{"ip":"178.160.228.254","first_seen":"2026-06-26T13:00:55.643923Z","last_seen":"2026-06-26T13:00:55.658007Z","geo":{"country":"Armenia","country_code":"AM","city":"Yerevan","asn":"AS12297 Telecom Armenia AS","isp":"Telecom Armenia CJSC","lat":40.1814,"lon":44.5102},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:00:55.658007Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ddt","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.658007Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"maverick","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.658007Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"eas","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.658007Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"arlington","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.658007Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"malta","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.657349Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"recipes","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.657349Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"magnitogorsk","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.657349Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ishop","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.657349Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"itest","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.657349Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ice","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.657349Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sls","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.653022Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cec","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.653022Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mortgage","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.653022Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"fdc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.653022Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"js","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.653022Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"imac","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.653022Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ud","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.643923Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ntop","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.643923Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"goofy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.643923Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ssg","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:05:56.353086585Z"}