← Back to feed
Location
🇯🇵 JP / Tokyo
ASN
AS396982 · Google LLC
Cloud Provider
—
Total Events
83
Above average by volume
Agent Count
1
First / Last Seen
2026-06-17 04:08 — 2026-06-17 15:54
Attack Types
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Execution
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
8 (6 with login)
Avg Depth Score
0.68
Commands Executed
37
Files Downloaded
0
Notable Commands
- command -v ls >/dev/null 2>&1 && echo ok || echo missing:ls; echo SEP; command -v ps >/dev/null 2>&1 && echo ok || echo missing:ps; echo SEP; command -v cat >/dev/null 2>&1 && echo ok || echo missing:cat; echo SEP; command -v netstat >/dev/null 2>&1 && echo ok || echo missing:netstat; echo SEP; uname -m 2>/dev/null || echo unknown; echo SEP; cat /etc/os-release 2>/dev/null | grep '^NAME=' | cut -d= -f2 | tr -d '"' || echo Linux; echo SEP; hostname 2>/dev/null || echo unknown; echo SEP; curl -s --connect-timeout 2 ipinfo.io 2>/dev/null | grep -E '"country"|"org"' | cut -d: -f2 | tr -d '" ,' | tr '; ' '|' | sed 's/|$//' || echo N/A; echo SEP; nproc 2>/dev/null || echo 1; echo SEP; free -h 2>/dev/null | awk '/^Mem:/ {print $2}' || echo N/A; echo SEP; df -h / 2>/dev/null | awk 'NR==2{print $2}' || echo N/A; echo END
- command -v ls
- command -v ps
- command -v cat
- command -v netstat
- tr -d "
- sed s/|$//
- echo 'empty_test'
- which ls 2>/dev/null || echo 'missing:ls'; echo '---SEP---'; which ps 2>/dev/null || echo 'missing:ps'; echo '---SEP---'; which cat 2>/dev/null || echo 'missing:cat'; echo '---SEP---'; which netstat 2>/dev/null || echo 'missing:netstat'; echo '---SEP---'; uname -m 2>/dev/null | tr -d '\n\r' || echo 'unknown'; echo '---SEP---'; cat /etc/os-release 2>/dev/null | grep '^NAME=' | cut -d'=' -f2 | tr -d '"' | tr -d '\n\r' || echo 'Linux'; echo '---SEP---'; hostname 2>/dev/null | tr -d '\n\r' || echo 'unknown'; echo '---SEP---'; curl -s --connect-timeout 2 ipinfo.io 2>/dev/null | grep -E '"country"|"org"' | cut -d':' -f2 | tr -d '"' | tr -d ',' | tr -d ' ' | tr '\n' '|' | sed 's/|$//' || echo 'N/A'; echo '---SEP---'; nproc 2>/dev/null | tr -d '\n\r' || echo '1'; echo '---SEP---'; free -h 2>/dev/null | awk '/^Mem:/ {print $2}' | tr -d '\n\r' || echo 'N/A'; echo '---SEP---'; df -h / 2>/dev/null | awk 'NR==2{print $2}' | tr -d '\n\r' || echo 'N/A'; echo '---END---'
- tr -d \n\r
Fingerprints
HASSH
SSH Client
Evidence Timeline
Interactive Operator
1819cf2ff861
LOGIN
7
1
90%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ command -v ls >/dev/null 2>&1 && echo ok || echo missing:ls…$ command -v ls$ command -v ps$ command -v cat$ command -v netstat
Reconnaissance
9d1d90e20400
LOGIN
1
1
60%
Loading events...
Interactive Operator
6b5adc8f2b34
LOGIN
7
1
90%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ command -v ls >/dev/null 2>&1 && echo ok || echo missing:ls…$ command -v ls$ command -v ps$ command -v cat$ command -v netstat
Interactive Operator
46f7b8a20501
LOGIN
7
1
90%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ command -v ls >/dev/null 2>&1 && echo ok || echo missing:ls…$ command -v ls$ command -v ps$ command -v cat$ command -v netstat
Interactive Operator
2fb02077dc48
LOGIN
7
1
90%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ command -v ls >/dev/null 2>&1 && echo ok || echo missing:ls…$ command -v ls$ command -v ps$ command -v cat$ command -v netstat
Scanner
266939fa605c
15%
Loading events...
Interactive Operator
a4361611936d
LOGIN
8
1
90%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ which ls 2>/dev/null || echo 'missing:ls'; echo '---SEP---'…$ tr -d \n\r$ tr -d \n\r$ tr -d \n\r$ sed s/|$//
Scanner
d842f43a7df2
15%
Loading events...