{"ip":"78.83.249.54","first_seen":"2026-06-17T13:35:49.204875Z","last_seen":"2026-06-17T21:16:01.123015Z","geo":{"country":"Bulgaria","country_code":"BG","city":"Burgas","asn":"AS29580 A1 Bulgaria EAD","isp":"A1 Bulgaria EAD","lat":42.4963,"lon":27.4646},"stats":{"total_events":37,"ssh_events":37,"http_events":0,"ssh_failures":37,"http_4xx":0,"http_5xx":0,"distinct_usernames":37,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-17T21:16:01.123015Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rw","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T21:14:30.925121Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"opc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T21:12:52.538856Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"discord","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T21:08:13.785136Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dci","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:59:58.488315Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dev","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:57:00.160875Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rootuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:55:36.110292Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrador","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:52:31.59074Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"data","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:49:22.978902Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"beth","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:46:17.972673Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"x","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:43:05.280949Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"innova","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:41:35.072662Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"practicas","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:40:08.580903Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hobbit","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:38:42.452759Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:37:05.57025Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kevin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:35:33.291676Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pentaho","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T20:33:50.77419Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mostafa","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T14:21:10.786017Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"fs1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T14:19:05.739564Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dante","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T14:17:10.011067Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vela","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T14:15:03.794817Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hotel","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T14:13:02.873813Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tex","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T14:11:03.992247Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"economy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T14:09:05.104505Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pila","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-17T14:07:06.207613Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"stages","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:04:10.844412293Z"}