{"ip":"20.243.208.191","first_seen":"2026-06-19T14:51:29.70429Z","last_seen":"2026-06-19T15:38:15.921416Z","geo":{"country":"Japan","country_code":"JP","city":"Tokyo","asn":"AS8075 Microsoft Corporation","isp":"Microsoft Corporation","lat":35.68,"lon":139.77},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T15:38:15.921416Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lv","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:36:10.861294Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"swift","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:33:58.728366Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lenta","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:31:41.361522Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dora","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:29:32.394072Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"messenger","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:27:28.343749Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"alaska","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:25:11.854278Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rails","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:23:02.827764Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"netops","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:20:50.696499Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jiuye","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:18:39.364647Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"consultation","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:16:30.20427Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"walker","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:14:14.910419Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cas2","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:12:15.991776Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vybory","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:10:00.699157Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jiwei","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:07:47.44566Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cpk","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:05:38.292882Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mcc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:03:25.052307Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"callisto","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:01:20.013649Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"abc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T14:58:58.564388Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"onyx","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T14:51:29.70429Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"eo","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:06:05.970543756Z"}