{"ip":"172.245.252.130","first_seen":"2026-06-20T11:24:29.493095Z","last_seen":"2026-06-20T12:53:47.286586Z","geo":{"country":"United States","country_code":"US","city":"Elk Grove Village","asn":"AS36352 HostPapa","isp":"HostPapa","lat":42.0026,"lon":-87.9644},"stats":{"total_events":19,"ssh_events":19,"http_events":0,"ssh_failures":19,"http_4xx":0,"http_5xx":0,"distinct_usernames":18,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-20T12:53:47.286586Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"polls","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:43:40.54997Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:40:19.691016Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:33:44.1006Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lucky","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:26:57.204562Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mamad","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:23:47.56726Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"reza","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:20:29.55653Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"andres","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:13:51.516304Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:10:38.139016Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:07:22.855684Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrador","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:04:03.97709Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"local","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:57:26.287943Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ll","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:50:50.28087Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"barbara","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:47:39.586003Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"comercial","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:37:39.267089Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"shawn","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:34:25.35843Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nils","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:31:08.290137Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:28:01.190874Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"john","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:24:29.493095Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T08:51:28.565628566Z"}