{"ip":"103.164.57.37","first_seen":"2026-06-19T01:03:50.092903Z","last_seen":"2026-06-19T01:54:57.54682Z","geo":{"country":"Indonesia","country_code":"ID","city":"Maros","asn":"AS141903 PT Natha Buana Indonesia","isp":"PT Natha Buana Indonesia","lat":-5.006,"lon":119.573},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T01:54:57.54682Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"priv","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:52:49.428171Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ata","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:50:40.29679Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"f1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:48:37.301347Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ups","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:46:19.963211Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ki","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:44:12.868932Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mali","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:42:03.713765Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lwj","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:39:48.420728Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lpm","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:37:45.408468Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sitebuilder","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:35:38.301746Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"img","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:33:31.190201Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mobil","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:31:19.983329Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"arabic","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:29:10.812703Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"animal","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:27:01.684871Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"banners","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:24:55.551287Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"wcg","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:22:48.448308Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"uo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:20:31.073974Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ham","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:18:19.862444Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"phil","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:16:06.601353Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"h","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:03:50.092903Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"halo","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:03:07.968613845Z"}