52.159.227.0
Location
🇺🇸 US / San Jose
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
40
Average by volume
Agent Count
1
First / Last Seen
2026-03-02 11:47 — 2026-03-02 12:11
Attack Types
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
5 (5 with login)
Avg Depth Score
0.6
Commands Executed
5
Files Downloaded
0
Notable Commands
- whoami
- ls -la /
- netstat -tulpn | head -10
- env | head -10
Fingerprints
HASSH
SSH Client
Recent Events (last 50)
| Timestamp | Port | Proto | Event | Location |
|---|---|---|---|---|
| 2026-03-02 12:11:40 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-02 12:11:40 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-02 12:11:40 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-02 12:11:40 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-02 12:11:40 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-02 12:11:39 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-02 12:11:39 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-02 12:11:39 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-02 12:05:42 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-02 12:05:42 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-02 12:05:41 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-02 12:05:41 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-02 12:05:41 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-02 12:05:41 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-02 12:05:40 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-02 12:05:40 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-02 11:59:37 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-02 11:59:37 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-02 11:59:37 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-02 11:59:37 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-02 11:59:37 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-02 11:59:36 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-02 11:59:36 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-02 11:59:36 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-02 11:53:38 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-02 11:53:38 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-02 11:53:38 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-02 11:53:38 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-02 11:53:38 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-02 11:53:37 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-02 11:53:37 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-02 11:53:37 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-02 11:47:42 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-02 11:47:42 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-02 11:47:41 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-02 11:47:41 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-02 11:47:41 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-02 11:47:40 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-02 11:47:40 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-02 11:47:40 | :22 | ssh | cowrie.session.connect | sin |