{"ip":"202.152.148.30","first_seen":"2026-08-25T08:19:42.922079Z","last_seen":"2026-08-25T10:28:54.783412Z","geo":{"country":"Indonesia","country_code":"ID","city":"Yogyakarta","asn":"AS23951 PT JEMBATAN CITRA NUSANTARA","isp":"PT Jembatan Citra Nusantara","lat":-7.807,"lon":110.3963},"stats":{"total_events":33,"ssh_events":33,"http_events":0,"ssh_failures":33,"http_4xx":0,"http_5xx":0,"distinct_usernames":32,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-25T10:28:54.783412Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"amit","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T10:26:29.035554Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rtc","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T10:21:30.246285Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dat","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T10:19:05.047987Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vikas","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T10:16:38.478876Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"wangyao","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T10:06:45.046689Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"joe","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T10:04:17.588691Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"devuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:57:04.067835Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"app","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:52:03.38265Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"staging","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:46:52.234009Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T09:41:36.821545Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"fivem","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:39:06.839068Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tech","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:30:04.45785Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"connect","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:22:04.386878Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ts3","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:19:32.073233Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"duc","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:16:58.122618Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lyy","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:14:23.444766Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T09:11:38.261063Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vncuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:08:59.015094Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"trading","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:06:22.313296Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"travel","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T09:01:08.505557Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jorgodubare","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T08:58:27.698482Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mysql","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T08:55:48.364415Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T08:53:06.307978Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T08:47:58.449531Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"james","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]}],"generated_at":"2026-08-25T17:57:07.354696656Z"}