{"ip":"154.241.63.196","first_seen":"2026-06-27T19:56:49.782611Z","last_seen":"2026-06-27T20:50:24.157457Z","geo":{"country":"Algeria","country_code":"DZ","city":"Kouba","asn":"AS36947 Telecom Algeria","isp":"new","lat":36.7377,"lon":3.0839},"stats":{"total_events":7,"ssh_events":7,"http_events":0,"ssh_failures":7,"http_4xx":0,"http_5xx":0,"distinct_usernames":7,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":[],"event_tags":["ssh.enum"],"recent_events":[{"ts":"2026-06-27T20:50:24.157457Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"neuro","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:38:09.276463Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"magnesium","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:33:16.163079Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vladimir","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:28:20.994454Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"domino2","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:23:15.573113Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gfx","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T20:20:47.189883Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cip","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T19:56:49.782611Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"servicios","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-06-28T05:59:17.834826508Z"}