Active ThreatHIGH

125.142.37.91

Country of Origin🇰🇷 South Korea
First Detection1/18/2026
Last Activity1/21/2026
ISPKorea Telecom
🎯
641
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
26
Malware

Geolocation

Country
🇰🇷 South Korea
City
Goyang-si
ASN
AS4766
ISP
Korea Telecom

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

🔐345gs5662d34/345gs5662d34
5x
🔐timemachine/timemachine123!
1x
🔐viewer/123456
1x
🔐malik/malik123
1x
🔐tina/tina
1x
🔐couchdb/3245gs5662d34
1x
🔐nobody/123456
1x
🔐test1/test1@123
1x
🔐root/p0o9i8u7
1x
🔐root/1234321
1x
🔐sftptest/3245gs5662d34
1x
🔐root/nPSpP4PBW0
1x
🔐root/123789
1x
🔐bitrix/password
1x
🔐oracle/0
1x

Executed Commands

$uname5x
$cd ~; chattr -ia .ssh; lockr -ia .ssh5x
$df -h | head -n 2 | awk 'FNR == 2 {print $2;}'5x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'5x
$uname -m5x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'5x
$top5x
$Enter new UNIX password: 5x
$uname -a5x
$w5x

Risk Assessment

62
/100
LowMediumHighCritical