{"ip":"41.242.115.84","first_seen":"2026-08-20T23:15:28.816178Z","last_seen":"2026-08-21T01:11:32.662168Z","geo":{"country":"Ghana","country_code":"GH","city":"Accra","asn":"AS37613 DOLPHIN TELECOMMUNICATION LIMITED","isp":"Dolphin Telecommunication Limited","lat":5.5545,"lon":-0.1902},"stats":{"total_events":29,"ssh_events":29,"http_events":0,"ssh_failures":29,"http_4xx":0,"http_5xx":0,"distinct_usernames":27,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-21T01:11:32.662168Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tester","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T01:08:59.723282Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testtest","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T01:04:04.736309Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dls","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:56:39.58288Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bitrix","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:54:16.713303Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T00:51:57.006813Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vital","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:46:57.884021Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T00:44:28.042326Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kiran","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:42:04.545501Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"appuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:39:45.498415Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sumit","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:37:20.642995Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"eagle","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:34:57.963968Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"book","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:29:53.668059Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"backups","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:17:22.917481Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T00:15:02.246827Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"steam","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:09:54.234393Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jacob","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:07:22.567594Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vishal","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:02:31.420639Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"celeryuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:00:05.232798Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-20T23:57:38.90221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"term1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:55:09.201899Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hero","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:40:08.907226Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rfas","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:37:47.460661Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bla","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:32:40.763865Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-20T23:30:10.856458Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"scanner","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:00:03.002036418Z"}