IntrusionLabs IntrusionLabs
← Back to feed

20.168.115.114

Threat Confidence
40%
Location
🇺🇸 US / Phoenix
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
251
Top 10% by volume
Agent Count
1
First / Last Seen
2026-04-09 13:50 — 2026-04-09 18:28
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1082 T1083
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
reconnaissance ×31
Sessions
31 (31 with login)
Avg Depth Score
0.6
Commands Executed
34
Files Downloaded
0
Notable Commands
  • whoami
  • uname -a
  • hostname
  • ls -la /
  • uname -m 2>/dev/null || echo unknown
  • ssh -V
  • uptime
  • grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
  • xargs
  • ps aux | head -10
  • netstat -tulpn | head -10
  • pwd
Fingerprints
HASSH
16443846184eafde36765c9bab2f4397
SSH Client
SSH-2.0-Go
Evidence Timeline
Reconnaissance f3f65d530767 w4m_seattle_01 · 2026-04-09 18:28
1 1 60%
Loading events...
Reconnaissance 878f24d2e823 w4m_seattle_01 · 2026-04-09 18:10
1 1 60%
Loading events...
Reconnaissance 2ef656e68cb4 w4m_seattle_01 · 2026-04-09 18:07
1 1 60%
Loading events...
Reconnaissance 7152638aa8f8 w4m_seattle_01 · 2026-04-09 18:03
1 1 60%
Loading events...
Reconnaissance f34f9bd261b9 w4m_seattle_01 · 2026-04-09 17:53
1 1 60%
Loading events...
Reconnaissance 578636c8c291 w4m_seattle_01 · 2026-04-09 17:42
1 1 60%
Loading events...
Reconnaissance eff03de63665 w4m_seattle_01 · 2026-04-09 17:28
1 1 60%
Loading events...
Reconnaissance 462ec1a2d4c2 w4m_seattle_01 · 2026-04-09 17:24
1 1 60%
Loading events...
Reconnaissance c3c20ba021b0 w4m_seattle_01 · 2026-04-09 17:21
1 1 60%
Loading events...
Reconnaissance d790ef853aa3 w4m_seattle_01 · 2026-04-09 17:17
1 1 60%
Loading events...
Reconnaissance 4156c45d5c8c w4m_seattle_01 · 2026-04-09 17:10
1 1 60%
Loading events...
Reconnaissance aa3b97ce42f8 w4m_seattle_01 · 2026-04-09 17:00
1 1 60%
Loading events...
Reconnaissance bb8b89182e56 w4m_seattle_01 · 2026-04-09 16:56
1 1 60%
Loading events...
Reconnaissance 92d1326ea536 w4m_seattle_01 · 2026-04-09 16:52
1 1 60%
Loading events...
Reconnaissance 756d845d5a01 w4m_seattle_01 · 2026-04-09 16:42
1 1 60%
Loading events...
Reconnaissance 9eb1c4102f5a w4m_seattle_01 · 2026-04-09 16:28
2 1 60%
Loading events...
Reconnaissance 54880d1bde1c w4m_seattle_01 · 2026-04-09 15:52
1 1 60%
Loading events...
Reconnaissance 7eff4d57c237 w4m_seattle_01 · 2026-04-09 15:42
1 1 60%
Loading events...
Reconnaissance 8a7dcbe6db49 w4m_seattle_01 · 2026-04-09 15:35
1 1 60%
Loading events...
Reconnaissance 18951b1c2b6f w4m_seattle_01 · 2026-04-09 15:31
1 1 60%
Loading events...
Reconnaissance 979fff734659 w4m_seattle_01 · 2026-04-09 15:10
1 1 60%
Loading events...
Reconnaissance bddd9188eee5 w4m_seattle_01 · 2026-04-09 15:03
1 1 60%
Loading events...
Reconnaissance a5f84addadb8 w4m_seattle_01 · 2026-04-09 14:56
1 1 60%
Loading events...
Reconnaissance b0929cb95150 w4m_seattle_01 · 2026-04-09 14:46
2 1 60%
Loading events...
Reconnaissance e26062c9e500 w4m_seattle_01 · 2026-04-09 14:35
1 1 60%
Loading events...
Reconnaissance c1e27d9190d0 w4m_seattle_01 · 2026-04-09 14:21
1 1 60%
Loading events...
Reconnaissance 6ebbc97b9320 w4m_seattle_01 · 2026-04-09 14:18
1 1 60%
Loading events...
Reconnaissance 01cb8b6a726d w4m_seattle_01 · 2026-04-09 14:14
1 1 60%
Loading events...
Reconnaissance 1876f0ee522b w4m_seattle_01 · 2026-04-09 14:11
2 1 60%
Loading events...
Reconnaissance 0f547b527eb8 w4m_seattle_01 · 2026-04-09 14:07
1 1 60%
Loading events...
Reconnaissance 1f643503ae71 w4m_seattle_01 · 2026-04-09 13:50
1 1 60%
Loading events...