{"ip":"20.96.179.87","first_seen":"2026-08-24T18:58:20.308455Z","last_seen":"2026-08-24T21:43:26.093611Z","geo":{"country":"United States","country_code":"US","city":"Boydton","asn":"AS8075 Microsoft Corporation","isp":"Microsoft Corporation","lat":36.677696,"lon":-78.37471},"stats":{"total_events":27,"ssh_events":27,"http_events":0,"ssh_failures":27,"http_4xx":0,"http_5xx":0,"distinct_usernames":26,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-24T21:43:26.093611Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ali","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T21:39:56.790068Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"alex","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T21:36:26.081317Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hadoop","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T21:30:12.060441Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"celery","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T21:27:16.53468Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T21:20:58.137524Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vlado","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T21:17:22.943525Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"es","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T21:13:55.480624Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vikash","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T21:05:16.432801Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T21:01:52.077482Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"alejandro","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T20:52:42.33685Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"abbas","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T20:48:21.812223Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"urban","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T20:40:02.436523Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T20:36:02.762083Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test2","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T20:27:22.933972Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sshuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T20:18:45.630083Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"student08","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T20:11:59.899748Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"wpyan","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T20:08:47.50015Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"diogo","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T20:06:12.322387Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mainuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T19:45:09.710769Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gokul","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T19:42:14.45126Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"carlos","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T19:39:26.040099Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"james","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T19:29:41.784077Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T19:26:25.227745Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rancher","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T19:18:30.535696Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kobo","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:01:32.673683931Z"}