{"ip":"92.27.101.99","first_seen":"2026-06-26T13:00:56.107382Z","last_seen":"2026-06-26T13:00:56.108035Z","geo":{"country":"United Kingdom","country_code":"GB","city":"West Ealing","asn":"AS13285 TalkTalk Communications Limited","isp":"TalkTalk","lat":51.5135,"lon":-0.3229},"stats":{"total_events":25,"ssh_events":25,"http_events":0,"ssh_failures":25,"http_4xx":0,"http_5xx":0,"distinct_usernames":23,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":[],"recent_events":[{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kirill","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"yasin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"profe","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sai","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sms","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"student1","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cod2server","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"app","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mark","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"gautam","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ivan","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"proxyuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"grass","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.108035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.107382Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"felix","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.107382Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"server","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.107382Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rtc","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.107382Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T13:00:56.107382Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"atl","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:02:13.14019253Z"}