{"ip":"168.138.213.115","first_seen":"2026-06-19T04:13:36.472418Z","last_seen":"2026-06-19T05:21:58.110726Z","geo":{"country":"Japan","country_code":"JP","city":"Tokyo","asn":"AS31898 Oracle Corporation","isp":"Oracle Corporation","lat":35.798,"lon":140.1803},"stats":{"total_events":12,"ssh_events":12,"http_events":0,"ssh_failures":12,"http_4xx":0,"http_5xx":0,"distinct_usernames":12,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T05:21:58.110726Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sife","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T05:08:44.513367Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"faculty","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T05:05:23.640269Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vserver","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:55:30.280733Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kaz","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:52:11.451731Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hj","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:48:49.998287Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ideal","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:45:28.290941Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"serv","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:38:46.572413Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"martinique","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:35:21.593345Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"babylon","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:32:04.785527Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"diendan","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:28:45.653943Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cmi","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T04:13:36.472418Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"persephone","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T08:53:01.294472087Z"}