{"ip":"43.243.142.42","first_seen":"2026-06-19T22:23:37.477879Z","last_seen":"2026-06-27T23:12:46.063694Z","geo":{"country":"Indonesia","country_code":"ID","city":"Jakarta","asn":"AS131111 PT Mora Telematika Indonesia","isp":"PT. Mora Telematika Indonesia","lat":-6.21462,"lon":106.845},"stats":{"total_events":55,"ssh_events":55,"http_events":0,"ssh_failures":55,"http_4xx":0,"http_5xx":0,"distinct_usernames":55,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","actor.persistent"],"event_tags":["ssh.enum"],"recent_events":[{"ts":"2026-06-27T23:12:46.063694Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sss","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T23:11:04.856964Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"newsite","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T23:09:12.095724Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tumen","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T23:07:25.243574Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"myadmin","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T23:05:46.85537Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"actu","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T23:03:58.202329Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cptest","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T23:02:15.707624Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tsc","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T23:00:40.200057Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lead","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:58:53.608505Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"orlando","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:57:13.1451Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"uis","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:55:24.507337Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aspen","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:53:46.08955Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sbe","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:51:46.411516Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"scout","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:50:08.914725Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"xew","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:48:24.369265Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aragorn","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:46:41.847969Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgresql","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:44:59.555222Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"stwww","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:43:14.984575Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tp","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:41:36.002065Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webprod","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T22:37:54.602702Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gdi","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-26T13:00:56.130529Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dima","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.130529Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webftp","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.123003Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.121598Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"k3","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.121598Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"daniel","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:04:11.534302791Z"}