "2026-02-14T15:19:43Z",
      "origin": "account owner",
      "source_ip": "203.0.113.233",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 33,
      "prompt_window_s": "66",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 230,
    "fields": {
      "user": 8,
      "started_at": "2026-04-22T17:15:57Z",
      "origin": "account owner",
      "source_ip": "192.0.2.160",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 75,
      "prompt_window_s": "75",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 231,
    "fields": {
      "user": 30,
      "started_at": "2026-03-03T04:10:14Z",
      "origin": "account owner",
      "source_ip": "203.0.113.90",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 44,
      "prompt_window_s": "88",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 232,
    "fields": {
      "user": 40,
      "started_at": "2026-04-10T22:26:19Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.2",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": 3,
      "prompts_sent": "4",
      "seconds_between_prompts": 19,
      "prompt_window_s": "76",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 233,
    "fields": {
      "user": 13,
      "started_at": "2026-04-16T05:14:50Z",
      "origin": "account owner",
      "source_ip": "203.0.113.243",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 89,
      "prompt_window_s": "89",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 234,
    "fields": {
      "user": 24,
      "started_at": "2026-01-16T16:46:57Z",
      "origin": "account owner",
      "source_ip": "198.51.100.132",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 16,
      "prompt_window_s": "32",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 235,
    "fields": {
      "user": 12,
      "started_at": "2026-03-14T19:33:50Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.119",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 4,
      "prompts_sent": "6",
      "seconds_between_prompts": 25,
      "prompt_window_s": "150",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 236,
    "fields": {
      "user": 19,
      "started_at": "2026-02-10T11:18:51Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.124",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 4,
      "prompts_sent": "6",
      "seconds_between_prompts": 61,
      "prompt_window_s": "366",
      "owner_result": null,
      "attack_result": "approved under fatigue"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 237,
    "fields": {
      "user": 21,
      "started_at": "2026-03-24T11:27:13Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.130",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 11,
      "prompts_sent": "13",
      "seconds_between_prompts": 57,
      "prompt_window_s": "741",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 238,
    "fields": {
      "user": 39,
      "started_at": "2026-05-09T00:53:42Z",
      "origin": "account owner",
      "source_ip": "192.0.2.215",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 39,
      "prompt_window_s": "78",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 239,
    "fields": {
      "user": 38,
      "started_at": "2026-06-04T13:20:58Z",
      "origin": "account owner",
      "source_ip": "198.51.100.201",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 31,
      "prompt_window_s": "31",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 240,
    "fields": {
      "user": 48,
      "started_at": "2026-02-16T02:53:32Z",
      "origin": "account owner",
      "source_ip": "198.51.100.92",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 80,
      "prompt_window_s": "80",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 241,
    "fields": {
      "user": 21,
      "started_at": "2026-03-26T05:08:12Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.108",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 4,
      "prompts_sent": "6",
      "seconds_between_prompts": 76,
      "prompt_window_s": "456",
      "owner_result": null,
      "attack_result": "approved under fatigue"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 242,
    "fields": {
      "user": 19,
      "started_at": "2026-02-17T02:21:19Z",
      "origin": "account owner",
      "source_ip": "203.0.113.24",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 44,
      "prompt_window_s": "44",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 243,
    "fields": {
      "user": 43,
      "started_at": "2026-01-27T13:33:49Z",
      "origin": "account owner",
      "source_ip": "203.0.113.23",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 49,
      "prompt_window_s": "49",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 244,
    "fields": {
      "user": 19,
      "started_at": "2026-02-20T07:07:51Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.226",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 9,
      "prompts_sent": "10",
      "seconds_between_prompts": 20,
      "prompt_window_s": "200",
      "owner_result": null,
      "attack_result": "approved under fatigue"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 245,
    "fields": {
      "user": 20,
      "started_at": "2026-02-13T21:33:43Z",
      "origin": "account owner",
      "source_ip": "192.0.2.71",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 60,
      "prompt_window_s": "60",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 246,
    "fields": {
      "user": 27,
      "started_at": "2026-02-14T14:49:52Z",
      "origin": "account owner",
      "source_ip": "192.0.2.8",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 52,
      "prompt_window_s": "104",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 247,
    "fields": {
      "user": 7,
      "started_at": "2026-04-12T06:10:03Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.234",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": 5,
      "prompts_sent": "6",
      "seconds_between_prompts": 81,
      "prompt_window_s": "486",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 248,
    "fields": {
      "user": 42,
      "started_at": "2026-03-18T16:42:26Z",
      "origin": "account owner",
      "source_ip": "198.51.100.145",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 32,
      "prompt_window_s": "32",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 249,
    "fields": {
      "user": 50,
      "started_at": "2026-05-04T12:41:21Z",
      "origin": "account owner",
      "source_ip": "198.51.100.93",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 47,
      "prompt_window_s": "94",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 250,
    "fields": {
      "user": 11,
      "started_at": "2026-04-16T09:56:34Z",
      "origin": "account owner",
      "source_ip": "192.0.2.103",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 49,
      "prompt_window_s": "49",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 251,
    "fields": {
      "user": 22,
      "started_at": "2026-03-24T13:29:22Z",
      "origin": "account owner",
      "source_ip": "203.0.113.173",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 31,
      "prompt_window_s": "62",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 252,
    "fields": {
      "user": 20,
      "started_at": "2026-02-15T18:25:52Z",
      "origin": "account owner",
      "source_ip": "192.0.2.222",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 19,
      "prompt_window_s": "19",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 253,
    "fields": {
      "user": 39,
      "started_at": "2026-05-10T04:43:33Z",
      "origin": "account owner",
      "source_ip": "192.0.2.188",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 74,
      "prompt_window_s": "74",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 254,
    "fields": {
      "user": 22,
      "started_at": "2026-03-26T06:54:52Z",
      "origin": "account owner",
      "source_ip": "192.0.2.3",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 79,
      "prompt_window_s": "158",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 255,
    "fields": {
      "user": 4,
      "started_at": "2026-05-07T08:05:44Z",
      "origin": "account owner",
      "source_ip": "203.0.113.112",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 37,
      "prompt_window_s": "74",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 256,
    "fields": {
      "user": 12,
      "started_at": "2026-03-21T08:15:20Z",
      "origin": "account owner",
      "source_ip": "203.0.113.128",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 73,
      "prompt_window_s": "73",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 257,
    "fields": {
      "user": 22,
      "started_at": "2026-03-31T08:11:56Z",
      "origin": "account owner",
      "source_ip": "203.0.113.102",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 31,
      "prompt_window_s": "62",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 258,
    "fields": {
      "user": 39,
      "started_at": "2026-05-14T01:37:06Z",
      "origin": "account owner",
      "source_ip": "198.51.100.24",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 58,
      "prompt_window_s": "58",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 259,
    "fields": {
      "user": 41,
      "started_at": "2026-02-13T15:47:22Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.93",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 28,
      "prompts_sent": "30",
      "seconds_between_prompts": 21,
      "prompt_window_s": "630",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 260,
    "fields": {
      "user": 39,
      "started_at": "2026-05-18T08:26:11Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.123",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": 4,
      "prompts_sent": "5",
      "seconds_between_prompts": 32,
      "prompt_window_s": "160",
      "owner_result": null,
      "attack_result": "attacker gave up"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 261,
    "fields": {
      "user": 19,
      "started_at": "2026-02-27T03:29:37Z",
      "origin": "account owner",
      "source_ip": "198.51.100.164",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 80,
      "prompt_window_s": "160",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 262,
    "fields": {
      "user": 17,
      "started_at": "2026-01-27T01:33:14Z",
      "origin": "account owner",
      "source_ip": "192.0.2.75",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 75,
      "prompt_window_s": "150",
      "owner_result": "denied by mistake",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 263,
    "fields": {
      "user": 50,
      "started_at": "2026-05-09T19:16:03Z",
      "origin": "account owner",
      "source_ip": "198.51.100.63",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 84,
      "prompt_window_s": "168",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 264,
    "fields": {
      "user": 30,
      "started_at": "2026-03-04T14:27:15Z",
      "origin": "account owner",
      "source_ip": "198.51.100.215",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 70,
      "prompt_window_s": "140",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 265,
    "fields": {
      "user": 19,
      "started_at": "2026-03-04T13:20:22Z",
      "origin": "account owner",
      "source_ip": "192.0.2.2",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 56,
      "prompt_window_s": "112",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 266,
    "fields": {
      "user": 47,
      "started_at": "2026-05-13T22:37:30Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.122",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 25,
      "prompts_sent": "27",
      "seconds_between_prompts": 27,
      "prompt_window_s": "729",
      "owner_result": null,
      "attack_result": "approved under fatigue"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 267,
    "fields": {
      "user": 25,
      "started_at": "2026-06-05T12:47:04Z",
      "origin": "account owner",
      "source_ip": "203.0.113.216",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 30,
      "prompt_window_s": "30",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 268,
    "fields": {
      "user": 12,
      "started_at": "2026-03-22T14:02:27Z",
      "origin": "account owner",
      "source_ip": "192.0.2.108",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 84,
      "prompt_window_s": "84",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 269,
    "fields": {
      "user": 41,
      "started_at": "2026-02-15T05:08:07Z",
      "origin": "account owner",
      "source_ip": "192.0.2.223",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 52,
      "prompt_window_s": "52",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 270,
    "fields": {
      "user": 16,
      "started_at": "2026-02-13T23:11:53Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.9",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 13,
      "prompts_sent": "15",
      "seconds_between_prompts": 78,
      "prompt_window_s": "1170",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 271,
    "fields": {
      "user": 34,
      "started_at": "2026-02-04T06:20:26Z",
      "origin": "account owner",
      "source_ip": "203.0.113.99",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 59,
      "prompt_window_s": "59",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 272,
    "fields": {
      "user": 37,
      "started_at": "2026-03-30T22:23:22Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.176",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": 20,
      "prompts_sent": "21",
      "seconds_between_prompts": 28,
      "prompt_window_s": "588",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 273,
    "fields": {
      "user": 7,
      "started_at": "2026-04-16T18:00:54Z",
      "origin": "account owner",
      "source_ip": "203.0.113.93",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 20,
      "prompt_window_s": "40",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 274,
    "fields": {
      "user": 22,
      "started_at": "2026-04-05T08:04:57Z",
      "origin": "account owner",
      "source_ip": "192.0.2.171",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 27,
      "prompt_window_s": "54",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 275,
    "fields": {
      "user": 29,
      "started_at": "2026-02-21T00:11:30Z",
      "origin": "account owner",
      "source_ip": "198.51.100.241",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 67,
      "prompt_window_s": "134",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 276,
    "fields": {
      "user": 28,
      "started_at": "2026-04-15T19:40:09Z",
      "origin": "account owner",
      "source_ip": "198.51.100.107",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 60,
      "prompt_window_s": "120",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 277,
    "fields": {
      "user": 40,
      "started_at": "2026-04-14T16:06:10Z",
      "origin": "account owner",
      "source_ip": "203.0.113.156",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 53,
      "prompt_window_s": "53",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 278,
    "fields": {
      "user": 46,
      "started_at": "2026-04-11T15:03:14Z",
      "origin": "account owner",
      "source_ip": "198.51.100.117",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 16,
      "prompt_window_s": "16",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 279,
    "fields": {
      "user": 37,
      "started_at": "2026-04-05T19:39:32Z",
      "origin": "account owner",
      "source_ip": "198.51.100.44",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 65,
      "prompt_window_s": "130",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 280,
    "fields": {
      "user": 8,
      "started_at": "2026-04-24T23:48:21Z",
      "origin": "account owner",
      "source_ip": "192.0.2.211",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 21,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 281,
    "fields": {
      "user": 34,
      "started_at": "2026-02-10T22:34:59Z",
      "origin": "account owner",
      "source_ip": "192.0.2.94",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 84,
      "prompt_window_s": "84",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 282,
    "fields": {
      "user": 50,
      "started_at": "2026-05-16T06:22:51Z",
      "origin": "account owner",
      "source_ip": "192.0.2.246",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 53,
      "prompt_window_s": "53",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 283,
    "fields": {
      "user": 34,
      "started_at": "2026-02-12T09:43:53Z",
      "origin": "account owner",
      "source_ip": "203.0.113.54",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 42,
      "prompt_window_s": "42",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 284,
    "fields": {
      "user": 48,
      "started_at": "2026-02-22T08:11:51Z",
      "origin": "account owner",
      "source_ip": "192.0.2.113",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 84,
      "prompt_window_s": "168",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 285,
    "fields": {
      "user": 8,
      "started_at": "2026-04-28T10:53:09Z",
      "origin": "account owner",
      "source_ip": "198.51.100.25",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 43,
      "prompt_window_s": "86",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 286,
    "fields": {
      "user": 29,
      "started_at": "2026-02-27T07:07:58Z",
      "origin": "account owner",
      "source_ip": "203.0.113.127",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 50,
      "prompt_window_s": "50",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 287,
    "fields": {
      "user": 26,
      "started_at": "2026-03-21T20:58:43Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.139",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 5,
      "prompts_sent": "6",
      "seconds_between_prompts": 27,
      "prompt_window_s": "162",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 288,
    "fields": {
      "user": 42,
      "started_at": "2026-03-22T00:22:04Z",
      "origin": "account owner",
      "source_ip": "198.51.100.57",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 36,
      "prompt_window_s": "36",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 289,
    "fields": {
      "user": 28,
      "started_at": "2026-04-16T23:01:09Z",
      "origin": "account owner",
      "source_ip": "203.0.113.65",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 19,
      "prompt_window_s": "38",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 290,
    "fields": {
      "user": 37,
      "started_at": "2026-04-12T01:10:58Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.231",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": 16,
      "prompts_sent": "17",
      "seconds_between_prompts": 55,
      "prompt_window_s": "935",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 291,
    "fields": {
      "user": 26,
      "started_at": "2026-03-26T19:38:51Z",
      "origin": "account owner",
      "source_ip": "198.51.100.221",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 49,
      "prompt_window_s": "49",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 292,
    "fields": {
      "user": 4,
      "started_at": "2026-05-09T21:51:00Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.41",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 4,
      "prompts_sent": "6",
      "seconds_between_prompts": 53,
      "prompt_window_s": "318",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 293,
    "fields": {
      "user": 13,
      "started_at": "2026-04-18T02:01:35Z",
      "origin": "account owner",
      "source_ip": "192.0.2.166",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 84,
      "prompt_window_s": "168",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 294,
    "fields": {
      "user": 11,
      "started_at": "2026-04-22T23:14:05Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.126",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 5,
      "prompts_sent": "6",
      "seconds_between_prompts": 75,
      "prompt_window_s": "450",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 295,
    "fields": {
      "user": 5,
      "started_at": "2026-03-03T08:55:20Z",
      "origin": "account owner",
      "source_ip": "192.0.2.7",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 45,
      "prompt_window_s": "45",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 296,
    "fields": {
      "user": 32,
      "started_at": "2026-02-17T08:05:09Z",
      "origin": "account owner",
      "source_ip": "198.51.100.5",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 55,
      "prompt_window_s": "55",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 297,
    "fields": {
      "user": 44,
      "started_at": "2026-05-01T14:18:16Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.149",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 23,
      "prompts_sent": "25",
      "seconds_between_prompts": 46,
      "prompt_window_s": "1150",
      "owner_result": null,
      "attack_result": "attacker gave up"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 298,
    "fields": {
      "user": 24,
      "started_at": "2026-01-18T19:08:00Z",
      "origin": "account owner",
      "source_ip": "203.0.113.241",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 23,
      "prompt_window_s": "23",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 299,
    "fields": {
      "user": 19,
      "started_at": "2026-03-06T20:49:33Z",
      "origin": "account owner",
      "source_ip": "192.0.2.221",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 52,
      "prompt_window_s": "104",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 300,
    "fields": {
      "user": 9,
      "started_at": "2026-02-28T03:23:38Z",
      "origin": "account owner",
      "source_ip": "198.51.100.14",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 63,
      "prompt_window_s": "63",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 301,
    "fields": {
      "user": 8,
      "started_at": "2026-05-04T08:10:23Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.77",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 3,
      "prompts_sent": "4",
      "seconds_between_prompts": 87,
      "prompt_window_s": "348",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 302,
    "fields": {
      "user": 38,
      "started_at": "2026-06-05T23:52:16Z",
      "origin": "account owner",
      "source_ip": "192.0.2.237",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 44,
      "prompt_window_s": "44",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 303,
    "fields": {
      "user": 15,
      "started_at": "2026-04-04T14:15:45Z",
      "origin": "account owner",
      "source_ip": "198.51.100.28",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 88,
      "prompt_window_s": "88",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 304,
    "fields": {
      "user": 38,
      "started_at": "2026-06-10T21:50:53Z",
      "origin": "account owner",
      "source_ip": "192.0.2.199",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 78,
      "prompt_window_s": "78",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 305,
    "fields": {
      "user": 38,
      "started_at": "2026-06-16T00:38:48Z",
      "origin": "account owner",
      "source_ip": "192.0.2.99",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 61,
      "prompt_window_s": "122",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 306,
    "fields": {
      "user": 8,
      "started_at": "2026-05-07T21:43:43Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.86",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": 8,
      "prompts_sent": "9",
      "seconds_between_prompts": 75,
      "prompt_window_s": "675",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 307,
    "fields": {
      "user": 42,
      "started_at": "2026-03-27T23:40:33Z",
      "origin": "account owner",
      "source_ip": "192.0.2.76",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 26,
      "prompt_window_s": "52",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 308,
    "fields": {
      "user": 45,
      "started_at": "2026-05-09T16:24:14Z",
      "origin": "account owner",
      "source_ip": "198.51.100.197",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 61,
      "prompt_window_s": "122",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 309,
    "fields": {
      "user": 46,
      "started_at": "2026-04-16T06:59:52Z",
      "origin": "account owner",
      "source_ip": "203.0.113.96",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 23,
      "prompt_window_s": "46",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 310,
    "fields": {
      "user": 4,
      "started_at": "2026-05-15T21:04:46Z",
      "origin": "account owner",
      "source_ip": "203.0.113.44",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 73,
      "prompt_window_s": "146",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 311,
    "fields": {
      "user": 30,
      "started_at": "2026-03-07T16:45:27Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.101",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": 7,
      "prompts_sent": "8",
      "seconds_between_prompts": 41,
      "prompt_window_s": "328",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 312,
    "fields": {
      "user": 18,
      "started_at": "2026-02-17T14:24:20Z",
      "origin": "account owner",
      "source_ip": "192.0.2.221",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 17,
      "prompt_window_s": "17",
      "owner_result": "denied by mistake",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 313,
    "fields": {
      "user": 15,
      "started_at": "2026-04-07T21:41:56Z",
      "origin": "account owner",
      "source_ip": "198.51.100.236",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 58,
      "prompt_window_s": "116",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 314,
    "fields": {
      "user": 50,
      "started_at": "2026-05-22T01:01:30Z",
      "origin": "account owner",
      "source_ip": "192.0.2.151",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 22,
      "prompt_window_s": "22",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 315,
    "fields": {
      "user": 46,
      "started_at": "2026-04-22T18:03:02Z",
      "origin": "account owner",
      "source_ip": "198.51.100.245",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 45,
      "prompt_window_s": "90",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 316,
    "fields": {
      "user": 33,
      "started_at": "2026-04-10T15:56:12Z",
      "origin": "account owner",
      "source_ip": "203.0.113.89",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 77,
      "prompt_window_s": "77",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 317,
    "fields": {
      "user": 3,
      "started_at": "2026-04-05T23:29:43Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.201",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": 5,
      "prompts_sent": "6",
      "seconds_between_prompts": 76,
      "prompt_window_s": "456",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 318,
    "fields": {
      "user": 8,
      "started_at": "2026-05-11T15:16:22Z",
      "origin": "account owner",
      "source_ip": "198.51.100.148",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 47,
      "prompt_window_s": "94",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 319,
    "fields": {
      "user": 46,
      "started_at": "2026-04-24T06:58:17Z",
      "origin": "account owner",
      "source_ip": "203.0.113.84",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 82,
      "prompt_window_s": "82",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 320,
    "fields": {
      "user": 3,
      "started_at": "2026-04-09T18:50:11Z",
      "origin": "account owner",
      "source_ip": "203.0.113.151",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 89,
      "prompt_window_s": "178",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 321,
    "fields": {
      "user": 38,
      "started_at": "2026-06-21T15:06:46Z",
      "origin": "account owner",
      "source_ip": "203.0.113.180",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 89,
      "prompt_window_s": "178",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 322,
    "fields": {
      "user": 15,
      "started_at": "2026-04-11T20:53:55Z",
      "origin": "account owner",
      "source_ip": "198.51.100.28",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 66,
      "prompt_window_s": "132",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 323,
    "fields": {
      "user": 13,
      "started_at": "2026-04-19T06:28:01Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.230",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 11,
      "prompts_sent": "13",
      "seconds_between_prompts": 26,
      "prompt_window_s": "338",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 324,
    "fields": {
      "user": 41,
      "started_at": "2026-02-19T16:18:38Z",
      "origin": "account owner",
      "source_ip": "192.0.2.193",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 29,
      "prompt_window_s": "58",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 325,
    "fields": {
      "user": 25,
      "started_at": "2026-06-06T16:41:28Z",
      "origin": "account owner",
      "source_ip": "203.0.113.115",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 74,
      "prompt_window_s": "148",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 326,
    "fields": {
      "user": 16,
      "started_at": "2026-02-18T05:49:18Z",
      "origin": "account owner",
      "source_ip": "198.51.100.98",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 40,
      "prompt_window_s": "40",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 327,
    "fields": {
      "user": 35,
      "started_at": "2026-05-06T04:33:24Z",
      "origin": "account owner",
      "source_ip": "198.51.100.111",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 76,
      "prompt_window_s": "76",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 328,
    "fields": {
      "user": 28,
      "started_at": "2026-04-18T02:53:02Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.3",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": 9,
      "prompts_sent": "11",
      "seconds_between_prompts": 55,
      "prompt_window_s": "605",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 329,
    "fields": {
      "user": 16,
      "started_at": "2026-02-24T04:07:18Z",
      "origin": "account owner",
      "source_ip": "192.0.2.144",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 27,
      "prompt_window_s": "27",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 330,
    "fields": {
      "user": 17,
      "started_at": "2026-01-30T00:11:58Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.10",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": 10,
      "prompts_sent": "11",
      "seconds_between_prompts": 40,
      "prompt_window_s": "440",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 331,
    "fields": {
      "user": 26,
      "started_at": "2026-04-01T10:54:28Z",
      "origin": "account owner",
      "source_ip": "198.51.100.174",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 54,
      "prompt_window_s": "108",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 332,
    "fields": {
      "user": 11,
      "started_at": "2026-04-25T16:30:22Z",
      "origin": "account owner",
      "source_ip": "192.0.2.47",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 51,
      "prompt_window_s": "51",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 333,
    "fields": {
      "user": 3,
      "started_at": "2026-04-12T23:50:44Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.34",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": 29,
      "prompts_sent": "31",
      "seconds_between_prompts": 64,
      "prompt_window_s": "1984",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 334,
    "fields": {
      "user": 25,
      "started_at": "2026-06-11T10:41:59Z",
      "origin": "account owner",
      "source_ip": "198.51.100.48",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 33,
      "prompt_window_s": "66",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 335,
    "fields": {
      "user": 17,
      "started_at": "2026-01-31T04:29:47Z",
      "origin": "account owner",
      "source_ip": "203.0.113.183",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 71,
      "prompt_window_s": "142",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 336,
    "fields": {
      "user": 23,
      "started_at": "2026-03-17T09:04:52Z",
      "origin": "account owner",
      "source_ip": "203.0.113.126",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 80,
      "prompt_window_s": "80",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 337,
    "fields": {
      "user": 7,
      "started_at": "2026-04-22T18:15:20Z",
      "origin": "account owner",
      "source_ip": "198.51.100.38",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 56,
      "prompt_window_s": "112",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 338,
    "fields": {
      "user": 18,
      "started_at": "2026-02-20T09:14:49Z",
      "origin": "account owner",
      "source_ip": "203.0.113.124",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 81,
      "prompt_window_s": "81",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 339,
    "fields": {
      "user": 6,
      "started_at": "2026-01-20T19:44:51Z",
      "origin": "account owner",
      "source_ip": "192.0.2.138",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 56,
      "prompt_window_s": "56",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 340,
    "fields": {
      "user": 47,
      "started_at": "2026-05-20T16:04:47Z",
      "origin": "account owner",
      "source_ip": "198.51.100.5",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 63,
      "prompt_window_s": "63",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 341,
    "fields": {
      "user": 41,
      "started_at": "2026-02-25T07:43:17Z",
      "origin": "account owner",
      "source_ip": "198.51.100.60",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 79,
      "prompt_window_s": "79",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 342,
    "fields": {
      "user": 12,
      "started_at": "2026-03-27T04:53:24Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.83",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": 6,
      "prompts_sent": "8",
      "seconds_between_prompts": 66,
      "prompt_window_s": "528",
      "owner_result": null,
      "attack_result": "approved under fatigue"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 343,
    "fields": {
      "user": 30,
      "started_at": "2026-03-08T23:32:10Z",
      "origin": "account owner",
      "source_ip": "198.51.100.71",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 49,
      "prompt_window_s": "98",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 344,
    "fields": {
      "user": 30,
      "started_at": "2026-03-10T19:44:41Z",
      "origin": "account owner",
      "source_ip": "198.51.100.44",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 31,
      "prompt_window_s": "31",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 345,
    "fields": {
      "user": 36,
      "started_at": "2026-02-16T12:37:56Z",
      "origin": "account owner",
      "source_ip": "203.0.113.129",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 71,
      "prompt_window_s": "71",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 346,
    "fields": {
      "user": 14,
      "started_at": "2026-03-24T22:54:58Z",
      "origin": "account owner",
      "source_ip": "203.0.113.12",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 34,
      "prompt_window_s": "68",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 347,
    "fields": {
      "user": 40,
      "started_at": "2026-04-18T19:08:46Z",
      "origin": "account owner",
      "source_ip": "198.51.100.216",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 42,
      "prompt_window_s": "84",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 348,
    "fields": {
      "user": 25,
      "started_at": "2026-06-15T04:17:04Z",
      "origin": "account owner",
      "source_ip": "192.0.2.248",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 81,
      "prompt_window_s": "81",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 349,
    "fields": {
      "user": 29,
      "started_at": "2026-03-01T23:27:33Z",
      "origin": "account owner",
      "source_ip": "192.0.2.254",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 66,
      "prompt_window_s": "132",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 350,
    "fields": {
      "user": 46,
      "started_at": "2026-04-27T00:44:38Z",
      "origin": "account owner",
      "source_ip": "203.0.113.222",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 38,
      "prompt_window_s": "76",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 351,
    "fields": {
      "user": 25,
      "started_at": "2026-06-18T13:20:31Z",
      "origin": "account owner",
      "source_ip": "192.0.2.137",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 31,
      "prompt_window_s": "62",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 352,
    "fields": {
      "user": 40,
      "started_at": "2026-04-20T20:51:49Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.181",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": 4,
      "prompts_sent": "6",
      "seconds_between_prompts": 74,
      "prompt_window_s": "444",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 353,
    "fields": {
      "user": 15,
      "started_at": "2026-04-15T01:51:19Z",
      "origin": "account owner",
      "source_ip": "203.0.113.170",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 53,
      "prompt_window_s": "53",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 354,
    "fields": {
      "user": 34,
      "started_at": "2026-02-16T01:29:28Z",
      "origin": "attacker with stolen password",
      "source_ip": "203.0.113.178",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 11,
      "prompts_sent": "12",
      "seconds_between_prompts": 78,
      "prompt_window_s": "936",
      "owner_result": null,
      "attack_result": "locked out at prompt limit"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 355,
    "fields": {
      "user": 39,
      "started_at": "2026-05-23T12:54:38Z",
      "origin": "account owner",
      "source_ip": "203.0.113.12",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 17,
      "prompt_window_s": "34",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 356,
    "fields": {
      "user": 30,
      "started_at": "2026-03-12T07:45:15Z",
      "origin": "account owner",
      "source_ip": "198.51.100.119",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 17,
      "prompt_window_s": "17",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 357,
    "fields": {
      "user": 44,
      "started_at": "2026-05-05T10:22:55Z",
      "origin": "account owner",
      "source_ip": "192.0.2.58",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 34,
      "prompt_window_s": "34",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 358,
    "fields": {
      "user": 5,
      "started_at": "2026-03-08T08:35:51Z",
      "origin": "account owner",
      "source_ip": "203.0.113.228",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 73,
      "prompt_window_s": "73",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 359,
    "fields": {
      "user": 26,
      "started_at": "2026-04-07T12:46:37Z",
      "origin": "account owner",
      "source_ip": "198.51.100.219",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 20,
      "prompt_window_s": "40",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 360,
    "fields": {
      "user": 36,
      "started_at": "2026-02-18T22:30:50Z",
      "origin": "account owner",
      "source_ip": "192.0.2.134",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 54,
      "prompt_window_s": "54",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 361,
    "fields": {
      "user": 11,
      "started_at": "2026-04-28T05:46:59Z",
      "origin": "account owner",
      "source_ip": "192.0.2.24",
      "client": "mobile app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 66,
      "prompt_window_s": "132",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 362,
    "fields": {
      "user": 41,
      "started_at": "2026-02-28T09:16:17Z",
      "origin": "account owner",
      "source_ip": "203.0.113.78",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 27,
      "prompt_window_s": "54",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 363,
    "fields": {
      "user": 29,
      "started_at": "2026-03-05T20:41:06Z",
      "origin": "account owner",
      "source_ip": "203.0.113.191",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 74,
      "prompt_window_s": "74",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 364,
    "fields": {
      "user": 8,
      "started_at": "2026-05-15T00:33:24Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.216",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 3,
      "prompts_sent": "4",
      "seconds_between_prompts": 82,
      "prompt_window_s": "328",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 365,
    "fields": {
      "user": 50,
      "started_at": "2026-05-25T19:18:15Z",
      "origin": "account owner",
      "source_ip": "198.51.100.118",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 40,
      "prompt_window_s": "40",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 366,
    "fields": {
      "user": 40,
      "started_at": "2026-04-25T22:08:46Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.92",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": 18,
      "prompts_sent": "20",
      "seconds_between_prompts": 79,
      "prompt_window_s": "1580",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 367,
    "fields": {
      "user": 17,
      "started_at": "2026-02-02T10:00:00Z",
      "origin": "account owner",
      "source_ip": "192.0.2.122",
      "client": "VPN client",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 27,
      "prompt_window_s": "54",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 368,
    "fields": {
      "user": 7,
      "started_at": "2026-04-28T00:41:52Z",
      "origin": "account owner",
      "source_ip": "203.0.113.185",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 89,
      "prompt_window_s": "178",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 369,
    "fields": {
      "user": 21,
      "started_at": "2026-04-01T09:30:22Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.137",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 3,
      "prompts_sent": "4",
      "seconds_between_prompts": 35,
      "prompt_window_s": "140",
      "owner_result": null,
      "attack_result": "attacker gave up"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 370,
    "fields": {
      "user": 48,
      "started_at": "2026-02-26T13:49:48Z",
      "origin": "account owner",
      "source_ip": "192.0.2.183",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 57,
      "prompt_window_s": "114",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 371,
    "fields": {
      "user": 28,
      "started_at": "2026-04-23T19:00:07Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.193",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": 10,
      "prompts_sent": "11",
      "seconds_between_prompts": 29,
      "prompt_window_s": "319",
      "owner_result": null,
      "attack_result": "approved under fatigue"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 372,
    "fields": {
      "user": 42,
      "started_at": "2026-03-31T02:14:59Z",
      "origin": "attacker with stolen password",
      "source_ip": "198.51.100.122",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": 22,
      "prompts_sent": "23",
      "seconds_between_prompts": 59,
      "prompt_window_s": "1357",
      "owner_result": null,
      "attack_result": "denied every prompt"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 373,
    "fields": {
      "user": 13,
      "started_at": "2026-04-26T01:11:30Z",
      "origin": "account owner",
      "source_ip": "192.0.2.214",
      "client": "VPN client",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 31,
      "prompt_window_s": "31",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 374,
    "fields": {
      "user": 46,
      "started_at": "2026-05-03T12:11:36Z",
      "origin": "account owner",
      "source_ip": "203.0.113.73",
      "client": "desktop app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 71,
      "prompt_window_s": "71",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 375,
    "fields": {
      "user": 18,
      "started_at": "2026-02-25T08:09:11Z",
      "origin": "account owner",
      "source_ip": "192.0.2.39",
      "client": "desktop app",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 75,
      "prompt_window_s": "150",
      "owner_result": "timed out",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 376,
    "fields": {
      "user": 5,
      "started_at": "2026-03-11T13:49:50Z",
      "origin": "attacker with stolen password",
      "source_ip": "192.0.2.187",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": 12,
      "prompts_sent": "13",
      "seconds_between_prompts": 76,
      "prompt_window_s": "988",
      "owner_result": null,
      "attack_result": "reported as fraud"
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 377,
    "fields": {
      "user": 39,
      "started_at": "2026-05-29T09:15:28Z",
      "origin": "account owner",
      "source_ip": "198.51.100.62",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 40,
      "prompt_window_s": "80",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 378,
    "fields": {
      "user": 43,
      "started_at": "2026-01-29T12:11:09Z",
      "origin": "account owner",
      "source_ip": "192.0.2.92",
      "client": "mobile app",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 18,
      "prompt_window_s": "18",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 379,
    "fields": {
      "user": 36,
      "started_at": "2026-02-21T16:11:55Z",
      "origin": "account owner",
      "source_ip": "192.0.2.69",
      "client": "browser",
      "base_prompts": 2,
      "extra_prompts": null,
      "prompts_sent": "2",
      "seconds_between_prompts": 69,
      "prompt_window_s": "138",
      "owner_result": "approved",
      "attack_result": null
    }
  },
  {
    "model": "app.signinattempt",
    "pk": 380,
    "fields": {
      "user": 3,
      "started_at": "2026-04-17T04:17:23Z",
      "origin": "account owner",
      "source_ip": "198.51.100.13",
      "client": "browser",
      "base_prompts": 1,
      "extra_prompts": null,
      "prompts_sent": "1",
      "seconds_between_prompts": 51,
      "prompt_window_s": "51",
      "owner_result": "approved",
      "attack_result": null
    }
  }
]