{"ip":"155.4.244.107","first_seen":"2026-08-22T02:15:01.713417Z","last_seen":"2026-08-22T04:23:12.600757Z","geo":{"country":"Sweden","country_code":"SE","city":"Helsingborg","asn":"AS8473 Bahnhof AB","isp":"Bahnhof AB","lat":56.045,"lon":12.6923},"stats":{"total_events":29,"ssh_events":29,"http_events":0,"ssh_failures":29,"http_4xx":0,"http_5xx":0,"distinct_usernames":28,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["asn.coordinated","ssh.bruteforce","ssh.stuffing","subnet.coordinated"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-22T04:23:12.600757Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T04:20:51.702379Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dylan","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T04:15:57.581931Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"igor","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T04:10:53.467137Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"plexuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T04:08:22.810663Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ts3","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T04:00:51.391035Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"claude","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:58:19.475099Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"flash","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:55:59.710327Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user15","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:53:34.83594Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"xq","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:51:04.469299Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T03:48:33.705982Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mars","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:43:20.853268Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tania","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:38:25.5687Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"protocollo","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:33:17.46889Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"chris","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:30:45.713862Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vera","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:28:07.47679Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T03:20:34.801677Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ahmad","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:15:29.468492Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T03:12:56.820707Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"andong","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:08:07.39051Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pentest","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T03:03:19.706551Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"cctv","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T02:58:15.474282Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"caja01","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T02:55:33.734535Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"git","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-22T02:44:48.468567Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tars","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-22T02:42:12.468496Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]}],"generated_at":"2026-08-25T18:00:03.015569144Z"}