{"ip":"193.46.255.86","first_seen":"2026-06-17T14:40:12.254448Z","last_seen":"2026-06-28T05:42:42.361201Z","geo":{"country":"United Kingdom","country_code":"GB","city":"Rushden","asn":"AS47890 UNMANAGED LTD","isp":"Unmanaged LTD","lat":52.2999,"lon":-0.613313},"stats":{"total_events":197,"ssh_events":197,"http_events":0,"ssh_failures":197,"http_4xx":0,"http_5xx":0,"distinct_usernames":43,"distinct_paths":0,"distinct_source_hosts":2},"behavior_tags":["ssh.bruteforce","ssh.stuffing","actor.persistent","actor.multi_vm","asn.coordinated"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-06-28T05:42:42.361201Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubnt","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-06-28T05:35:29.511948Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubnt","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-28T04:40:54.509603Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T04:33:28.313593Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T03:36:08.066769Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T03:28:18.86456Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-28T02:51:23.413172Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"probe","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-06-28T02:47:03.437924Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"probe","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-06-27T18:42:45.785911Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T17:54:41.050056Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-06-27T16:17:40.905215Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T15:29:05.09201Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T13:51:16.504655Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jenkins","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T13:02:43.174118Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"zahra","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T12:13:58.56411Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T10:36:12.17966Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T08:58:16.58247Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T06:30:41.371735Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T05:41:21.463354Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pi","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T04:52:05.741479Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T04:02:46.183645Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubnt","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T02:24:09.503632Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-27T01:34:41.19036Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T23:55:06.147545Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]},{"ts":"2026-06-26T23:05:26.38533Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":[]}],"generated_at":"2026-06-28T06:01:36.253403886Z"}