Incident Timeline for 198.51.100.23
============================================================
1. [FIREWALL-DROP] [firewall-drop:src=198.51.100.23,dst=192.168.1.100:22,reason=blocked_port]
2. [IDS-SQLI] [ids-sqli:src=198.51.100.23,dst=192.168.1.100:80]
3. [IDS-BRUTEFORCE] [ids-bruteforce:src=198.51.100.23,dst=192.168.1.100:22]
4. [AUTH-FAILURE] [auth-failure:user=admin,ip=198.51.100.23,reason=invalid_password]
5. [AUTH-FAILURE] [auth-failure:user=admin,ip=198.51.100.23,reason=invalid_password]
6. [AUTH-FAILURE] [auth-failure:user=admin,ip=198.51.100.23,reason=invalid_password]

Total events: 6
