IntrusionLabs IntrusionLabs
← Back to feed

4.7.156.78

Threat Confidence
45%
Location
🇺🇸 US / Indianapolis
ASN
AS3356 · Level 3 Parent, LLC
Cloud Provider
—
Total Events
101
Above average by volume
Agent Count
1
First / Last Seen
2026-04-22 21:44 — 2026-08-03 16:10
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1078 T1190
Execution
T1059.004
Credential Access
T1003.008 T1110 T1110.001
Discovery
T1046 T1083
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×4 web_probe ×1 credential_probe ×1 interactive_operator ×2
Sessions
8 (2 with login)
Avg Depth Score
0.36
Commands Executed
56
Files Downloaded
0
Notable Commands
  • ps auxww
  • apt list installed
  • id
  • ps list
  • apt
  • apt list
  • ls -l /var/lib/apt/lists/lock
  • htop
  • htop
  • CMD:
  • cd
  • cat /etc/passwd
  • pwd
  • ls
  • cd /home
  • ls -l phil
  • ls -ls
Fingerprints
HASSH
ad1e42d0ad7780f31879c2ce2ab3482deeca2460550b9ded084ecf2f70a75356
SSH Client
SSH-2.0-OpenSSH_10.2SSH-2.0-OpenSSH_10.3SSH-2.0-OpenSSH_9.9
Evidence Timeline
Interactive Operator 9d510b6c8441 newark_01 · 2026-08-03 16:07
24 2 90%
Loading events...
Interactive Operator 23bf1c992bd2 newark_01 · 2026-08-03 16:00
32 2 90%
Loading events...
Scanner 1302851da35a newark_01 · 2026-07-28 19:58
15%
Loading events...
Scanner 2f13c0d3599a newark_01 · 2026-07-10 15:56
15%
Loading events...
Web Probe 379c74e6d3548083 newark_01 · 2026-04-22 21:53
25%
Loading events...
Scanner bda30a16d06a newark_01 · 2026-04-22 21:50
15%
Loading events...
Credential Probe 49992cd5c22b newark_01 · 2026-04-22 21:44
1 20%
Loading events...
Scanner 6cee29f42ab1 newark_01 · 2026-04-22 21:44
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}