139.84.242.153
Location
🇿🇦 ZA / Isando
ASN
AS20473 · The Constant Company, LLC
Cloud Provider
Vultr
Total Events
759
Top 5% by volume
Agent Count
1
First / Last Seen
2026-03-19 15:36 — 2026-03-20 20:53
Attack Types
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
96 (92 with login)
Avg Depth Score
0.59
Commands Executed
91
Files Downloaded
0
Notable Commands
- hostname; echo '___BSEP_A1B2C3___'; uname -a; echo '___BSEP_A1B2C3___'; whoami; echo '___BSEP_A1B2C3___'; pwd; echo '___BSEP_A1B2C3___'; ls -la /; echo '___BSEP_A1B2C3___'; ps aux | head -15; echo '___BSEP_A1B2C3___'; netstat -tulpn | head -10; echo '___BSEP_A1B2C3___'; history | tail -5; echo '___BSEP_A1B2C3___'; ssh -V 2>&1; echo '___BSEP_A1B2C3___'; uptime; echo '___BSEP_A1B2C3___'; mount | head -5; echo '___BSEP_A1B2C3___'; env | head -10; echo '___BSEP_A1B2C3___'; cat /etc/os-release 2>/dev/null | head -6; echo '___BSEP_A1B2C3___'; grep MemTotal /proc/meminfo 2>/dev/null; echo '___BSEP_A1B2C3___'; df -h / 2>/dev/null | tail -1; echo '___BSEP_A1B2C3___'; cat /proc/version 2>/dev/null; echo '___BSEP_A1B2C3___'; grep 'model name' /proc/cpuinfo 2>/dev/null | head -1; echo '___BSEP_A1B2C3___'; cat /etc/issue 2>/dev/null; echo '___BSEP_A1B2C3___'; last -n 3 2>/dev/null | head -3; echo '___BSEP_A1B2C3___'; ls /dev 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /var/log 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /opt 2>/dev/null; echo '___BSEP_A1B2C3___'; crontab -l 2>/dev/null | head -5; echo '___BSEP_A1B2C3___'; nproc 2>/dev/null || grep -c '^processor' /proc/cpuinfo 2>/dev/null
Fingerprints
HASSH
SSH Client
Recent Events (last 50)
| Timestamp | Port | Proto | Event | Location |
|---|---|---|---|---|
| 2026-03-20 20:53:10 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-20 20:53:09 | :22 | ssh | cowrie.log.closed | sea |
| 2026-03-20 20:53:07 | :22 | ssh | cowrie.command.input | sea |
| 2026-03-20 20:53:07 | :22 | ssh | cowrie.session.params | sea |
| 2026-03-20 20:53:06 | :22 | ssh | cowrie.login.success | sea |
| 2026-03-20 20:53:03 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-20 20:53:03 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-20 20:53:03 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-20 20:39:55 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-20 20:39:55 | :22 | ssh | cowrie.log.closed | sea |
| 2026-03-20 20:39:53 | :22 | ssh | cowrie.command.input | sea |
| 2026-03-20 20:39:53 | :22 | ssh | cowrie.session.params | sea |
| 2026-03-20 20:39:52 | :22 | ssh | cowrie.login.success | sea |
| 2026-03-20 20:39:51 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-20 20:39:50 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-20 20:39:50 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-20 20:26:39 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-20 20:26:38 | :22 | ssh | cowrie.log.closed | sea |
| 2026-03-20 20:26:36 | :22 | ssh | cowrie.command.input | sea |
| 2026-03-20 20:26:36 | :22 | ssh | cowrie.session.params | sea |
| 2026-03-20 20:26:35 | :22 | ssh | cowrie.login.success | sea |
| 2026-03-20 20:26:32 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-20 20:26:32 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-20 20:26:32 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-20 20:13:15 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-20 20:13:14 | :22 | ssh | cowrie.log.closed | sea |
| 2026-03-20 20:13:12 | :22 | ssh | cowrie.command.input | sea |
| 2026-03-20 20:13:12 | :22 | ssh | cowrie.session.params | sea |
| 2026-03-20 20:13:11 | :22 | ssh | cowrie.login.success | sea |
| 2026-03-20 20:13:09 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-20 20:13:09 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-20 20:13:09 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-20 19:59:59 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-20 19:59:59 | :22 | ssh | cowrie.log.closed | sea |
| 2026-03-20 19:59:57 | :22 | ssh | cowrie.command.input | sea |
| 2026-03-20 19:59:57 | :22 | ssh | cowrie.session.params | sea |
| 2026-03-20 19:59:56 | :22 | ssh | cowrie.login.success | sea |
| 2026-03-20 19:59:54 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-20 19:59:54 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-20 19:59:54 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-20 19:46:41 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-20 19:46:41 | :22 | ssh | cowrie.log.closed | sea |
| 2026-03-20 19:46:39 | :22 | ssh | cowrie.command.input | sea |
| 2026-03-20 19:46:39 | :22 | ssh | cowrie.session.params | sea |
| 2026-03-20 19:46:38 | :22 | ssh | cowrie.login.success | sea |
| 2026-03-20 19:46:36 | :22 | ssh | cowrie.client.kex | sea |
| 2026-03-20 19:46:36 | :22 | ssh | cowrie.client.version | sea |
| 2026-03-20 19:46:36 | :22 | ssh | cowrie.session.connect | sea |
| 2026-03-20 19:33:17 | :22 | ssh | cowrie.session.closed | sea |
| 2026-03-20 19:33:17 | :22 | ssh | cowrie.log.closed | sea |