{"ip":"84.1.34.96","first_seen":"2026-08-03T05:30:58.79864Z","last_seen":"2026-08-04T23:20:08.415499Z","geo":{"country":"Hungary","country_code":"HU","city":"Budapest","asn":"AS5483 Magyar Telekom Plc.","isp":"Magyar Telekom","lat":47.5,"lon":19.0412},"stats":{"total_events":68,"ssh_events":68,"http_events":0,"ssh_failures":68,"http_4xx":0,"http_5xx":0,"distinct_usernames":63,"distinct_paths":0,"distinct_source_hosts":2},"behavior_tags":["actor.multi_vm","actor.persistent","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-04T23:20:08.415499Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ftpuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-04T23:18:01.001282Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"john","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T23:15:54.172661Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"bpuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T23:13:47.111244Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"student1","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T23:11:37.409652Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T23:09:36.773756Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"wangke","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T23:07:37.505184Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ismail","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T23:05:30.668353Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oem","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T23:01:14.706736Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrador","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:58:59.7413Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"raj","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:56:52.726104Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"rtorrent","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:52:47.666394Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"manager","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:46:13.958902Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-04T22:33:12.787338Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"admin","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-04T22:28:57.101972Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:26:40.424672Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"special","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:24:30.676359Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-04T22:22:24.759206Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"oracle","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-04T22:16:01.999945Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deploy","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-04T22:13:42.145384Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"max","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:09:17.741319Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-04T22:07:03.77919Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webuser","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:05:02.585963Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"patrol","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T22:00:48.491482Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lm","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-04T21:58:35.458141Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]}],"generated_at":"2026-08-25T17:52:12.05326672Z"}