{"ip":"77.105.130.18","first_seen":"2026-06-26T14:58:36.330334Z","last_seen":"2026-06-26T15:44:07.265729Z","geo":{"country":"Finland","country_code":"FI","city":"Helsinki","asn":"AS216300 Closed Joint Stock Company \"AbkhazMedia\"","isp":"Closed Joint Stock Company \"AbkhazMedia\"","lat":60.1699,"lon":24.9384},"stats":{"total_events":14,"ssh_events":14,"http_events":0,"ssh_failures":14,"http_4xx":0,"http_5xx":0,"distinct_usernames":14,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","cluster.shared_wordlist"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T15:44:07.265729Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:42:34.9927Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nessus","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:39:28.341354Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"steam","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:38:00.139478Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:33:13.950192Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:30:12.268055Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpadmin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:26:56.922045Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:24:00.598953Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"albert","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:22:35.357429Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"console","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:12:40.760186Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testusr","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:08:13.970868Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dev","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:03:33.844421Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kong","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T15:01:57.235326Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T14:58:36.330334Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pascal","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T08:50:00.019599564Z"}