{"ip":"103.148.100.146","first_seen":"2026-08-21T16:17:21.889325Z","last_seen":"2026-08-21T18:21:33.474177Z","geo":{"country":"Indonesia","country_code":"ID","city":"Dalung","asn":"AS139988 PT. GARUDA PRIMA INTERNETINDO","isp":"FLYNET","lat":-8.62553,"lon":115.17},"stats":{"total_events":31,"ssh_events":31,"http_events":0,"ssh_failures":31,"http_4xx":0,"http_5xx":0,"distinct_usernames":30,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-21T18:21:33.474177Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T18:19:01.151863Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"onlyoffice","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T18:16:33.770019Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T18:13:59.824477Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rocky","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T18:08:53.772332Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftp1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T18:06:21.021519Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"wjx","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T18:01:17.055116Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kamal","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:58:37.293534Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nx","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:51:10.263742Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bet","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:48:33.662618Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"celine","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:40:41.127435Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gast","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:38:05.202571Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"wxg","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:35:26.764698Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ajay","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:27:38.46354Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"stan","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:22:20.239008Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"steam","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:19:49.528345Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"botuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:17:14.061498Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dev","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T17:14:41.572933Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"david","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:09:12.716829Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T17:03:37.629979Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jason","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T17:00:57.969803Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"it","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T16:55:39.586642Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T16:52:53.823541Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T16:50:08.347619Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"demo","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T16:47:25.891823Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gino","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:06:59.362956029Z"}