IntrusionLabs / threat intelligence

← Back to feed

5.223.61.89

            static.89.61.223.5.clients.your-server.de
        

Threat Confidence

39%

Location

🇸🇬 SG / Singapore

ASN

AS215859 · Hetzner Online GmbH

Cloud Provider

—

Total Events

469

Top 5% by volume

Agent Count

1

First / Last Seen

2026-02-24 18:03 — 2026-02-26 12:52

Attack Types

ssh:bruteforce

External Corroboration

Not flagged by any external feeds

Campaigns

Not associated with any campaigns

Session Forensics

credential_harvester ×1 interactive_operator ×16

Sessions

17 (16 with login)

Avg Depth Score

0.87

Commands Executed

128

Files Downloaded

0

Notable Commands

ls /var/log 2>/dev/null | wc -l
ls /opt 2>/dev/null
uname -a
pwd
ls -la /
mount | head -5
cat /etc/os-release 2>/dev/null | head -6
grep 'model name' /proc/cpuinfo 2>/dev/null | head -1
whoami
ps aux | head -15
history | tail -5
ssh -V
cat /etc/issue 2>/dev/null
last -n 3 2>/dev/null | head -3
ls /dev | wc -l
crontab -l 2>/dev/null | head -5
env | head -10
df -h / 2>/dev/null | tail -1
grep MemTotal /proc/meminfo 2>/dev/null
netstat -tulpn | head -10

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Recent Events (last 50)

Timestamp	Port	Proto	Event	Location
2026-02-26 12:52:12	:22	ssh	cowrie.session.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.log.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.log.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.log.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.log.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.log.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.log.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.log.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.log.closed	sin
2026-02-26 12:52:12	:22	ssh	cowrie.command.input	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.params	sin
2026-02-26 12:52:12	:22	ssh	cowrie.command.input	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.params	sin
2026-02-26 12:52:12	:22	ssh	cowrie.command.input	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.params	sin
2026-02-26 12:52:12	:22	ssh	cowrie.command.input	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.params	sin
2026-02-26 12:52:12	:22	ssh	cowrie.command.input	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.params	sin
2026-02-26 12:52:12	:22	ssh	cowrie.command.input	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.params	sin
2026-02-26 12:52:12	:22	ssh	cowrie.command.input	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.params	sin
2026-02-26 12:52:12	:22	ssh	cowrie.command.input	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.params	sin
2026-02-26 12:52:12	:22	ssh	cowrie.login.success	sin
2026-02-26 12:52:12	:22	ssh	cowrie.client.kex	sin
2026-02-26 12:52:12	:22	ssh	cowrie.client.version	sin
2026-02-26 12:52:12	:22	ssh	cowrie.session.connect	sin
2026-02-26 08:33:42	:22	ssh	cowrie.session.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.log.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.log.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.log.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.log.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.log.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.log.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.log.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.log.closed	sin
2026-02-26 08:33:42	:22	ssh	cowrie.command.input	sin
2026-02-26 08:33:42	:22	ssh	cowrie.session.params	sin
2026-02-26 08:33:42	:22	ssh	cowrie.command.input	sin
2026-02-26 08:33:42	:22	ssh	cowrie.session.params	sin
2026-02-26 08:33:42	:22	ssh	cowrie.command.input	sin
2026-02-26 08:33:42	:22	ssh	cowrie.session.params	sin
2026-02-26 08:33:42	:22	ssh	cowrie.command.input	sin
2026-02-26 08:33:42	:22	ssh	cowrie.session.params	sin
2026-02-26 08:33:42	:22	ssh	cowrie.command.input	sin
2026-02-26 08:33:42	:22	ssh	cowrie.session.params	sin
2026-02-26 08:33:42	:22	ssh	cowrie.command.input	sin
2026-02-26 08:33:42	:22	ssh	cowrie.session.params	sin