64.236.142.232
Location
🇺🇸 US / Chicago
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
86
Above average by volume
Agent Count
1
First / Last Seen
2026-03-06 15:09 — 2026-03-06 18:10
Attack Types
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
11 (10 with login)
Avg Depth Score
0.58
Commands Executed
11
Files Downloaded
0
Notable Commands
- hostname
- nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0
- grep -c ^processor /proc/cpuinfo 2 > /dev/null
- ps aux | head -10
- pwd
- uptime
- ls -la /
- whoami
- env | head -10
Fingerprints
HASSH
SSH Client
Recent Events (last 50)
| Timestamp | Port | Proto | Event | Location |
|---|---|---|---|---|
| 2026-03-06 18:10:05 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-06 18:10:05 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-06 18:10:05 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-06 18:10:05 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-06 18:10:04 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-06 18:10:04 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-06 18:10:03 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-06 18:10:03 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-06 17:51:14 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-06 17:51:14 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-06 17:51:14 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-06 17:51:14 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-06 17:51:14 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-06 17:51:13 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-06 17:51:13 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-06 17:51:12 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-06 17:51:12 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-06 17:32:25 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-06 17:32:25 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-06 17:32:25 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-06 17:32:25 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-06 17:32:24 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-06 17:32:24 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-06 17:32:23 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-06 17:32:23 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-06 17:14:01 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-06 17:14:01 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-06 17:14:01 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-06 17:14:01 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-06 17:14:01 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-06 17:14:00 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-06 17:14:00 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-06 17:14:00 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-06 16:55:43 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-06 16:55:43 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-06 16:55:43 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-06 16:55:43 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-06 16:55:43 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-06 16:55:42 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-06 16:55:42 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-06 16:55:42 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-06 16:37:37 | :22 | ssh | cowrie.session.closed | sin |
| 2026-03-06 16:37:37 | :22 | ssh | cowrie.log.closed | sin |
| 2026-03-06 16:37:37 | :22 | ssh | cowrie.command.input | sin |
| 2026-03-06 16:37:37 | :22 | ssh | cowrie.session.params | sin |
| 2026-03-06 16:37:37 | :22 | ssh | cowrie.login.success | sin |
| 2026-03-06 16:37:36 | :22 | ssh | cowrie.client.kex | sin |
| 2026-03-06 16:37:36 | :22 | ssh | cowrie.client.version | sin |
| 2026-03-06 16:37:36 | :22 | ssh | cowrie.session.connect | sin |
| 2026-03-06 16:19:42 | :22 | ssh | cowrie.session.closed | sin |