{"ip":"45.198.224.26","first_seen":"2026-07-31T04:27:05.266696Z","last_seen":"2026-08-22T05:58:49.393Z","geo":{"country":"Sweden","country_code":"SE","city":"Stockholm","asn":"AS215925 VPSVAULT.HOST LTD","isp":"Vpsvaulthost LTD","lat":59.3293,"lon":18.0686},"stats":{"total_events":70,"ssh_events":62,"http_events":8,"ssh_failures":62,"http_4xx":8,"http_5xx":0,"distinct_usernames":13,"distinct_paths":2,"distinct_source_hosts":3},"behavior_tags":["actor.cross_protocol","actor.multi_vm","actor.persistent","ssh.bruteforce","ssh.stuffing"],"event_tags":["client.go_http","client.library","protocol.no-accept","protocol.no-language","scanner.bare-go-client","scanner.go","ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-22T05:58:49.393Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/login","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-08-22T04:38:24.092Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-21T12:41:41.104Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/login","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-08-21T10:43:47.85Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-20T22:02:01.043Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-20T18:55:02.723Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/login","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-08-19T13:56:32.172295Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"professor","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-19T09:36:46.519Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/login","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["scanner.bare-go-client","client.library","client.go_http","protocol.no-accept","protocol.no-language","scanner.go"]},{"ts":"2026-08-19T07:43:37.235Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-19T04:21:19.834305Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aluno","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-18T07:27:54.170399Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-18T07:17:56.699588Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"aluno","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-17T16:57:14.546442Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jenkins","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-17T16:35:59.282576Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-17T04:18:59.656941Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-16T07:37:39.415703Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-16T07:29:44.901111Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-15T09:00:25.06644Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"professor","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-15T08:42:30.926569Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-14T10:53:00.349658Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-13T22:02:59.813311Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-13T16:11:35.435042Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-13T15:46:44.449537Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"joao","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-13T03:10:02.513106Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"professor","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-13T03:06:24.898721Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"mario","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:06:15.858658344Z"}