{"ip":"92.118.39.14","first_seen":"2026-07-31T04:27:01.586266Z","last_seen":"2026-08-25T01:49:48.858391Z","geo":{"country":"United States","country_code":"US","city":"Dallas","asn":"AS47890 UNMANAGED LTD","isp":"Unmanaged LTD","lat":32.7797,"lon":-96.8022},"stats":{"total_events":874,"ssh_events":874,"http_events":0,"ssh_failures":874,"http_4xx":0,"http_5xx":0,"distinct_usernames":18,"distinct_paths":0,"distinct_source_hosts":2},"behavior_tags":["actor.long_term","actor.multi_vm","actor.persistent","asn.coordinated","ssh.bruteforce","ssh.stuffing","subnet.coordinated"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-25T01:49:48.858391Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T01:49:43.363821Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-25T01:47:50.524424Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T01:47:44.7321Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-25T01:45:52.58566Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T01:45:46.817058Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-25T01:43:55.356317Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T01:43:49.640716Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"debian","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-25T01:41:58.421874Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"centos","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:41:52.677023Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"centos","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:39:57.552495Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"centos","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:39:51.486863Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"centos","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:37:56.749891Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"centos","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:37:50.895584Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"centos","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:35:56.422271Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"centos","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:35:49.944475Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"centos","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:23:55.660488Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"apache","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T01:23:49.849445Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"apache","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-25T01:21:53.873739Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"apache","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum"]},{"ts":"2026-08-25T01:21:47.661756Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"apache","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-25T01:19:54.297329Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrator","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:19:48.199796Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrator","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:17:58.706182Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrator","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:17:52.949113Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrator","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-25T01:16:03.231548Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"administrator","host_app":"host","source_host":"ironcatlabs","tags":["ssh.enum","ssh.dictionary"]}],"generated_at":"2026-08-25T17:12:45.730656901Z"}