{"ip":"176.211.42.202","first_seen":"2026-06-19T14:50:50.754471Z","last_seen":"2026-06-19T15:28:31.913645Z","geo":{"country":"Russia","country_code":"RU","city":"Vladivostok","asn":"AS12389 PJSC Rostelecom","isp":"PJSC Rostelecom","lat":43.1332,"lon":131.911},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T15:28:31.913645Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"windows","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:26:51.437516Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bigsavings","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:25:16.098136Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mobiledev","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:23:39.177738Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"plone","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:22:08.5896Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"coop","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:20:32.245102Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mv","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:18:57.815378Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kursk","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:17:09.1532Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"filr","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:15:30.761954Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"seven","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:13:50.300137Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webgis","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:12:15.991776Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"xyz","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:10:29.394547Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"emo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:08:55.095001Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"podcast","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:07:14.638887Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"h3","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:05:38.292882Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cvsup","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:03:59.903609Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"m2","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:02:25.60915Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:00:30.822313Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"massmail","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T14:58:58.564388Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"basis","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T14:50:50.754471Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"exc","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:03:08.632607418Z"}