{"ip":"131.100.242.102","first_seen":"2026-06-26T13:00:55.877943Z","last_seen":"2026-06-26T13:00:55.896071Z","geo":{"country":"Brazil","country_code":"BR","city":"Campos dos Goytacazes","asn":"AS61663 INFOLINE BANDA LARGA","isp":"Infoline Banda Larga","lat":-21.6774,"lon":-41.4553},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":19,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:00:55.896071Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.888115Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"github","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.888115Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gabby","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.888115Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.888115Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"navidrome","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.888115Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hm","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.888115Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kafka","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.885687Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"celery","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.885687Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cristian","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.885687Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"esuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.885687Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"paolo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.885687Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"k8s","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.878935Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ts3","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.878935Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"maxwell","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.878935Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jiayin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.878935Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jtribino","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.878935Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpadmin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.877943Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kjs","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.877943Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ayoub","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.877943Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"josue","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:01:28.241054318Z"}