{"ip":"81.192.46.45","first_seen":"2026-08-14T17:05:32.44552Z","last_seen":"2026-08-14T18:50:51.789066Z","geo":{"country":"Morocco","country_code":"MA","city":"Casablanca","asn":"AS6713 Office National des Postes et Telecommunications ONPT (Maroc Telecom) / IAM","isp":"ONPT","lat":33.5922,"lon":-7.6184},"stats":{"total_events":33,"ssh_events":33,"http_events":0,"ssh_failures":33,"http_4xx":0,"http_5xx":0,"distinct_usernames":31,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["ssh.bruteforce","ssh.stuffing","subnet.coordinated"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-14T18:50:51.789066Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"abhi","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:48:48.92151Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"student9","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:46:36.343005Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"consulta1","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:42:24.633542Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"alex","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:40:25.821307Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"qqq","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:33:59.583695Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pt","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:31:21.655753Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrator","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-14T18:29:19.520795Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user01","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:27:14.793441Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"openkm","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:23:18.360496Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hassan","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:19:10.730179Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"climate","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:17:03.913735Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"claude","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:06:16.647777Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"frontend","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:04:16.216748Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"justine","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T18:02:13.2623Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-14T18:00:02.163426Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-14T17:55:46.699871Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ahmed","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T17:53:39.920771Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-14T17:51:40.202015Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"squid","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T17:49:41.18257Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jenkins","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-14T17:47:37.194873Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jp","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T17:45:32.696982Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"onlyoffice","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T17:43:23.626104Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"myuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T17:41:11.364833Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ark","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-14T17:39:07.368799Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rmartinez","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]}],"generated_at":"2026-08-25T18:05:29.360250496Z"}