Active Threat • HIGH
106.225.192.15
Country of Origin🇨🇳 China
First Detection1/14/2026
Last Activity2/22/2026
ISPCHINANET Jiangx province IDC network
🎯
388
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
19
Malware
Geolocation
- Country
- 🇨🇳 China
- City
- Unknown
- ASN
- AS134238
- ISP
- CHINANET Jiangx province IDC network
Attack Types
cowrie
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐root/1qaz2wsx!QAZ@WSX
1x🔐root/root12345
1x🔐root/1029384756
1x🔐appserver/password
1x🔐root/admin*123
1x🔐tu/123456
1x🔐ai/ai
1x🔐root/3245gs5662d34
1x🔐root/5201314a
1x🔐zookeeper/zookeeper
1x🔐admin/azerty123
1x🔐workspace/123456
1x🔐root/admin12#$
1x🔐esbuser/esbuser
1x🔐root/Changeme_1234
1xExecuted Commands
$
ls -lh $(which ls)2x$
w2x$
whoami2x$
free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'2x$
lscpu | grep Model2x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'2x$
uname -a2x$
cat /proc/cpuinfo | grep model | grep name | wc -l2x$
uname2x$
lockr -ia .ssh2xRisk Assessment
65
/100
LowMediumHighCritical