{"ip":"31.59.89.180","first_seen":"2026-06-18T17:01:13.68967Z","last_seen":"2026-06-18T17:33:29.830053Z","geo":{"country":"Italy","country_code":"IT","city":"Nola","asn":"AS203462 NOVACONN SRL","isp":"Novaconn SRL","lat":40.9291,"lon":14.5304},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-18T17:33:29.830053Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webaccess","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:32:05.774016Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"comunidad","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:30:29.405382Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tl","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:29:01.03411Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"migrate","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:27:39.025638Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"yx","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:26:22.613885Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mar","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:24:53.425794Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"les","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:23:28.322782Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"public1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:22:08.082486Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"atlant","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:20:37.874692Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"maxx","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:19:07.593592Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dppd","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:17:43.534685Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webmasters","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:16:05.087878Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tmc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:14:43.526143Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sca","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:13:19.454041Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"firefly","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:11:51.296226Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"request","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:10:27.209717Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aist","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:08:54.943022Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"monitoramento","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:07:28.837208Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tardis","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T17:01:13.68967Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"yxy","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:01:28.520917738Z"}