{"ip":"80.94.92.171","first_seen":"2026-06-18T09:13:51.150583Z","last_seen":"2026-06-26T13:00:55.038553Z","geo":{"country":"The Netherlands","country_code":"NL","city":"Amsterdam","asn":"AS47890 UNMANAGED LTD","isp":"Unmanaged LTD","lat":52.3676,"lon":4.90414},"stats":{"total_events":15,"ssh_events":15,"http_events":0,"ssh_failures":15,"http_4xx":0,"http_5xx":0,"distinct_usernames":2,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","subnet.coordinated","asn.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:00:55.038553Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.038553Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.038553Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.038553Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:39:53.831667Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:35:23.125288Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:30:48.464693Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:26:05.596892Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:38:06.365016Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:33:47.812884Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:29:06.987782Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:24:52.773691Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T09:28:26.911952Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T09:23:35.850249Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T09:13:51.150583Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sol","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T08:47:54.764794741Z"}