{"ip":"188.255.156.80","first_seen":"2026-07-31T09:08:44.529729Z","last_seen":"2026-07-31T14:56:57.308471Z","geo":{"country":"Serbia","country_code":"RS","city":"Belgrade","asn":"AS7488 CNServer LLC","isp":"CNServer LLC","lat":44.8046,"lon":20.4637},"stats":{"total_events":196,"ssh_events":196,"http_events":0,"ssh_failures":196,"http_4xx":0,"http_5xx":0,"distinct_usernames":112,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-07-31T14:56:57.308471Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"telecomadmin","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:56:21.504047Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ae","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:55:45.844578Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dev","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:55:10.687302Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"guest","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:54:36.630169Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"plex","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:34:41.395285Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:34:07.832925Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"arkserver","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:33:34.015031Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bot","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:32:57.793442Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dan","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:32:20.313779Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:31:43.007769Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"elasticsearch","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:31:07.518667Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftp","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:30:33.006767Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mc","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:29:57.550647Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"media","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:29:23.220072Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"nexus","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:14:58.292149Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"zabbix","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:14:23.540487Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:13:49.481136Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jack","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:13:15.147599Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"maria","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:12:41.186741Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"osmc","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-07-31T14:12:05.763216Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"postgres","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:03:03.525149Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:02:29.251473Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:01:55.281674Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-07-31T14:01:21.537672Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"peter","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:07:16.115704844Z"}