{"ip":"51.75.247.232","first_seen":"2026-06-18T06:37:14.061878Z","last_seen":"2026-06-18T07:07:25.70256Z","geo":{"country":"France","country_code":"FR","city":"Roubaix","asn":"AS16276 OVH SAS","isp":"OVH SAS","lat":50.6924,"lon":3.20113},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-18T07:07:25.70256Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"maxx","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T07:05:53.444469Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"comunidad","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T07:04:17.100123Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"yx","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T07:02:40.75332Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"public1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T07:01:06.465979Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dppd","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:59:36.249801Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aist","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:58:05.519449Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tmc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:56:43.516895Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"firefly","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:55:07.154267Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tardis","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:53:32.837824Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webmasters","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:52:00.577521Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"atlant","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:50:27.778976Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"monitoramento","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:49:01.684436Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"les","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:47:27.380494Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"request","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:45:57.926024Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sca","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:44:40.032123Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webaccess","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:43:06.656679Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"yxy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:41:40.554972Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"migrate","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:40:10.344721Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mar","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T06:37:14.061878Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tl","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T08:48:56.455348195Z"}