Loading threats
Identifies execution of a literal echo statement immediately followed by uname -a, separated by a semicolon (;). The semicolon enforces sequential execution regardless of success state, indicating deliberate multi-command chaining. This pattern is commonly used in scripted reconnaissance where a marker string is emitted before performing full kernel and system identification.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 155.117.232.221 | 100% | 8,995 | 8,985 | 🇺🇸 US | AS399486 | 2026-04-16 |
| 45.83.31.168 | 100% | 4,525 | 2,034 | 🇺🇸 US | AS210558 | 2026-02-23 |
| 45.148.10.124 | 100% | 3,924 | 2,213 | 🇳🇱 NL | AS48090 | 2026-04-12 |
| 124.198.131.162 | 100% | 2,551 | 2,551 | 🇺🇸 US | AS210558 | 2026-04-16 |
| 45.83.31.38 | 100% | 2,494 | 2,473 | 🇺🇸 US | AS210558 | 2026-03-03 |
| 155.117.232.53 | 79% | 1,664 | 1,187 | 🇺🇸 US | AS399486 | 2026-03-23 |
| 196.178.1.141 | 99% | 1,198 | 1,182 | 🇹🇳 TN | AS37693 | 2026-02-27 |
| 45.92.1.236 | 100% | 1,137 | 1,137 | 🇳🇱 NL | AS210558 | 2026-04-13 |
| 77.83.39.144 | 87% | 1,046 | 538 | 🇺🇦 UA | AS214940 | 2026-03-31 |
| 37.114.41.184 | 77% | 975 | 975 | 🇩🇪 DE | AS203446 | 2026-04-13 |
| 124.198.132.174 | 100% | 668 | 668 | 🇺🇸 US | AS210558 | 2026-03-25 |
| 77.83.39.167 | 100% | 514 | 511 | 🇺🇦 UA | AS214940 | 2026-03-02 |
| 74.0.32.57 | 100% | 470 | 470 | 🇬🇧 GB | AS399486 | 2026-04-15 |
| 23.177.184.46 | 97% | 400 | 400 | 🇺🇸 US | AS400992 | 2026-03-17 |
| 193.26.115.37 | 100% | 399 | 399 | 🇺🇸 US | AS210558 | 2026-03-05 |
| 188.126.94.90 | 100% | 332 | 332 | 🇩🇰 DK | AS42708 | 2026-02-28 |
| 45.83.220.211 | 57% | 284 | 93 | 🇸🇪 SE | AS39351 | 2026-02-24 |
| 155.117.232.52 | 76% | 260 | 260 | 🇺🇸 US | AS399486 | 2026-03-21 |
| 193.221.201.11 | 99% | 215 | 215 | 🇷🇺 RU | AS205775 | 2026-04-10 |
| 180.184.55.222 | 100% | 209 | 209 | 🇨🇳 CN | AS137718 | 2026-03-25 |