SshStalker

SshStalker Badge
Difficulty
Difficulty Basic
Score
Score 2000
Tags
Completions
Completions 7
Authors
Rating

NorthLedger has identified unusual activity on one of its Linux jump servers, nl-jump01.

The server is exposed to regular SSH traffic, making it difficult to separate routine noise from genuine malicious activity. You have been provided with authentication, system, audit and shell history logs.

Your task is to identify the point of compromise and reconstruct what happened.

Defensive Entry Level


Activity

Lab Released 2026-07-23 18:00:00

noother got 1st blood

2026-07-23 23:57:13

rayaseiren got 2nd blood

2026-07-24 22:46:09

koioshitai got 3rd blood

2026-07-26 02:57:45

G_Smith got 4th blood

2026-08-04 17:23:30

LACiA got 5th blood

2026-08-14 01:34:07