{"ip":"65.49.139.223","first_seen":"2026-06-26T22:43:00.66235Z","last_seen":"2026-06-26T22:43:36.105892Z","geo":{"country":"United States","country_code":"US","city":"Wenatchee","asn":"AS13370 Ziply Fiber","isp":"Ziply Fiber","lat":47.4221,"lon":-120.3266},"stats":{"total_events":29,"ssh_events":29,"http_events":0,"ssh_failures":29,"http_4xx":0,"http_5xx":0,"distinct_usernames":11,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","cluster.shared_wordlist"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T22:43:36.105892Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"baikal","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:34.809089Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pi","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:33.775647Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:32.479457Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:30.407976Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test2","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:30.407976Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:29.109826Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test2","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:27.813147Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test2","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:26.777845Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:25.223069Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:24.055448Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:22.886391Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:21.332697Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:20.034942Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:18.999443Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:17.442604Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:16.410182Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:15.372928Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:14.075581Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:13.042478Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:12.007876Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"usuario","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:10.452691Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"usuario","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:09.284135Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"usuario","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:08.183181Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oracle","host_app":"host","source_host":"ironcatlabs","tags":[]},{"ts":"2026-06-26T22:43:06.362808Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oracle","host_app":"host","source_host":"ironcatlabs","tags":[]}],"generated_at":"2026-06-28T06:04:58.030816963Z"}