← Back to feed
172.202.102.209
Location
🇺🇸 US / Des Moines
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
2532
Top 1% by volume
Agent Count
1
First / Last Seen
2026-04-11 03:45 — 2026-04-11 09:27
Attack Types
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
314 (100 with login)
Avg Depth Score
0.6
Commands Executed
104
Files Downloaded
0
Notable Commands
- ssh -V
- pwd
- ls -la /
- ps aux | head -10
- uname -a
- hostname
- whoami
- uname -m 2>/dev/null || echo unknown
- netstat -tulpn | head -10
- history | tail -5
- uptime
- mount | head -5
- env | head -10
- nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0
- grep -c ^processor /proc/cpuinfo 2 > /dev/null
Fingerprints
HASSH
SSH Client
Evidence Timeline
Reconnaissance
4774707bc014
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ssh -V
Reconnaissance
ec6154b75e08
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
43dba3d2b61d
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ls -la /
Reconnaissance
abdcad168dd3
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ls -la /
Reconnaissance
4a0e4e01ff0f
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ps aux | head -10
Reconnaissance
1766062a1ec4
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ssh -V
Reconnaissance
e201af499b9c
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ls -la /
Reconnaissance
59ed2784352b
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
a75012c2ff33
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
3a60c004ca81
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
eb3266cc2620
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ps aux | head -10
Reconnaissance
652423aa5274
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
09e3c1869c69
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ whoami
Reconnaissance
1715ff30443e
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
b4d2c97f8ea2
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -m 2>/dev/null || echo unknown
Reconnaissance
6d3c4b173a7d
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
7a374d70f172
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
67cea53c37e0
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
c77277198a41
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
33ad6e7d841e
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
b5c3e6f11567
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
860230de51fa
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ history | tail -5
Reconnaissance
3ec998ccd1d2
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uptime
Reconnaissance
a79790762fc2
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
7e4fd1b7ae60
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
a78ab0830f25
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
074fd55a4e1b
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
c845649198c0
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ssh -V
Reconnaissance
6cb90cc090a0
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
9ed03e776b0b
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ssh -V
Reconnaissance
e3faff99cf42
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ps aux | head -10
Reconnaissance
d367710ee18e
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ps aux | head -10
Reconnaissance
64188afb742a
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
572146d43645
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ mount | head -5
Reconnaissance
1d48d5f93900
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ whoami
Reconnaissance
fa0cb7163922
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ env | head -10
Reconnaissance
142a39f705e5
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ps aux | head -10
Reconnaissance
649aa5deda1b
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
96e101432e77
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ whoami
Reconnaissance
6c4e26c7779e
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
bb2ea901f2c6
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
bccc557cb271
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
08b85ae6d69a
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
c8835b188b96
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
024c68766634
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ssh -V
Reconnaissance
09a788430161
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
34eb059a170c
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
2744700814c5
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ls -la /
Reconnaissance
880d073383c5
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
8251e3778583
LOGIN
2
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>…$ grep -c ^processor /proc/cpuinfo 2 > /dev/null