{"ip":"103.155.47.50","first_seen":"2026-08-02T08:09:08.902853Z","last_seen":"2026-08-22T06:53:10.317526Z","geo":{"country":"Indonesia","country_code":"ID","city":"Ketanggungan","asn":"AS141049 PT Profesional Internet Indonesia","isp":"PRONETINDO","lat":-6.9383,"lon":108.891},"stats":{"total_events":58,"ssh_events":58,"http_events":0,"ssh_failures":58,"http_4xx":0,"http_5xx":0,"distinct_usernames":53,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["actor.persistent","cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-22T06:53:10.317526Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oficina","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T06:47:23.187965Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T06:44:26.498217Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ljd","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T06:41:43.093922Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pm2user","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T06:36:09.353736Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ahsan","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T06:30:39.39313Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T06:27:52.815992Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"actions","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T06:22:26.510252Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T06:16:57.758326Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sammy","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T06:05:39.558941Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"steam","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T06:03:02.429887Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"staging","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:54:56.726142Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:52:16.246525Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"alex","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:47:01.430145Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"visitor","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:44:26.594811Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dev1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:36:18.205418Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"yy","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:30:57.947091Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T05:28:21.939618Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T05:25:43.359687Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"compta","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:23:06.878006Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"123","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:17:33.17532Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nico","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:14:41.763445Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:12:05.708211Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"appuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-22T05:06:37.975765Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jenkins","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T05:00:59.32967Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"teamspeak","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:01:27.790031306Z"}