{"ip":"119.47.90.19","first_seen":"2026-06-27T18:40:56.06253Z","last_seen":"2026-06-27T19:36:46.239943Z","geo":{"country":"Indonesia","country_code":"ID","city":"Pontianak","asn":"AS38527 JAWA POS NATIONAL NETWORK MEDIALINK, PT","isp":"PT. JAWA POS NATIONAL NETWORK MEDIALINK","lat":-0.0263303,"lon":109.343},"stats":{"total_events":15,"ssh_events":15,"http_events":0,"ssh_failures":15,"http_4xx":0,"http_5xx":0,"distinct_usernames":15,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","cluster.shared_wordlist"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-06-27T19:36:46.239943Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"es","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T19:30:20.698843Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"guest","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T19:19:29.225495Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tester","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T19:17:24.227178Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"silva","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T19:15:22.143515Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ejabberd","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T19:13:11.103016Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"redhat","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T19:06:35.142722Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T19:04:35.612852Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T19:02:35.8779Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pujie","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T19:00:19.234992Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lrendon","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T18:53:46.685717Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"youssef","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T18:51:40.975951Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"moodle","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T18:47:32.036121Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tv","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T18:43:12.458696Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T18:40:56.06253Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"opc","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-06-28T06:01:28.991343534Z"}