20.61.126.213
Location
🇳🇱 NL / Amsterdam
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
60
Average by volume
Agent Count
1
First / Last Seen
2026-02-27 13:27 — 2026-02-27 13:27
Attack Types
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
7 (5 with login)
Avg Depth Score
0.81
Commands Executed
10
Files Downloaded
5
Notable Commands
- cd /tmp ; echo uname -a > monaco ; chmod 777 monaco ; ./monaco
- ./monaco
Fingerprints
HASSH
SSH Client
Recent Events (last 50)
| Timestamp | Port | Proto | Event | Location |
|---|---|---|---|---|
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.session.file_download | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.session.file_download | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.command.failed | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-27 13:27:30 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.command.failed | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.login.failed | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.login.failed | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-27 13:27:29 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.session.file_download | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.session.closed | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.log.closed | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.session.file_download | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.command.failed | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.command.failed | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.command.input | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.session.params | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.login.success | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-27 13:27:27 | :22 | ssh | cowrie.client.kex | sea |
| 2026-02-27 13:27:26 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-27 13:27:26 | :22 | ssh | cowrie.session.connect | sea |
| 2026-02-27 13:27:26 | :22 | ssh | cowrie.client.version | sea |
| 2026-02-27 13:27:26 | :22 | ssh | cowrie.session.connect | sea |