{"ip":"82.115.13.172","first_seen":"2026-08-20T23:13:49.392518Z","last_seen":"2026-08-21T00:52:39.528281Z","geo":{"country":"The Netherlands","country_code":"NL","city":"Amsterdam","asn":"AS212552 BitCommand LLC","isp":"BitCommand LLC","lat":52.3676,"lon":4.90414},"stats":{"total_events":29,"ssh_events":29,"http_events":0,"ssh_failures":29,"http_4xx":0,"http_5xx":0,"distinct_usernames":27,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-21T00:52:39.528281Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"kiran","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:46:39.83763Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T00:44:40.298019Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tester","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:42:39.073533Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T00:38:35.926348Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"eagle","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:36:29.613752Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vishal","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:34:29.755043Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ansible","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:26:21.646362Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"steam","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:24:07.021455Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T00:17:42.336367Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-21T00:15:46.360796Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"hero","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:13:48.218983Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"celeryuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-21T00:03:13.031488Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"minikube","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:57:01.051382Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"appuser","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:55:04.339821Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"testtest","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:53:01.528085Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rfas","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:50:53.865115Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"backups","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:48:49.299882Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bitrix","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:46:37.298855Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-20T23:44:36.319095Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"term1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:42:40.510266Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"book","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:36:43.207808Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"vital","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:32:24.251713Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"jacob","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:28:05.248737Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sumit","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-20T23:26:02.835472Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]}],"generated_at":"2026-08-25T17:58:20.817470032Z"}