{"ip":"52.233.193.61","first_seen":"2026-06-26T13:00:55.518694Z","last_seen":"2026-06-26T13:00:56.192695Z","geo":{"country":"Netherlands","country_code":"NL","city":"Amsterdam","asn":"AS8075 Microsoft Corporation","isp":"Microsoft Corporation","lat":52.3667,"lon":4.9},"stats":{"total_events":35,"ssh_events":35,"http_events":0,"ssh_failures":35,"http_4xx":0,"http_5xx":0,"distinct_usernames":29,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:00:56.192695Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sendmail","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.185883Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oe","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.182855Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"toto","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.182855Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rafael","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.17776Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.17776Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.173475Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"magda","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.163275Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"customer","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.163275Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.162166Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ha","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.162166Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"loginuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.162166Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mp","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.16148Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"baptiste","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.16148Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jupyterhub","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.16148Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dev","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.158879Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"adi","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.158879Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lyt","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.158879Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rapid","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.527387Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.527387Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.525063Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dreamnine","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.525063Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.525063Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user10","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.525063Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"loginuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.525063Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ahmad","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:03:07.868171517Z"}