← Back to feed

130.12.180.16

TAGGED SUSPICIOUS how we decide →
Threat Confidence
35%
Location
🇳🇱 NL / Amsterdam
ASN
AS202412 · Omegatech LTD
Cloud Provider
Total Events
31
Average by volume
Agent Count
1
First / Last Seen
2026-04-14 13:51 — 2026-04-19 23:27
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
Execution
Credential Access
Discovery
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
reconnaissance ×1 interactive_operator ×1
Sessions
2 (2 with login)
Avg Depth Score
0.75
Commands Executed
7
Files Downloaded
0
Notable Commands
  • uname -a
  • cat /proc/version 2>/dev/null; echo ---; cat /proc/1/cmdline 2>/dev/null; ls /opt/cowrie /home/cowrie /home/kippo 2>/dev/null
  • busybox ECHOTEST 2>/dev/null || /bin/busybox ECHOTEST 2>/dev/null || /usr/bin/busybox ECHOTEST 2>/dev/null
  • /usr/bin/busybox ECHOTEST
  • cat /proc/meminfo 2>/dev/null | head -5; echo ===CORES===; nproc 2>/dev/null || grep -c '^processor' /proc/cpuinfo 2>/dev/null; echo ===MODEL===; grep -m1 'model name' /proc/cpuinfo 2>/dev/null || grep -m1 'Hardware' /proc/cpuinfo 2>/dev/null || grep -m1 'cpu model' /proc/cpuinfo 2>/dev/null; echo ===OS===; grep PRETTY_NAME /etc/os-release 2>/dev/null || cat /etc/issue 2>/dev/null | head -1; echo ===UP===; uptime 2>/dev/null || cat /proc/uptime 2>/dev/null
Fingerprints
SSH-2.0-OpenSSH_9.7p1
Evidence Timeline
Interactive Operator 190487d8daa2 w4m_seattle_01 · 2026-04-19 23:27
5 2 90%
Loading events...
Reconnaissance c20654f25dae w4m_seattle_01 · 2026-04-14 13:51
2 2 60%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}