{"ip":"128.201.9.152","first_seen":"2026-06-27T11:11:13.737793Z","last_seen":"2026-06-27T13:02:34.956108Z","geo":{"country":"Brazil","country_code":"BR","city":"Divinópolis","asn":"AS266603 NEXT FIBRA","isp":"Next Fibra","lat":-20.115,"lon":-44.918},"stats":{"total_events":21,"ssh_events":21,"http_events":0,"ssh_failures":21,"http_4xx":0,"http_5xx":0,"distinct_usernames":21,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","cluster.shared_wordlist"],"event_tags":[],"recent_events":[{"ts":"2026-06-27T13:02:34.956108Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:59:06.514498Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sammy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:55:56.506117Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gitlab","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:52:36.384622Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"socks","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:49:20.529255Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"temp","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:46:09.616412Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webadmin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:39:54.84529Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mk","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:30:01.446303Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"teamtalk","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:26:36.227034Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:23:25.59816Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jagdish","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:19:54.205686Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"smart","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:13:14.302644Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"thomas","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:09:57.360565Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bot","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:06:44.869433Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user2","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T11:59:55.271545Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T11:53:11.976821Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T11:46:23.223256Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"myuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T11:43:05.609562Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"es","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T11:36:37.29038Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rp","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T11:33:16.107645Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T11:11:13.737793Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T05:59:15.034708962Z"}