{"ip":"83.249.228.67","first_seen":"2026-08-24T10:16:05.490516Z","last_seen":"2026-08-24T10:16:50.634807Z","geo":{"country":"Sweden","country_code":"SE","city":"Stockholm","asn":"AS1257 Tele2 Sverige AB","isp":"COMHEM","lat":59.3327,"lon":18.0656},"stats":{"total_events":29,"ssh_events":29,"http_events":0,"ssh_failures":29,"http_4xx":0,"http_5xx":0,"distinct_usernames":11,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["asn.coordinated","cluster.shared_wordlist","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-24T10:16:50.634807Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"baikal","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:49.121094Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pi","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:47.637315Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:45.460794Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:43.670665Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:42.585401Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test2","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:40.88754Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test2","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:39.356828Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test2","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:38.177118Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:36.428502Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:34.829327Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test1","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:33.268958Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:31.405105Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:29.528195Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:28.057094Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:26.122009Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:24.465323Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:23.334437Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:21.644122Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:20.071829Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"test","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:18.861014Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"usuario","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:17.22829Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"usuario","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:15.718368Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"usuario","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-24T10:16:14.278189Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oracle","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T10:16:12.220967Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oracle","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]}],"generated_at":"2026-08-25T18:01:13.009827325Z"}