Active Threat โ€ข HIGH

121.136.87.130

First Detection12/31/2025
Last Activity2/13/2026
ISPKorea Telecom
๐ŸŽฏ
385
Total Attacks
๐Ÿ”Œ
1
Ports
๐Ÿ“ก
1
Attack Types
๐Ÿฆ 
24
Malware

Geolocation

Country
๐Ÿ‡ฐ๐Ÿ‡ท South Korea
City
Hwaseong-si
ASN
AS4766
ISP
Korea Telecom

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

๐Ÿ”345gs5662d34/345gs5662d34
3x
๐Ÿ”ftpuser/admin123
1x
๐Ÿ”haproxy/123
1x
๐Ÿ”kanban/1234
1x
๐Ÿ”localadmin/localadmin2026
1x
๐Ÿ”haproxy/haproxy@1234
1x
๐Ÿ”maria/maria@123
1x
๐Ÿ”root/3245gs5662d34
1x
๐Ÿ”cyrus/cyrus2025
1x
๐Ÿ”myuser/123456
1x
๐Ÿ”enigma/enigma
1x
๐Ÿ”cai/3245gs5662d34
1x
๐Ÿ”k8suser/k8suser
1x
๐Ÿ”kkk/kkk
1x
๐Ÿ”mainuser/mainuser
1x

Executed Commands

$cd ~; chattr -ia .ssh; lockr -ia .ssh3x
$cat /proc/cpuinfo | grep model | grep name | wc -l3x
$Enter new UNIX password:3x
$uname3x
$df -h | head -n 2 | awk 'FNR == 2 {print $2;}'3x
$lockr -ia .ssh3x
$top3x
$uname -m3x
$ls -lh $(which ls)3x
$w3x

Risk Assessment

65
/100
LowMediumHighCritical