Unauthorized SSH brute-force detected from 197.210.54.100
4,892 failed attempts in 3 minutes. ThreatActor#001 flagged.
Unusual outbound port 4444 connection on staging-server
Metasploit default callback port detected. Process: /tmp/.hidden/xmr-strike
Config file modified in /etc/ssh/sshd_config
AuthorizedKeysFile changed from default. Audit log entry required.
Failed sudo attempt on db-replica-02
User 'deploy' attempted 'sudo su -' without authorization. Denied by PAM.
Reverse shell detected via cron job /etc/cron.d/backdoor
Base64-encoded payload in cron. PID 1847 terminated. IOC captured.
⚠️ ThreatActor#001
IP: 197.210.54.100 · ASN: MTN Nigeria · 847 attack patterns matched
⛓️ Blockchain-Verified · SHA-256 hash chain sealed at 2026-06-21T19:42:11Z