IntrusionLabs / threat intelligence

← Back to feed

68.220.59.49

Threat Confidence

49%

Location

🇺🇸 US / San Jose

ASN

AS8075 · Microsoft Corporation

Cloud Provider

Microsoft Azure

Total Events

531

Top 5% by volume

Agent Count

1

First / Last Seen

2026-04-05 05:54 — 2026-04-05 11:01

Attack Types

ssh:bruteforce

External Corroboration

Blocklist.de

Reported 2026-04-05 14:26

blocklist_de:reported

Campaigns

Not associated with any campaigns

Session Forensics

reconnaissance ×64 credential_harvester ×1 opportunistic_bruter ×1

Sessions

66 (65 with login)

Avg Depth Score

0.59

Commands Executed

70

Files Downloaded

0

Notable Commands

uname -m 2>/dev/null || echo unknown
ls -la /
nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0
grep -c ^processor /proc/cpuinfo 2 > /dev/null
whoami
hostname
uname -a
pwd
env | head -10
grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
xargs
ssh -V
history | tail -5
ps aux | head -10
uptime
netstat -tulpn | head -10

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Recent Events (last 50)

Timestamp	Port	Proto	Event	Location
2026-04-05 11:01:58	:22	ssh	cowrie.session.closed	sin
2026-04-05 11:01:58	:22	ssh	cowrie.log.closed	sin
2026-04-05 11:01:58	:22	ssh	cowrie.command.input	sin
2026-04-05 11:01:58	:22	ssh	cowrie.session.params	sin
2026-04-05 11:01:58	:22	ssh	cowrie.login.success	sin
2026-04-05 11:01:57	:22	ssh	cowrie.client.kex	sin
2026-04-05 11:01:57	:22	ssh	cowrie.client.version	sin
2026-04-05 11:01:57	:22	ssh	cowrie.session.connect	sin
2026-04-05 10:55:23	:22	ssh	cowrie.session.closed	sin
2026-04-05 10:55:23	:22	ssh	cowrie.log.closed	sin
2026-04-05 10:55:23	:22	ssh	cowrie.command.input	sin
2026-04-05 10:55:23	:22	ssh	cowrie.session.params	sin
2026-04-05 10:55:23	:22	ssh	cowrie.login.success	sin
2026-04-05 10:55:22	:22	ssh	cowrie.client.kex	sin
2026-04-05 10:55:22	:22	ssh	cowrie.client.version	sin
2026-04-05 10:55:22	:22	ssh	cowrie.session.connect	sin
2026-04-05 10:48:52	:22	ssh	cowrie.session.closed	sin
2026-04-05 10:48:52	:22	ssh	cowrie.log.closed	sin
2026-04-05 10:48:52	:22	ssh	cowrie.command.input	sin
2026-04-05 10:48:52	:22	ssh	cowrie.command.input	sin
2026-04-05 10:48:52	:22	ssh	cowrie.session.params	sin
2026-04-05 10:48:51	:22	ssh	cowrie.login.success	sin
2026-04-05 10:48:51	:22	ssh	cowrie.client.kex	sin
2026-04-05 10:48:51	:22	ssh	cowrie.client.version	sin
2026-04-05 10:48:51	:22	ssh	cowrie.session.connect	sin
2026-04-05 10:42:26	:22	ssh	cowrie.session.closed	sin
2026-04-05 10:42:26	:22	ssh	cowrie.log.closed	sin
2026-04-05 10:42:26	:22	ssh	cowrie.command.input	sin
2026-04-05 10:42:26	:22	ssh	cowrie.session.params	sin
2026-04-05 10:42:26	:22	ssh	cowrie.login.success	sin
2026-04-05 10:42:25	:22	ssh	cowrie.client.kex	sin
2026-04-05 10:42:25	:22	ssh	cowrie.client.version	sin
2026-04-05 10:42:25	:22	ssh	cowrie.session.connect	sin
2026-04-05 10:36:07	:22	ssh	cowrie.session.closed	sin
2026-04-05 10:36:07	:22	ssh	cowrie.log.closed	sin
2026-04-05 10:36:07	:22	ssh	cowrie.command.input	sin
2026-04-05 10:36:07	:22	ssh	cowrie.session.params	sin
2026-04-05 10:36:06	:22	ssh	cowrie.login.success	sin
2026-04-05 10:36:06	:22	ssh	cowrie.client.kex	sin
2026-04-05 10:36:05	:22	ssh	cowrie.client.version	sin
2026-04-05 10:36:05	:22	ssh	cowrie.session.connect	sin
2026-04-05 10:29:46	:22	ssh	cowrie.session.closed	sin
2026-04-05 10:29:46	:22	ssh	cowrie.log.closed	sin
2026-04-05 10:29:46	:22	ssh	cowrie.command.input	sin
2026-04-05 10:29:46	:22	ssh	cowrie.session.params	sin
2026-04-05 10:29:45	:22	ssh	cowrie.login.success	sin
2026-04-05 10:29:45	:22	ssh	cowrie.client.kex	sin
2026-04-05 10:29:45	:22	ssh	cowrie.client.version	sin
2026-04-05 10:29:45	:22	ssh	cowrie.session.connect	sin
2026-04-05 10:23:29	:22	ssh	cowrie.session.closed	sin