{"ip":"152.52.15.213","first_seen":"2026-06-19T18:38:15.307154Z","last_seen":"2026-06-19T19:24:18.326483Z","geo":{"country":"India","country_code":"IN","city":"Bengaluru","asn":"AS9498 BHARTI Airtel Ltd.","isp":"Bharti Airtel Limited","lat":12.9716,"lon":77.5946},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T19:24:18.326483Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mediaserver","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:22:16.32612Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ph","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:20:16.371624Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ecology","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:18:21.565292Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"haiti","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:16:25.710393Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"name","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:14:30.895265Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"servis","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:12:45.319809Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hd","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:10:48.461912Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nsw","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:08:59.827459Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"backoffice","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:07:05.024678Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"goliath","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:05:06.119753Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sdp","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:02:56.826194Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dance","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T19:01:08.194876Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"alan","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:59:11.094221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"con","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:57:24.347517Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"collaboration","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:55:27.505631Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webmin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:53:22.463258Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"iprint","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:51:24.583763Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aruba","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:49:17.494372Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kiev","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:38:15.307154Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"matt","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:04:11.041288853Z"}