IntrusionLabs / threat intelligence

Sign in

← Back to feed

52.179.88.121

Threat Confidence

42%

Location

🇺🇸 US / Washington

ASN

AS8075 · Microsoft Corporation

Cloud Provider

Microsoft Azure

Total Events

900

Top 5% by volume

Agent Count

1

First / Last Seen

2026-04-09 12:58 — 2026-04-09 18:33

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Initial Access

T1078

Credential Access

T1110 T1110.001 T1552.003

Discovery

T1016 T1082 T1083

External Corroboration

Not flagged by any external feeds

Campaigns

Not associated with any campaigns

Session Forensics

reconnaissance ×111 credential_harvester ×1

Sessions

112 (99 with login)

Avg Depth Score

0.6

Commands Executed

102

Files Downloaded

0

Notable Commands

ls -la /
ssh -V
uname -a
hostname
history | tail -5
ps aux | head -10
whoami
uptime
pwd
mount | head -5
uname -m 2>/dev/null || echo unknown
env | head -10
netstat -tulpn | head -10
grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown
xargs

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Evidence Timeline

Credential Harvester d5ea097377d3 w4m_seattle_01 · 2026-04-09 18:33

1 35%

Loading events...

Reconnaissance 60f23ec81600 w4m_seattle_01 · 2026-04-09 18:30

1 1 60%

Loading events...

Reconnaissance 052c7d78a918 w4m_seattle_01 · 2026-04-09 18:26

1 1 60%

Loading events...

Reconnaissance 2d7047c625d7 w4m_seattle_01 · 2026-04-09 18:23

1 1 60%

Loading events...

Reconnaissance 69315c56c18c w4m_seattle_01 · 2026-04-09 18:19

1 1 60%

Loading events...

Reconnaissance a0275fb32f76 w4m_seattle_01 · 2026-04-09 18:16

1 1 60%

Loading events...

Reconnaissance 26a3c9602fc6 w4m_seattle_01 · 2026-04-09 18:13

1 1 60%

Loading events...

Reconnaissance ab102fa0052c w4m_seattle_01 · 2026-04-09 18:09

1 1 60%

Loading events...

Reconnaissance d2fa958ecdb4 w4m_seattle_01 · 2026-04-09 18:06

1 1 60%

Loading events...

Reconnaissance b3fde816cb6a w4m_seattle_01 · 2026-04-09 18:02

1 1 60%

Loading events...

Reconnaissance 68dbe17807f4 w4m_seattle_01 · 2026-04-09 17:59

1 1 60%

Loading events...

Reconnaissance 0cf8a7a75ac7 w4m_seattle_01 · 2026-04-09 17:55

1 1 60%

Loading events...

Reconnaissance a3d3f3a4cbf6 w4m_seattle_01 · 2026-04-09 17:52

1 1 60%

Loading events...

Reconnaissance ab8746dbfdaa w4m_seattle_01 · 2026-04-09 17:49

1 1 60%

Loading events...

Reconnaissance 49994be33ffc w4m_seattle_01 · 2026-04-09 17:45

1 1 60%

Loading events...

Reconnaissance 82fa31fb6b05 w4m_seattle_01 · 2026-04-09 17:42

1 1 60%

Loading events...

Reconnaissance ef9463e78a75 w4m_seattle_01 · 2026-04-09 17:39

1 1 60%

Loading events...

Reconnaissance 5fd5478050f3 w4m_seattle_01 · 2026-04-09 17:37

1 1 60%

Loading events...

Reconnaissance acc1985c0e05 w4m_seattle_01 · 2026-04-09 17:34

1 1 60%

Loading events...

Reconnaissance 1422d4ea43b8 w4m_seattle_01 · 2026-04-09 17:30

1 1 60%

Loading events...

Reconnaissance 13d2eb7355d5 w4m_seattle_01 · 2026-04-09 17:26

1 1 60%

Loading events...

Reconnaissance 062267880bfd w4m_seattle_01 · 2026-04-09 17:23

1 1 60%

Loading events...

Reconnaissance 3956c3b8976a w4m_seattle_01 · 2026-04-09 17:19

1 1 60%

Loading events...

Reconnaissance 76feb90a73bf w4m_seattle_01 · 2026-04-09 17:16

1 1 60%

Loading events...

Reconnaissance a86296c22939 w4m_seattle_01 · 2026-04-09 17:13

1 1 60%

Loading events...

Reconnaissance 3f85a7faa3a5 w4m_seattle_01 · 2026-04-09 17:10

1 1 60%

Loading events...

Reconnaissance bf15697a3a40 w4m_seattle_01 · 2026-04-09 17:07

1 1 60%

Loading events...

Reconnaissance 72c607513188 w4m_seattle_01 · 2026-04-09 17:03

1 1 60%

Loading events...

Reconnaissance 02eaab98da7d w4m_seattle_01 · 2026-04-09 17:00

1 1 60%

Loading events...

Reconnaissance 01295e2e8165 w4m_seattle_01 · 2026-04-09 16:56

1 1 60%

Loading events...

Reconnaissance 22b78e86d596 w4m_seattle_01 · 2026-04-09 16:53

1 1 60%

Loading events...

Reconnaissance 76d022aa1522 w4m_seattle_01 · 2026-04-09 16:49

1 1 60%

Loading events...

Reconnaissance adf2a75113ec w4m_seattle_01 · 2026-04-09 16:46

1 1 60%

Loading events...

Reconnaissance bda833d5bbe7 w4m_seattle_01 · 2026-04-09 16:43

1 1 60%

Loading events...

Reconnaissance 2e0c2dc9a218 w4m_seattle_01 · 2026-04-09 16:40

1 1 60%

Loading events...

Reconnaissance 2a3d578d1aca w4m_seattle_01 · 2026-04-09 16:36

1 1 60%

Loading events...

Reconnaissance c83988286f32 w4m_seattle_01 · 2026-04-09 16:33

1 1 60%

Loading events...

Reconnaissance 8085753646b0 w4m_seattle_01 · 2026-04-09 16:29

1 1 60%

Loading events...

Reconnaissance 6c73d5fc5163 w4m_seattle_01 · 2026-04-09 16:26

1 1 60%

Loading events...

Reconnaissance 772bb5afea5e w4m_seattle_01 · 2026-04-09 16:23

1 1 60%

Loading events...

Reconnaissance f136604170d1 w4m_seattle_01 · 2026-04-09 16:20

1 1 60%

Loading events...

Reconnaissance 48fd6b2f4f4f w4m_seattle_01 · 2026-04-09 16:16

1 1 60%

Loading events...

Reconnaissance d54b85d8825f w4m_seattle_01 · 2026-04-09 16:13

1 1 60%

Loading events...

Reconnaissance d1b45bd7972e w4m_seattle_01 · 2026-04-09 16:09

1 1 60%

Loading events...

Reconnaissance 6ff0ab1c7db8 w4m_seattle_01 · 2026-04-09 16:06

1 1 60%

Loading events...

Reconnaissance c80273479dda w4m_seattle_01 · 2026-04-09 16:03

1 1 60%

Loading events...

Reconnaissance cb4c871bc832 w4m_seattle_01 · 2026-04-09 15:59

1 1 60%

Loading events...

Reconnaissance 1b568574f514 w4m_seattle_01 · 2026-04-09 15:56

1 1 60%

Loading events...

Reconnaissance f56bcc6b1fbe w4m_seattle_01 · 2026-04-09 15:53

2 1 60%

Loading events...

Reconnaissance 75d16674ffe0 w4m_seattle_01 · 2026-04-09 15:50

1 1 60%

Loading events...