{"generated_at":"2026-08-25T14:26:51.510811045Z","tags":[{"tag":"asn.coordinated","type":"behavior","ip_count":4282},{"tag":"ssh.enum","type":"event","ip_count":3521},{"tag":"ssh.dictionary","type":"event","ip_count":2589},{"tag":"subnet.coordinated","type":"behavior","ip_count":1834},{"tag":"protocol.no-language","type":"event","ip_count":1601},{"tag":"ssh.bruteforce","type":"behavior","ip_count":1459},{"tag":"ssh.stuffing","type":"behavior","ip_count":1417},{"tag":"probe.config","type":"event","ip_count":734},{"tag":"protocol.no-accept","type":"event","ip_count":719},{"tag":"actor.multi_vm","type":"behavior","ip_count":693},{"tag":"actor.persistent","type":"behavior","ip_count":491},{"tag":"probe.wp-admin","type":"event","ip_count":425},{"tag":"client.search-bot","type":"event","ip_count":358},{"tag":"client.scraper","type":"event","ip_count":348},{"tag":"probe.dotenv","type":"event","ip_count":286},{"tag":"probe.404flood","type":"behavior","ip_count":272},{"tag":"client.empty-ua","type":"event","ip_count":258},{"tag":"probe.wp-login","type":"event","ip_count":211},{"tag":"probe.xmlrpc","type":"event","ip_count":202},{"tag":"probe.dotgit","type":"event","ip_count":168},{"tag":"probe.admin","type":"event","ip_count":146},{"tag":"probe.cgi","type":"event","ip_count":125},{"tag":"client.short-ua","type":"event","ip_count":121},{"tag":"cluster.shared_wordlist","type":"behavior","ip_count":117},{"tag":"client.library","type":"event","ip_count":109},{"tag":"probe.shell","type":"event","ip_count":69},{"tag":"scanner.go","type":"event","ip_count":68},{"tag":"client.go_http","type":"event","ip_count":68},{"tag":"probe.backup","type":"event","ip_count":64},{"tag":"cluster.shared_paths","type":"behavior","ip_count":64},{"tag":"scanner.zgrab","type":"event","ip_count":61},{"tag":"protocol.old","type":"event","ip_count":58},{"tag":"scanner.bare-go-client","type":"event","ip_count":55},{"tag":"probe.actuator","type":"event","ip_count":43},{"tag":"scanner.curl","type":"event","ip_count":42},{"tag":"client.curl","type":"event","ip_count":39},{"tag":"client.python_http","type":"event","ip_count":38},{"tag":"probe.phpmyadmin","type":"event","ip_count":35},{"tag":"client.outdated","type":"event","ip_count":35},{"tag":"actor.long_term","type":"behavior","ip_count":31},{"tag":"scanner.python","type":"event","ip_count":25},{"tag":"actor.heavy","type":"behavior","ip_count":23},{"tag":"probe.dotssh","type":"event","ip_count":23},{"tag":"probe.injection","type":"event","ip_count":19},{"tag":"probe.traversal","type":"event","ip_count":17},{"tag":"client.headless","type":"event","ip_count":11},{"tag":"actor.cross_protocol","type":"behavior","ip_count":11},{"tag":"probe.boaform","type":"event","ip_count":8},{"tag":"path.long-suspect","type":"event","ip_count":3},{"tag":"probe.sqli","type":"event","ip_count":2},{"tag":"client.fasthttp","type":"event","ip_count":2},{"tag":"probe.method_abuse","type":"event","ip_count":2},{"tag":"probe.log4j","type":"event","ip_count":1},{"tag":"cluster.confirmed_operator","type":"behavior","ip_count":1},{"tag":"probe.xss","type":"event","ip_count":1}]}