{"ip":"85.198.19.244","first_seen":"2026-06-19T21:08:44.18793Z","last_seen":"2026-06-19T22:50:54.669307Z","geo":{"country":"Iran","country_code":"IR","city":"Tehran","asn":"AS60077 Asre Dadeha Asiatech","isp":"ASIATECH","lat":35.7282,"lon":51.4259},"stats":{"total_events":20,"ssh_events":20,"http_events":0,"ssh_failures":20,"http_4xx":0,"http_5xx":0,"distinct_usernames":15,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T22:50:54.669307Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gg","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:43:44.646944Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:37:50.012323Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpupload","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:31:51.263805Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"diogo","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:25:22.025852Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rustserver","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:22:07.267997Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:15:31.393114Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dmdba","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:12:22.789386Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ww","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:08:55.735184Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T22:02:11.375447Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ttx","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:59:00.739257Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"liu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:55:33.691111Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:48:58.049996Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"client","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:45:31.012865Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pierre","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:42:07.024008Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"x","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:35:35.733431Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"zxy","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:28:55.992Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:21:59.861057Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"blue","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:18:41.016733Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T21:08:44.18793Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:03:24.703127161Z"}