← Back to feed
48.217.251.98
Location
🇺🇸 US / Washington
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
617
Top 5% by volume
Agent Count
1
First / Last Seen
2026-04-10 18:55 — 2026-04-10 23:10
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
77 (77 with login)
Avg Depth Score
0.6
Commands Executed
78
Files Downloaded
0
Notable Commands
- ps aux | head -10
- pwd
- hostname
- uname -a
- netstat -tulpn | head -10
- env | head -10
- ssh -V
- ls -la /
- whoami
- uptime
- history | tail -5
- nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 0
- grep -c ^processor /proc/cpuinfo 2 > /dev/null
- mount | head -5
Fingerprints
HASSH
SSH Client
Evidence Timeline
Reconnaissance
de1cd67ef962
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ps aux | head -10
Reconnaissance
f23c800ee88d
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
5f1612ccb605
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
d96cedaabd7a
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
4855e6f4a8b8
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
d35b03a54d01
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
a1eed745cd33
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ env | head -10
Reconnaissance
41171a568b62
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ssh -V
Reconnaissance
302274db0224
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
91d42c49dc26
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
69a97ce7bf15
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
f049819a7ea1
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
dcf0dc3dd381
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
d9049d07a5d5
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
9cedb0c23c22
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
0b2704db9034
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
8dc7785b7861
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ls -la /
Reconnaissance
e519e32c9a1b
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ whoami
Reconnaissance
9109e5a220ee
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
48175901108a
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
95e8d79cad52
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ssh -V
Reconnaissance
2d74a0d635fd
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ps aux | head -10
Reconnaissance
3093ddd4c374
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ssh -V
Reconnaissance
815e8f38c341
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
d02500370140
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ls -la /
Reconnaissance
9af0d668bebd
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
55aa740a6431
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
9436b05aee1e
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
c9d5f823cdb9
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uptime
Reconnaissance
e9d3c844de16
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
f340378279c2
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ history | tail -5
Reconnaissance
935c549ad026
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
738e96efbc0e
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
b2418b62ee68
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uptime
Reconnaissance
91d0a820e208
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
3c39251e7daa
LOGIN
2
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>…$ grep -c ^processor /proc/cpuinfo 2 > /dev/null
Reconnaissance
1f02d9ef4b09
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ uname -a
Reconnaissance
cde3812e6f23
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ whoami
Reconnaissance
0144e0221172
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ls -la /
Reconnaissance
42753a752558
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
badc6b2cfd8c
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
d28511b4c792
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
a111351c88b3
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
fc7f9401ba01
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ netstat -tulpn | head -10
Reconnaissance
0af92a90565e
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd
Reconnaissance
5325e477eaf6
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ ls -la /
Reconnaissance
60c16687aabc
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ whoami
Reconnaissance
5ade192b4294
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
5efe06f4687f
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ hostname
Reconnaissance
0a1a06b5dba9
LOGIN
1
1
60%
Loading events...
HASSH 16443846184eafd…
SSH-2.0-Go
$ pwd