{"ip":"124.155.125.131","first_seen":"2026-08-03T12:45:19.580732Z","last_seen":"2026-08-18T19:15:08.415209Z","geo":{"country":"Japan","country_code":"JP","city":"Chiyoda City","asn":"AS4685 Asahi Net","isp":"ASAHI Net, Inc.","lat":35.6906,"lon":139.77},"stats":{"total_events":56,"ssh_events":56,"http_events":0,"ssh_failures":56,"http_4xx":0,"http_5xx":0,"distinct_usernames":51,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["actor.persistent","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-18T19:15:08.415209Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T19:12:52.931299Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T19:10:24.388104Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cw","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T19:08:01.608251Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"edubook","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T19:05:44.387424Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"es","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T19:03:25.154984Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"splunk","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:58:59.25438Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"misha","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:56:35.150613Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"leandro","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:37:47.373331Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lab","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:30:33.692301Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mailer","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:23:29.695896Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rizal","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:21:18.872211Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rbs","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:19:01.432971Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"squid","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:16:43.970062Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"qw","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:14:20.070231Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"keycloak","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:11:51.413221Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vk","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:09:35.342077Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"zmarin","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:07:19.551025Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"systems","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:05:02.52315Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"odoo","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T18:00:21.817911Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"claude","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T17:57:51.752604Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"elias","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T17:46:08.186229Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vpsuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T17:43:49.714821Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"terraria","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T17:41:23.540734Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"iptv","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T17:38:56.842824Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sftp_user","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:11:51.224558099Z"}