Loading threats
Identifies resolution of the absolute path of the ls binary using which, followed by ls -lh to display its file metadata (permissions, size, ownership, and timestamp). The use of command substitution ($(which ls)) indicates deliberate inspection of the actual executable backing a common system utility, rather than listing a directory.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 187.188.0.71 | 100% | 9,013 | 2,824 | 🇲🇽 MX | AS22884 | 2026-02-25 |
| 14.63.196.175 | 100% | 8,195 | 4,413 | 🇰🇷 KR | AS4766 | 2026-03-02 |
| 58.98.199.45 | 100% | 6,902 | 2,390 | 🇯🇵 JP | AS9595 | 2026-03-02 |
| 46.191.141.152 | 100% | 4,854 | 2,288 | 🇷🇺 RU | AS24955 | 2026-03-02 |
| 95.188.91.101 | 100% | 3,776 | 1,292 | 🇷🇺 RU | AS12389 | 2026-02-27 |
| 187.16.96.250 | 100% | 2,891 | 1,041 | 🇧🇷 BR | AS17222 | 2026-03-02 |
| 120.240.236.178 | 100% | 2,615 | 1,988 | 🇨🇳 CN | AS56040 | 2026-03-02 |
| 103.215.140.205 | 100% | 2,330 | 821 | 🇨🇳 CN | AS58519 | 2026-02-27 |
| 218.78.60.105 | 100% | 1,959 | 825 | 🇨🇳 CN | AS4811 | 2026-03-02 |
| 14.103.175.138 | 91% | 1,825 | 695 | 🇨🇳 CN | AS4811 | 2026-02-22 |
| 124.163.255.210 | 100% | 1,808 | 1,109 | 🇨🇳 CN | AS4837 | 2026-03-02 |
| 101.126.81.188 | 100% | 1,377 | 594 | 🇨🇳 CN | AS137718 | 2026-03-02 |
| 117.62.22.127 | 100% | 1,337 | 811 | 🇨🇳 CN | AS4134 | 2026-03-02 |
| 183.232.212.207 | 100% | 1,286 | 591 | 🇨🇳 CN | AS9808 | 2026-03-02 |
| 120.48.42.17 | 100% | 1,282 | 724 | 🇨🇳 CN | AS38365 | 2026-03-02 |
| 218.78.46.81 | 100% | 1,261 | 527 | 🇨🇳 CN | AS4811 | 2026-03-02 |
| 150.138.115.76 | 100% | 1,258 | 593 | 🇨🇳 CN | AS58541 | 2026-03-02 |
| 14.103.118.197 | 100% | 1,253 | 498 | 🇨🇳 CN | AS4811 | 2026-03-02 |
| 14.103.115.212 | 100% | 1,238 | 546 | 🇨🇳 CN | AS4811 | 2026-03-02 |
| 14.103.112.104 | 100% | 1,214 | 516 | 🇨🇳 CN | AS4811 | 2026-03-02 |