{"ip":"45.140.192.187","first_seen":"2026-06-19T01:16:00.446064Z","last_seen":"2026-06-19T02:38:12.416871Z","geo":{"country":"Brazil","country_code":"BR","city":"São Paulo","asn":"AS268581 QNAX LTDA","isp":"Qnax Ltda","lat":-23.5475,"lon":-46.6361},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T02:38:12.416871Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gdi","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:34:10.511499Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"commercial","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:30:47.614932Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"donald","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:26:53.976382Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"st3","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:23:16.711707Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"avatars","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:19:53.815679Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pubs","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:15:47.867046Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"philips","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:11:31.658871Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"stat2","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:07:28.785469Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"qmailadmin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T02:02:39.787493Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"linux3","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:58:24.588958Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"probe","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:54:07.318697Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"parser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:49:32.651057Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ssb","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:44:51.815736Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"fiona","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:40:06.874003Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"inbound","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:35:15.741324Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"eic","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:30:41.034932Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cct","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:26:05.262793Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"opennms","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:21:18.227609Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sw2","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T01:16:00.446064Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ppc","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:03:40.06908017Z"}