{"ip":"196.192.181.202","first_seen":"2026-06-28T02:24:13.61415Z","last_seen":"2026-06-28T03:12:12.547238Z","geo":{"country":"South Africa","country_code":"ZA","city":"Johannesburg","asn":"AS327782 Metrofibre Networx","isp":"Metrofibre Networx","lat":-26.2309,"lon":28.0583},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","cluster.shared_wordlist"],"event_tags":["ssh.enum"],"recent_events":[{"ts":"2026-06-28T03:12:12.547238Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"psp","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T03:09:54.130488Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lifestyle","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T03:07:32.71362Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"program","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T03:05:00.511743Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kalendarz","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T03:02:49.339457Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cbi","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T03:00:17.674978Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ra","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:57:57.903521Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ori","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:55:38.529277Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ws2","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:53:17.079874Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bars","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:50:57.682778Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mj","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:48:46.075036Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nsx","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:46:17.80861Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mat","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:43:43.995607Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ap02","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:41:22.627887Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mailhost","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:39:01.178931Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kygl","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:36:49.990123Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"teachers","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:34:28.530435Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"classics","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:32:05.025032Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sovet","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:29:33.343343Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"impulse","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T02:24:13.61415Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"capacitacion","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-06-28T06:01:36.695151242Z"}