IntrusionLabs IntrusionLabs
← Back to feed

51.4.96.75

Threat Confidence
29%
Location
🇮🇱 IL / Tel Aviv
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
108
Above average by volume
Agent Count
1
First / Last Seen
2026-09-08 06:32 — 2026-09-08 06:55
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
reconnaissance ×12
Sessions
12 (12 with login)
Avg Depth Score
0.6
Commands Executed
24
Files Downloaded
0
Notable Commands
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',37905));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',37905));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',37905));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',23897));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',23897));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',23897));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',41855));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',41855));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',41855));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',54349));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',54349));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',54349));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',50928));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',50928));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',50928));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',47028));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',47028));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',47028));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',23438));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',23438));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',23438));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',57451));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',57451));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',57451));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',45876));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',45876));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',45876));s.close();print(1)
  • python3 -c "import socket;s=socket.socket();s.bind(('0.0.0.0',29027));s.close();print(1)" 2>/dev/null || python -c "import socket;s=socket.socket();s.bind(('0.0.0.0',29027));s.close();print(1)" 2>/dev/null || echo 0
  • python3 -c import socket;s=socket.socket();s.bind(('0.0.0.0',29027));s.close();print(1)
Fingerprints
HASSH
6372ee6957562199b2fb773b0be1bf34
SSH Client
SSH-2.0-paramiko_5.0.0
Evidence Timeline
Reconnaissance 0e9ae75f4af3 newark_01 · 2026-09-08 06:55
2 1 60%
Loading events...
Reconnaissance dc1c28f27637 newark_01 · 2026-09-08 06:54
2 1 60%
Loading events...
Reconnaissance 7d68ebba4d1f newark_01 · 2026-09-08 06:54
2 1 60%
Loading events...
Reconnaissance 5564a0379fb7 newark_01 · 2026-09-08 06:53
2 1 60%
Loading events...
Reconnaissance c0b5915f1244 newark_01 · 2026-09-08 06:53
2 1 60%
Loading events...
Reconnaissance 28990b9aab40 newark_01 · 2026-09-08 06:53
2 1 60%
Loading events...
Reconnaissance 2fca33cafdff newark_01 · 2026-09-08 06:50
2 1 60%
Loading events...
Reconnaissance 5774e49900fa newark_01 · 2026-09-08 06:50
2 1 60%
Loading events...
Reconnaissance 6b4b6ba4d06e newark_01 · 2026-09-08 06:49
2 1 60%
Loading events...
Reconnaissance 3cc01bfd975e newark_01 · 2026-09-08 06:32
2 1 60%
Loading events...
Reconnaissance 9a5cd3693d2c newark_01 · 2026-09-08 06:32
2 1 60%
Loading events...
Reconnaissance 8eed2b45e70e newark_01 · 2026-09-08 06:32
2 1 60%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}