{"ip":"91.92.40.237","first_seen":"2026-06-19T18:15:52.737692Z","last_seen":"2026-06-19T18:49:46.194426Z","geo":{"country":"Bulgaria","country_code":"BG","city":"Varna","isp":"BULLETGROUP","lat":43.1753,"lon":27.9041},"stats":{"total_events":15,"ssh_events":15,"http_events":0,"ssh_failures":15,"http_4xx":0,"http_5xx":0,"distinct_usernames":2,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","subnet.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-19T18:49:46.194426Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:47:04.248686Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:44:24.377797Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:41:44.507518Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:38:54.256329Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:36:20.517444Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:33:48.828881Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:31:27.411644Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:29:01.871608Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:26:44.545113Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:24:27.206462Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:22:16.029107Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:20:08.949402Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:17:51.620272Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-19T18:15:52.737692Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T08:38:52.38352297Z"}