{"ip":"105.96.13.6","first_seen":"2026-06-26T14:51:06.062887Z","last_seen":"2026-06-27T20:55:19.330887Z","geo":{"country":"Algeria","country_code":"DZ","city":"Algiers","asn":"AS36947 Telecom Algeria","isp":"Algerie Telecom","lat":36.7405,"lon":3.1159},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.enum"],"recent_events":[{"ts":"2026-06-27T20:55:19.330887Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"planck","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:52:53.783887Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tr","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:47:58.612503Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sql","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:45:31.032771Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lab1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:43:05.491443Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"express","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:40:37.641154Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"info","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:35:43.742451Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ro","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:30:48.576529Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"fedora","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:25:45.211192Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jpkc","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:18:17.563926Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"controle","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:15:51.47757Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"spring","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:13:25.940199Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"us1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:11:06.561805Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"filex","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-26T15:41:27.254652Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:27:31.781255Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"perforce","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:25:06.209064Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftp_test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:20:15.942692Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"saga","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:17:50.368165Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:03:33.844421Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"helene","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T14:51:06.062887Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hendra","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:01:29.104419866Z"}