Active Threat β’ HIGH
143.198.235.14
Country of OriginπΊπΈ United States
First Detection4/5/2026
Last Activity4/7/2026
ISPDigitalOcean, LLC
π―
195
Total Attacks
π
2
Ports
π‘
2
Attack Types
π¦
20
Malware
Geolocation
- Country
- πΊπΈ United States
- City
- Santa Clara
- ASN
- AS14061
- ISP
- DigitalOcean, LLC
Attack Types
ssh_telnet_honeypot
tcp_trap
Attacked Ports
221224
Associated Malware
Attempted Credentials
πroot/Root1234567@#
1xπvpsuser/123456
1xπroot/ZZxx1234
1xπroot/ZAQ!@#
1xπclaude/Claude22!
1xπftpuser/Ftpuser14!
1xπroot/!QAZ@WSX3edc
1xπroot/3245gs5662d34
1xπinfo/admin123
1xπroot/123123.com
1xπmailtest/test123
1xπadmin/admin26
1xπroot/ZAQ!2wsx2020@#
1xπroot/Qazwsx112233
1xπdebian/1
1xExecuted Commands
$
lscpu | grep Model1x$
ls -lh $(which ls)1x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'1x$
uname -a1x$
echo "root:8ZCTqjcnT9vm"|chpasswd|bash1x$
w1x$
cat /proc/cpuinfo | grep name | wc -l1x$
crontab -l1x$
cat /proc/cpuinfo | grep model | grep name | wc -l1x$
which ls1xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Risk Assessment
70
/100
LowMediumHighCritical