{"ip":"155.4.244.179","first_seen":"2026-06-26T13:00:56.29577Z","last_seen":"2026-06-26T13:01:26.713069Z","geo":{"country":"Sweden","country_code":"SE","city":"Lärbro","asn":"AS8473 Bahnhof AB","isp":"Bahnhof AB","lat":57.7828,"lon":18.7762},"stats":{"total_events":18,"ssh_events":18,"http_events":0,"ssh_failures":18,"http_4xx":0,"http_5xx":0,"distinct_usernames":17,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:01:26.713069Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cie","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hamza","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"esuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"julius","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sunny","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"developer","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"claude","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"daniel","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.303268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"phoenix","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.302574Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.302574Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"odoo13","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.302574Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"legal","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.302574Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sammy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.29577Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.29577Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"michael","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.29577Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"stu","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T08:44:44.053910268Z"}