{"ip":"62.16.41.154","first_seen":"2026-06-19T14:52:59.885314Z","last_seen":"2026-06-19T15:51:29.827561Z","geo":{"country":"Russia","country_code":"RU","city":"Perm","asn":"AS15640 MTS PJSC","isp":"MTS PJSC","lat":58.0047,"lon":56.2514},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":20,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T15:51:29.827561Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:48:37.043794Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webgis","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:45:42.804261Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"coop","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:42:56.744939Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"filr","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:40:12.757968Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"emo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:37:08.259479Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"plone","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:34:02.834188Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"podcast","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:31:22.910115Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"h3","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:28:29.85367Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"windows","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:25:45.828712Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"basis","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:23:02.827764Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"exc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:20:13.660603Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mv","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:17:27.607808Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"m2","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:14:33.362719Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"xyz","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:11:57.537048Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cvsup","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:09:13.545602Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"massmail","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:06:15.199419Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kursk","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:03:25.052307Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bigsavings","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T15:00:22.616415Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"seven","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T14:52:59.885314Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mobiledev","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T05:59:18.136532858Z"}