{"ip":"91.92.40.6","first_seen":"2026-06-18T22:45:02.82264Z","last_seen":"2026-06-26T13:00:55.107047Z","geo":{"country":"Bulgaria","country_code":"BG","city":"Varna","isp":"BULLETGROUP","lat":43.1753,"lon":27.9041},"stats":{"total_events":28,"ssh_events":28,"http_events":0,"ssh_failures":28,"http_4xx":0,"http_5xx":0,"distinct_usernames":2,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","subnet.coordinated"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:00:55.107047Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:55.107047Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:30:35.132639Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:28:48.53163Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:27:03.979023Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:25:03.037899Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:23:22.591035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:21:42.160975Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dspace","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:19:43.211019Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:17:56.616288Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:16:01.814317Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:14:02.939678Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:12:22.510811Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:10:33.875681Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:08:43.203897Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:07:04.813553Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:05:12.080444Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:03:27.543852Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T23:01:36.870403Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T22:59:46.196786Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T22:57:55.524623Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T22:56:15.097379Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T22:54:16.213959Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T22:52:27.583025Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-18T22:50:36.907399Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T05:47:19.751030917Z"}