{"ip":"139.19.117.197","first_seen":"2026-06-26T13:13:09.711403Z","last_seen":"2026-06-28T04:07:13.422208Z","geo":{"country":"Germany","country_code":"DE","city":"Saarbrücken","asn":"AS680 Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.","isp":"Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.","lat":49.2134,"lon":6.9624},"stats":{"total_events":44,"ssh_events":44,"http_events":0,"ssh_failures":44,"http_4xx":0,"http_5xx":0,"distinct_usernames":1,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-06-28T06:07:47.095394Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T04:07:13.422208Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T03:07:08.699714Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T02:07:08.951168Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T01:13:02.595701Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T01:13:02.441271Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T23:07:22.98665Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T21:14:59.318221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T20:16:29.409211Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T19:16:27.267523Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T18:16:27.271928Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T17:16:20.842724Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T16:16:25.36014Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T15:17:44.812589Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T13:22:30.233895Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T12:23:38.188093Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T11:23:46.073445Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T10:23:37.141126Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T09:23:39.298905Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T08:26:35.784042Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T06:27:33.072756Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T05:28:38.157178Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T04:28:32.784107Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T03:28:36.760584Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-27T02:28:40.389214Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":[]}],"generated_at":"2026-06-28T06:08:09.422764128Z"}