IntrusionLabs / threat intelligence

← Back to feed

52.190.140.107

Threat Confidence

31%

Location

🇺🇸 US / San Jose

ASN

AS8075 · Microsoft Corporation

Cloud Provider

Microsoft Azure

Total Events

407

Top 5% by volume

Agent Count

1

First / Last Seen

2026-03-01 14:26 — 2026-03-01 19:35

Attack Types

ssh:bruteforce

External Corroboration

Not flagged by any external feeds

Campaigns

Not associated with any campaigns

Session Forensics

reconnaissance ×50 credential_harvester ×1

Sessions

51 (50 with login)

Avg Depth Score

0.6

Commands Executed

52

Files Downloaded

0

Notable Commands

whoami
hostname
uname -a
netstat -tulpn | head -10
ps aux | head -10
uname -m 2>/dev/null || echo unknown
env | head -10
pwd
uptime
ls -la /
mount | head -5
grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
xargs
ssh -V

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Recent Events (last 50)

Timestamp	Port	Proto	Event	Location
2026-03-01 19:35:38	:22	ssh	cowrie.session.closed	sin
2026-03-01 19:35:38	:22	ssh	cowrie.log.closed	sin
2026-03-01 19:35:38	:22	ssh	cowrie.command.input	sin
2026-03-01 19:35:38	:22	ssh	cowrie.session.params	sin
2026-03-01 19:35:38	:22	ssh	cowrie.login.success	sin
2026-03-01 19:35:37	:22	ssh	cowrie.client.kex	sin
2026-03-01 19:35:37	:22	ssh	cowrie.client.version	sin
2026-03-01 19:35:37	:22	ssh	cowrie.session.connect	sin
2026-03-01 19:28:59	:22	ssh	cowrie.session.closed	sin
2026-03-01 19:28:59	:22	ssh	cowrie.log.closed	sin
2026-03-01 19:28:59	:22	ssh	cowrie.command.input	sin
2026-03-01 19:28:59	:22	ssh	cowrie.session.params	sin
2026-03-01 19:28:59	:22	ssh	cowrie.login.success	sin
2026-03-01 19:28:58	:22	ssh	cowrie.client.kex	sin
2026-03-01 19:28:58	:22	ssh	cowrie.client.version	sin
2026-03-01 19:28:58	:22	ssh	cowrie.session.connect	sin
2026-03-01 19:22:22	:22	ssh	cowrie.session.closed	sin
2026-03-01 19:22:22	:22	ssh	cowrie.log.closed	sin
2026-03-01 19:22:22	:22	ssh	cowrie.command.input	sin
2026-03-01 19:22:22	:22	ssh	cowrie.session.params	sin
2026-03-01 19:22:22	:22	ssh	cowrie.login.success	sin
2026-03-01 19:22:21	:22	ssh	cowrie.client.kex	sin
2026-03-01 19:22:21	:22	ssh	cowrie.client.version	sin
2026-03-01 19:22:21	:22	ssh	cowrie.session.connect	sin
2026-03-01 19:15:53	:22	ssh	cowrie.session.closed	sin
2026-03-01 19:15:53	:22	ssh	cowrie.log.closed	sin
2026-03-01 19:15:52	:22	ssh	cowrie.command.input	sin
2026-03-01 19:15:52	:22	ssh	cowrie.session.params	sin
2026-03-01 19:15:52	:22	ssh	cowrie.login.success	sin
2026-03-01 19:15:52	:22	ssh	cowrie.client.kex	sin
2026-03-01 19:15:51	:22	ssh	cowrie.client.version	sin
2026-03-01 19:15:51	:22	ssh	cowrie.session.connect	sin
2026-03-01 19:09:21	:22	ssh	cowrie.session.closed	sin
2026-03-01 19:09:21	:22	ssh	cowrie.log.closed	sin
2026-03-01 19:09:21	:22	ssh	cowrie.command.input	sin
2026-03-01 19:09:21	:22	ssh	cowrie.session.params	sin
2026-03-01 19:09:20	:22	ssh	cowrie.login.success	sin
2026-03-01 19:09:20	:22	ssh	cowrie.client.kex	sin
2026-03-01 19:09:20	:22	ssh	cowrie.client.version	sin
2026-03-01 19:09:20	:22	ssh	cowrie.session.connect	sin
2026-03-01 19:02:50	:22	ssh	cowrie.session.closed	sin
2026-03-01 19:02:50	:22	ssh	cowrie.log.closed	sin
2026-03-01 19:02:49	:22	ssh	cowrie.command.input	sin
2026-03-01 19:02:49	:22	ssh	cowrie.session.params	sin
2026-03-01 19:02:49	:22	ssh	cowrie.login.success	sin
2026-03-01 19:02:49	:22	ssh	cowrie.client.kex	sin
2026-03-01 19:02:48	:22	ssh	cowrie.client.version	sin
2026-03-01 19:02:48	:22	ssh	cowrie.session.connect	sin
2026-03-01 18:56:23	:22	ssh	cowrie.session.closed	sin
2026-03-01 18:56:23	:22	ssh	cowrie.log.closed	sin