104.209.10.230
Location
🇺🇸 US / San Jose
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
272
Top 10% by volume
Agent Count
1
First / Last Seen
2026-02-24 15:14 — 2026-02-24 20:12
Attack Types
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
34 (33 with login)
Avg Depth Score
0.59
Commands Executed
36
Files Downloaded
0
Notable Commands
- netstat -tulpn | head -10
- history | tail -5
- ls -la /
- uptime
- hostname
- uname -a
- uname -m 2>/dev/null || echo unknown
- grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
- xargs
- nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0
- grep -c ^processor /proc/cpuinfo 2 > /dev/null
- env | head -10
- pwd
- ps aux | head -10
- ssh -V
- whoami
Fingerprints
HASSH
SSH Client
Recent Events (last 50)
| Timestamp | Port | Proto | Event | Location |
|---|---|---|---|---|
| 2026-02-24 20:12:05 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-24 20:12:05 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-24 20:12:05 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-24 20:12:05 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-24 20:12:05 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-24 20:12:05 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-24 20:12:05 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-24 20:12:05 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-24 20:02:07 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-24 20:02:07 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-24 20:02:07 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-24 20:02:07 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-24 20:02:07 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-24 20:02:07 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-24 20:02:07 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-24 20:02:07 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-24 19:52:14 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-24 19:52:14 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-24 19:52:14 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-24 19:52:14 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-24 19:52:14 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-24 19:52:14 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-24 19:52:14 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-24 19:52:14 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-24 19:42:28 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-24 19:42:28 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-24 19:42:28 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-24 19:42:28 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-24 19:42:28 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-24 19:42:28 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-24 19:42:28 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-24 19:42:28 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-24 19:32:49 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-24 19:32:49 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-24 19:32:49 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-24 19:32:49 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-24 19:32:49 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-24 19:32:49 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-24 19:32:49 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-24 19:32:49 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-24 19:23:13 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-24 19:23:13 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-24 19:23:13 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-24 19:23:13 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-24 19:23:13 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-24 19:23:13 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-24 19:23:13 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-24 19:23:13 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-24 19:13:39 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-24 19:13:39 | :22 | ssh | cowrie.log.closed | sea |