{"ip":"152.53.225.147","first_seen":"2026-08-01T11:07:33.488309Z","last_seen":"2026-08-01T11:34:39.237497Z","geo":{"country":"Germany","country_code":"DE","city":"Nuremberg","asn":"AS197540 netcup GmbH","isp":"netcup GmbH","lat":49.4527,"lon":11.0783},"stats":{"total_events":79,"ssh_events":79,"http_events":0,"ssh_failures":79,"http_4xx":0,"http_5xx":0,"distinct_usernames":53,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-01T11:34:39.237497Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kafka","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:34:38.307171Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vpnssh","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:34:37.404187Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"minecraft","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:34:36.466912Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:33:12.970819Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"devuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:33:12.067693Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"linuxadmin","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:33:11.156849Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:32:50.881237Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"devops","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:32:49.970329Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vyos","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:32:49.063205Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pi","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:32:48.136178Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftp","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:32:47.202081Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:32:46.289148Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"craft","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:32:07.9213Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:32:06.995876Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"student","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:32:06.081255Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:30:53.343857Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:29:08.736982Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:28:45.723622Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"esuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:28:44.793035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:28:42.957Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ansible","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:28:42.032763Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:28:35.598063Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"devops","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-01T11:28:34.693795Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-01T11:28:33.768563Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"es","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:03:45.630416704Z"}