{"ip":"189.90.55.242","first_seen":"2026-06-20T14:23:48.261906Z","last_seen":"2026-06-26T13:00:55.009708Z","geo":{"country":"Brazil","country_code":"BR","city":"Florianópolis","asn":"AS28343 UNIFIQUE TELECOMUNICACOES S/A","isp":"UNIFIQUE TELECOMUNICACOES S/A","lat":-27.6168,"lon":-48.4997},"stats":{"total_events":40,"ssh_events":40,"http_events":0,"ssh_failures":40,"http_4xx":0,"http_5xx":0,"distinct_usernames":37,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","cluster.shared_wordlist"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:00:55.009708Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.009708Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.009708Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tuan","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.009708Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.009708Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"devops","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.009708Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.009708Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"andrey","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.006907Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pro1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.006907Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"zs","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.002169Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"roman","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.002169Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"osadmin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.002169Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hyperchain","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.002169Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"beacon","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:54.998498Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gmodserver","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:54.998498Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:54.998498Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"modify","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:54.998498Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hasan","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:54.998498Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"qq","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:54.985425Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"arch","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:54.985425Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cp","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T15:10:50.058319Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"us","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T15:08:50.010953Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tmn","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T15:06:36.764235Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oldforum","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T15:04:31.718315Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sdb","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T15:02:14.379755Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"paste","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:04:11.412279986Z"}