Active Threat β’ HIGH
164.90.159.214
Country of OriginπΊπΈ United States
First Detection3/25/2026
Last Activity3/28/2026
ISPDigitalOcean, LLC
π―
424
Total Attacks
π
1
Ports
π‘
1
Attack Types
π¦
25
Malware
Geolocation
- Country
- πΊπΈ United States
- City
- Santa Clara
- ASN
- AS14061
- ISP
- DigitalOcean, LLC
Attack Types
ssh_telnet_honeypot
Attacked Ports
22
Associated Malware
Attempted Credentials
π345gs5662d34/345gs5662d34
4xπroot/3245gs5662d34
2xπroot/zhuzhu
1xπroot/git123
1xπroot/Root1234!@#$
1xπsky/12345678
1xπroot/shihming
1xπwilson/Wilson123
1xπroot/zaq12wsX
1xπwilson/3245gs5662d34
1xπroot/Admin@000
1xπroot/110120259
1xπroot/Adm1n12345
1xπnasuser/1234
1xπroot/qwerty!23
1xExecuted Commands
$
lockr -ia .ssh4x$
uname -m4x$
top4x$
free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'4x$
cd ~; chattr -ia .ssh; lockr -ia .ssh4x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'4x$
uname -a4x$
w4x$
ls -lh $(which ls)4x$
cat /proc/cpuinfo | grep name | wc -l4xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Ports
22808090
CPEs
cpe:/o:canonical:ubuntu_linuxcpe:/o:linux:linux_kernelcpe:/a:openbsd:openssh:9.9p1cpe:/a:f5:nginx:1.26.3
Risk Assessment
62
/100
LowMediumHighCritical