{"ip":"45.184.226.43","first_seen":"2026-06-17T14:54:51.434449Z","last_seen":"2026-06-18T03:21:00.912056Z","geo":{"country":"Ecuador","country_code":"EC","city":"Quito","asn":"AS269805 MEDIA COMMERCE MEDCOMM S.A","isp":"Media Commerce Medcomm S.A","lat":-0.2309,"lon":-78.5211},"stats":{"total_events":120,"ssh_events":120,"http_events":0,"ssh_failures":120,"http_4xx":0,"http_5xx":0,"distinct_usernames":71,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-18T03:21:00.912056Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T03:17:03.122219Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"docker","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T03:12:59.158632Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dolphinscheduler","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T03:09:11.644331Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T03:05:11.84032Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kafka","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T02:44:45.59247Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"server","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T02:40:47.04716Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"odoo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T02:05:28.389533Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T01:17:44.759642Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"temp","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T01:13:46.993417Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tester","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T01:09:45.144353Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T01:05:43.298525Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mysql","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T01:01:53.744505Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T00:46:42.420167Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sammy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T00:42:50.772595Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"alex","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T00:05:15.694533Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T00:01:32.283185Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T23:57:42.72807Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deployer","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T23:25:56.608996Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T23:21:46.524948Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T23:17:52.882971Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T22:25:39.153645Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test123","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T22:21:45.493054Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"a","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T22:05:11.455715Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T21:52:59.229486Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"1234","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:05:56.786679374Z"}