{"ip":"210.79.142.201","first_seen":"2026-08-24T15:09:38.060685Z","last_seen":"2026-08-24T18:08:43.897405Z","geo":{"country":"Indonesia","country_code":"ID","city":"Nganjuk","asn":"AS141607 PT Gayatri Lintas Nusantara","isp":"PT Gayatri Lintas Nusantara","lat":-7.6051,"lon":111.904},"stats":{"total_events":28,"ssh_events":28,"http_events":0,"ssh_failures":28,"http_4xx":0,"http_5xx":0,"distinct_usernames":23,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-24T18:08:43.897405Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"helena","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T18:05:10.442657Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T18:01:30.585395Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T17:50:19.560946Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T17:42:53.208348Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T17:39:20.426853Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mysql","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T17:31:52.664831Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sham","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T17:28:02.19719Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"developer","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T17:17:02.069448Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"michael","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T17:05:42.5153Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T16:58:26.997388Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T16:54:45.971135Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"runcloud","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T16:50:58.996Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"joop","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T16:47:22.673893Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"adnan","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T16:36:19.342817Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T16:32:34.551101Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test001","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T16:25:08.067801Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"samr","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T16:17:46.040885Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T16:13:58.419906Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jenkins","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T16:06:33.36855Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"newuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T15:58:59.883171Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"search","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T15:55:17.057088Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"amir","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T15:51:32.50095Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ali","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T15:44:18.591673Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tester","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T15:32:53.746364Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]}],"generated_at":"2026-08-25T18:06:16.408005103Z"}