IntrusionLabs / threat intelligence

← Back to feed

172.183.131.192

Threat Confidence

32%

Location

🇺🇸 US / Chicago

ASN

AS8075 · Microsoft Corporation

Cloud Provider

Microsoft Azure

Total Events

534

Top 5% by volume

Agent Count

1

First / Last Seen

2026-03-08 10:32 — 2026-03-08 16:08

Attack Types

ssh:bruteforce

External Corroboration

Not flagged by any external feeds

Campaigns

Not associated with any campaigns

Session Forensics

scanner ×2 reconnaissance ×64

Sessions

66 (64 with login)

Avg Depth Score

0.59

Commands Executed

70

Files Downloaded

0

Notable Commands

uptime
uname -a
ls -la /
hostname
whoami
pwd
env | head -10
ps aux | head -10
netstat -tulpn | head -10
ssh -V
grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
xargs
nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0
grep -c ^processor /proc/cpuinfo 2 > /dev/null
mount | head -5
uname -m 2>/dev/null || echo unknown
history | tail -5

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Recent Events (last 50)

Timestamp	Port	Proto	Event	Location
2026-03-08 16:08:23	:22	ssh	cowrie.session.closed	sin
2026-03-08 16:08:23	:22	ssh	cowrie.log.closed	sin
2026-03-08 16:08:23	:22	ssh	cowrie.command.input	sin
2026-03-08 16:08:23	:22	ssh	cowrie.session.params	sin
2026-03-08 16:08:22	:22	ssh	cowrie.login.success	sin
2026-03-08 16:08:22	:22	ssh	cowrie.client.kex	sin
2026-03-08 16:08:22	:22	ssh	cowrie.client.version	sin
2026-03-08 16:08:22	:22	ssh	cowrie.session.connect	sin
2026-03-08 16:02:51	:22	ssh	cowrie.session.closed	sin
2026-03-08 16:02:51	:22	ssh	cowrie.log.closed	sin
2026-03-08 16:02:51	:22	ssh	cowrie.command.input	sin
2026-03-08 16:02:51	:22	ssh	cowrie.session.params	sin
2026-03-08 16:02:50	:22	ssh	cowrie.login.success	sin
2026-03-08 16:02:50	:22	ssh	cowrie.client.kex	sin
2026-03-08 16:02:50	:22	ssh	cowrie.client.version	sin
2026-03-08 16:02:50	:22	ssh	cowrie.session.connect	sin
2026-03-08 15:57:24	:22	ssh	cowrie.session.closed	sin
2026-03-08 15:57:24	:22	ssh	cowrie.log.closed	sin
2026-03-08 15:57:24	:22	ssh	cowrie.command.input	sin
2026-03-08 15:57:24	:22	ssh	cowrie.session.params	sin
2026-03-08 15:57:23	:22	ssh	cowrie.login.success	sin
2026-03-08 15:57:23	:22	ssh	cowrie.client.kex	sin
2026-03-08 15:57:23	:22	ssh	cowrie.client.version	sin
2026-03-08 15:57:23	:22	ssh	cowrie.session.connect	sin
2026-03-08 15:52:03	:22	ssh	cowrie.session.closed	sin
2026-03-08 15:52:03	:22	ssh	cowrie.log.closed	sin
2026-03-08 15:52:03	:22	ssh	cowrie.command.input	sin
2026-03-08 15:52:03	:22	ssh	cowrie.session.params	sin
2026-03-08 15:52:03	:22	ssh	cowrie.login.success	sin
2026-03-08 15:52:02	:22	ssh	cowrie.client.kex	sin
2026-03-08 15:52:02	:22	ssh	cowrie.client.version	sin
2026-03-08 15:52:02	:22	ssh	cowrie.session.connect	sin
2026-03-08 15:46:36	:22	ssh	cowrie.session.closed	sin
2026-03-08 15:46:36	:22	ssh	cowrie.log.closed	sin
2026-03-08 15:46:36	:22	ssh	cowrie.command.input	sin
2026-03-08 15:46:36	:22	ssh	cowrie.session.params	sin
2026-03-08 15:46:35	:22	ssh	cowrie.login.success	sin
2026-03-08 15:46:35	:22	ssh	cowrie.client.kex	sin
2026-03-08 15:46:34	:22	ssh	cowrie.client.version	sin
2026-03-08 15:46:34	:22	ssh	cowrie.session.connect	sin
2026-03-08 15:41:09	:22	ssh	cowrie.session.closed	sin
2026-03-08 15:41:09	:22	ssh	cowrie.log.closed	sin
2026-03-08 15:41:09	:22	ssh	cowrie.command.input	sin
2026-03-08 15:41:09	:22	ssh	cowrie.session.params	sin
2026-03-08 15:41:08	:22	ssh	cowrie.login.success	sin
2026-03-08 15:41:08	:22	ssh	cowrie.client.kex	sin
2026-03-08 15:41:07	:22	ssh	cowrie.client.version	sin
2026-03-08 15:41:07	:22	ssh	cowrie.session.connect	sin
2026-03-08 15:35:46	:22	ssh	cowrie.session.closed	sin
2026-03-08 15:35:46	:22	ssh	cowrie.log.closed	sin