{"ip":"164.30.17.82","first_seen":"2026-10-13T05:41:38.699612Z","last_seen":"2026-10-14T09:25:07.408212Z","geo":{"country":"Germany","country_code":"DE","city":"Hanover","asn":"AS6878 T-Systems International GmbH","isp":"TELEKOM","lat":52.3759,"lon":9.73201},"stats":{"total_events":453,"ssh_events":453,"http_events":0,"ssh_failures":453,"http_4xx":0,"http_5xx":0,"distinct_usernames":1,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["actor.persistent","ssh.bruteforce"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-10-14T09:25:07.408212Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T09:19:51.741615Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T09:14:39.782907Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T09:09:24.587347Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T09:04:08.493682Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:58:54.354957Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:53:44.622036Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:48:31.3028Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:43:16.076912Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:38:03.299533Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:32:57.596738Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:27:45.514124Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:22:33.88498Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:17:21.036148Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:12:15.804016Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:07:07.740261Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T08:01:58.075967Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T07:56:45.29868Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T07:51:36.54585Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T07:46:25.180076Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T07:41:13.509765Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T07:36:00.236385Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T07:30:48.827079Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T07:25:39.982574Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-10-14T07:20:31.599838Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironhawk","tags":["ssh.enum","ssh.dictionary"]}],"generated_at":"2026-10-25T03:26:21.169216337Z"}