{"ip":"155.4.245.222","first_seen":"2026-06-18T17:26:28.7808Z","last_seen":"2026-06-18T18:38:15.360852Z","geo":{"country":"Sweden","country_code":"SE","city":"Lärbro","asn":"AS8473 Bahnhof AB","isp":"Bahnhof AB","lat":57.7828,"lon":18.7762},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-18T18:38:15.360852Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"boot","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:33:39.112012Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:31:11.502274Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"backupuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:28:56.181781Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"xxx","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:21:48.14692Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"newftpuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:16:56.031197Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"wireguard","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:14:28.413861Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nana","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:12:13.11309Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:09:43.388705Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jupyter","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:07:28.099089Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"group1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T18:05:00.099874Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bitnami","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:53:19.03107Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dixi","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:50:47.276474Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"devuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:48:23.771283Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dss","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:45:52.046072Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"validator","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:43:32.628454Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hek","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:41:08.100147Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"crew","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:36:36.931815Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"murad","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:34:10.839481Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"loguser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:26:28.7808Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sdadmin","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:01:36.251181148Z"}