{"ip":"114.141.59.195","first_seen":"2026-08-18T21:35:55.382921Z","last_seen":"2026-08-18T23:30:04.502686Z","geo":{"country":"Indonesia","country_code":"ID","city":"Jakarta","asn":"AS142362 PT Sukma Sejati Media","isp":"PT. Smartlink Global Media","lat":-6.23834,"lon":106.824},"stats":{"total_events":35,"ssh_events":35,"http_events":0,"ssh_failures":35,"http_4xx":0,"http_5xx":0,"distinct_usernames":31,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-18T23:30:04.502686Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T23:27:42.428504Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"myappuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T23:25:11.729815Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jrodrig","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T23:17:52.153814Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pq","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T23:15:29.870781Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"david","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T23:10:43.144148Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cristian","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T23:08:23.067757Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ansible","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T23:03:25.164582Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"alessio","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T23:01:05.090849Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T22:58:41.436391Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T22:56:26.149663Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oussama","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:54:08.221089Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"elearn","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:51:34.174195Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aris","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:44:02.751778Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lsfadmin","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:41:42.577789Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T22:39:18.871658Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oracle","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T22:36:59.212241Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T22:34:32.500544Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dms","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:31:54.78849Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T22:29:29.180995Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:26:57.300073Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"confluence","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:24:34.566445Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"opc","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:19:46.495902Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"milan","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:14:57.929508Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"redmine","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T22:12:28.603221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ociispth","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:08:28.960348888Z"}