{"ip":"155.4.244.169","first_seen":"2026-06-26T13:00:55.51988Z","last_seen":"2026-06-26T13:00:56.04619Z","geo":{"country":"Sweden","country_code":"SE","city":"Lärbro","asn":"AS8473 Bahnhof AB","isp":"Bahnhof AB","lat":57.7828,"lon":18.7762},"stats":{"total_events":40,"ssh_events":40,"http_events":0,"ssh_failures":40,"http_4xx":0,"http_5xx":0,"distinct_usernames":39,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:00:56.04619Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hduser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.04619Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"francisco","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.04619Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ts3","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.04619Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.04619Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"payroll","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926618Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftp","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926618Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926618Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nishi","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926618Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kav","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926408Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gast","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926408Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926408Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tv","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926408Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"anon","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926408Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pydio","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926408Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"demo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.926408Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aaron","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.920221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu22","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.920221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hassan","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.920221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"luigi","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.920221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.532374Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"conferencia","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.532374Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sacs","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.532374Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"drama","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.532374Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"db8","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.527387Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vc","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:00:47.545998293Z"}