{"ip":"34.71.30.159","first_seen":"2026-06-18T02:55:21.545736Z","last_seen":"2026-06-20T12:18:29.609253Z","geo":{"country":"United States","country_code":"US","city":"Council Bluffs","asn":"AS396982 Google LLC","isp":"Google LLC","lat":41.2619,"lon":-95.8608},"stats":{"total_events":44,"ssh_events":44,"http_events":0,"ssh_failures":44,"http_4xx":0,"http_5xx":0,"distinct_usernames":43,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-20T12:18:29.609253Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"reza","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:16:24.546562Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"local","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:12:21.294903Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lighthouse","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:10:09.439461Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kai","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:05:48.549292Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lucky","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T12:03:44.484403Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrador","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:59:31.914267Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mamad","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:57:26.287943Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"comercial","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:55:25.838224Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"polls","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:53:12.703356Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:51:09.76577Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"andres","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:48:57.518268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nils","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:46:50.129237Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:40:39.688628Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:38:30.532479Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"training","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:36:15.193243Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:34:06.644767Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:32:03.647193Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"qqq","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:29:54.975594Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"john","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:27:55.02336Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:25:51.507514Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ll","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:23:36.17366Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"shawn","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:21:26.980764Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-20T11:10:45.083997Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"barbara","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T04:10:54.513472Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T05:59:19.193277572Z"}