{"ip":"197.140.142.207","first_seen":"2026-06-27T04:50:06.791332Z","last_seen":"2026-06-27T05:27:03.317051Z","geo":{"country":"Algeria","country_code":"DZ","city":"Algiers","asn":"AS36891 Icosnet SPA","isp":"Icosnet SPA","lat":36.7538,"lon":3.05876},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-27T05:27:03.317051Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"octopus","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:25:12.306917Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"genesis","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:23:35.62165Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nps","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:22:02.85609Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"storage2","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:20:30.569019Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"spell","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:18:48.010914Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"svpn","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:17:13.393914Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"losangeles","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:15:26.479395Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"inventory","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:13:43.932239Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"polar","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:12:02.785279Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"billing","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:10:26.380647Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"victor","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:08:49.394719Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"financial","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:07:15.057919Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"xsh","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:05:46.843755Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"goat","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:04:12.475188Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"iran","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:02:43.23801Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mcu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:01:00.682061Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oascentral","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T04:59:26.189256Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"diablo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T04:57:45.486083Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ipo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T04:50:06.791332Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bnc","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:07:59.610577585Z"}