{"ip":"177.130.250.31","first_seen":"2026-10-01T23:41:54.670151Z","last_seen":"2026-10-22T13:32:25.802155Z","geo":{"country":"Brazil","country_code":"BR","city":"Itajaí","asn":"AS28343 UNIFIQUE TELECOMUNICACOES S/A","isp":"UNIFIQUE TELECOMUNICACOES S/A","lat":-26.9065,"lon":-48.6657},"stats":{"total_events":88,"ssh_events":88,"http_events":0,"ssh_failures":88,"http_4xx":0,"http_5xx":0,"distinct_usernames":79,"distinct_paths":0,"distinct_source_hosts":2},"behavior_tags":["actor.multi_vm","actor.persistent","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-10-22T13:32:25.802155Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-22T13:31:05.459671Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-22T13:29:45.359867Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nominatim","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:28:26.392618Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"michelle","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:27:08.511059Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jesus","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:25:50.036927Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vinay","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:24:31.6875Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"supervisor","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:23:13.125656Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"leon","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:21:56.607099Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"suporte","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:20:36.828648Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jessica","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:19:16.502713Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mosquitto","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:17:52.357931Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"www","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:16:30.486653Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pgsql","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:15:08.916765Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"usuario","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:13:52.373477Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"marketing","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:12:34.950606Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hermes","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:11:16.09343Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-22T13:09:59.758437Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"newuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:08:43.253045Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-22T13:07:25.335193Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:03:12.251834Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dockeruser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T13:01:53.353675Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-22T13:00:36.934741Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"validator","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T12:59:16.457446Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"storage","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-10-22T12:57:56.802783Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"li","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]}],"generated_at":"2026-10-26T06:21:28.324951857Z"}