IntrusionLabs / threat intelligence

← Back to feed

4.246.135.39

Threat Confidence

32%

Location

🇺🇸 US / Washington

ASN

AS8075 · Microsoft Corporation

Cloud Provider

Microsoft Azure

Total Events

440

Top 5% by volume

Agent Count

1

First / Last Seen

2026-03-21 02:16 — 2026-03-21 07:36

Attack Types

ssh:bruteforce

External Corroboration

Not flagged by any external feeds

Campaigns

Not associated with any campaigns

Session Forensics

reconnaissance ×54 credential_harvester ×1

Sessions

55 (54 with login)

Avg Depth Score

0.6

Commands Executed

57

Files Downloaded

0

Notable Commands

ssh -V
ps aux | head -10
uptime
hostname
ls -la /
mount | head -5
pwd
uname -a
netstat -tulpn | head -10
whoami
grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
xargs
uname -m 2>/dev/null || echo unknown
nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0
grep -c ^processor /proc/cpuinfo 2 > /dev/null

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Recent Events (last 50)

Timestamp	Port	Proto	Event	Location
2026-03-21 07:36:06	:22	ssh	cowrie.session.closed	sea
2026-03-21 07:36:06	:22	ssh	cowrie.log.closed	sea
2026-03-21 07:36:06	:22	ssh	cowrie.command.input	sea
2026-03-21 07:36:06	:22	ssh	cowrie.session.params	sea
2026-03-21 07:36:06	:22	ssh	cowrie.login.success	sea
2026-03-21 07:36:06	:22	ssh	cowrie.client.kex	sea
2026-03-21 07:36:05	:22	ssh	cowrie.client.version	sea
2026-03-21 07:36:05	:22	ssh	cowrie.session.connect	sea
2026-03-21 07:30:48	:22	ssh	cowrie.session.closed	sea
2026-03-21 07:30:48	:22	ssh	cowrie.log.closed	sea
2026-03-21 07:30:48	:22	ssh	cowrie.command.input	sea
2026-03-21 07:30:48	:22	ssh	cowrie.session.params	sea
2026-03-21 07:30:48	:22	ssh	cowrie.login.success	sea
2026-03-21 07:30:48	:22	ssh	cowrie.client.kex	sea
2026-03-21 07:30:48	:22	ssh	cowrie.client.version	sea
2026-03-21 07:30:48	:22	ssh	cowrie.session.connect	sea
2026-03-21 07:25:25	:22	ssh	cowrie.session.closed	sea
2026-03-21 07:25:25	:22	ssh	cowrie.log.closed	sea
2026-03-21 07:25:25	:22	ssh	cowrie.command.input	sea
2026-03-21 07:25:25	:22	ssh	cowrie.session.params	sea
2026-03-21 07:25:24	:22	ssh	cowrie.login.success	sea
2026-03-21 07:25:24	:22	ssh	cowrie.client.kex	sea
2026-03-21 07:25:24	:22	ssh	cowrie.client.version	sea
2026-03-21 07:25:24	:22	ssh	cowrie.session.connect	sea
2026-03-21 07:20:02	:22	ssh	cowrie.session.closed	sea
2026-03-21 07:20:02	:22	ssh	cowrie.log.closed	sea
2026-03-21 07:20:02	:22	ssh	cowrie.command.input	sea
2026-03-21 07:20:02	:22	ssh	cowrie.session.params	sea
2026-03-21 07:20:02	:22	ssh	cowrie.login.success	sea
2026-03-21 07:20:02	:22	ssh	cowrie.client.kex	sea
2026-03-21 07:20:02	:22	ssh	cowrie.client.version	sea
2026-03-21 07:20:02	:22	ssh	cowrie.session.connect	sea
2026-03-21 07:14:42	:22	ssh	cowrie.session.closed	sea
2026-03-21 07:14:42	:22	ssh	cowrie.log.closed	sea
2026-03-21 07:14:41	:22	ssh	cowrie.command.input	sea
2026-03-21 07:14:41	:22	ssh	cowrie.session.params	sea
2026-03-21 07:14:41	:22	ssh	cowrie.login.success	sea
2026-03-21 07:14:41	:22	ssh	cowrie.client.kex	sea
2026-03-21 07:14:41	:22	ssh	cowrie.client.version	sea
2026-03-21 07:14:41	:22	ssh	cowrie.session.connect	sea
2026-03-21 07:04:02	:22	ssh	cowrie.session.closed	sea
2026-03-21 07:04:02	:22	ssh	cowrie.log.closed	sea
2026-03-21 07:04:02	:22	ssh	cowrie.command.input	sea
2026-03-21 07:04:02	:22	ssh	cowrie.session.params	sea
2026-03-21 07:04:02	:22	ssh	cowrie.login.success	sea
2026-03-21 07:04:02	:22	ssh	cowrie.client.kex	sea
2026-03-21 07:04:02	:22	ssh	cowrie.client.version	sea
2026-03-21 07:04:02	:22	ssh	cowrie.session.connect	sea
2026-03-21 06:58:40	:22	ssh	cowrie.session.closed	sea
2026-03-21 06:58:40	:22	ssh	cowrie.log.closed	sea