{"ip":"97.93.43.157","first_seen":"2026-07-31T04:27:00.977815Z","last_seen":"2026-08-24T18:30:19.591357Z","geo":{"country":"United States","country_code":"US","city":"Long Beach","asn":"AS20115 Charter Communications LLC","isp":"Charter Communications","lat":33.8681,"lon":-118.1831},"stats":{"total_events":85,"ssh_events":85,"http_events":0,"ssh_failures":85,"http_4xx":0,"http_5xx":0,"distinct_usernames":80,"distinct_paths":0,"distinct_source_hosts":1},"behavior_tags":["actor.persistent","asn.coordinated","ssh.bruteforce","ssh.stuffing"],"event_tags":["ssh.dictionary","ssh.enum"],"recent_events":[{"ts":"2026-08-24T18:30:19.591357Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"pzserver","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T18:23:13.068165Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"info","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T18:13:23.901Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"user1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T18:11:05.714632Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"viewer","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T18:04:01.586607Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"xhl2g06n","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:51:41.36803Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"server","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:49:16.939993Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sammy","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:46:53.619129Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"deluge","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:44:30.701294Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"satisfactory","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:41:56.841787Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tom","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:37:01.806195Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ubuntu","host_app":"host","source_host":"ironcat","tags":["ssh.enum","ssh.dictionary"]},{"ts":"2026-08-24T17:32:15.682543Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"webmaster","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:27:28.529031Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"librenms","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:20:01.028144Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"sonar","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:15:04.204806Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"node1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:12:45.671858Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"tuan","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:07:59.92359Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"l4d2","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T17:03:01.44122Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"joshua","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T16:55:39.24951Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"suporte","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T16:53:18.02691Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"story","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T16:50:54.176468Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"storage","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-24T16:37:22.239335Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"ss","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-04T03:40:23.696586Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"db2inst1","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-04T03:29:05.465394Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"lana","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]},{"ts":"2026-08-04T03:24:41.936057Z","source":"ssh","category":"auth.failure","severity":"warn","user_name":"dinesh","host_app":"host","source_host":"ironcat","tags":["ssh.enum"]}],"generated_at":"2026-08-25T17:55:08.202500407Z"}