Active Threat β’ MEDIUM
165.227.53.59
Country of OriginπΊπΈ United States
First Detection4/8/2026
Last Activity4/8/2026
ISPDigitalOcean, LLC
π―
252
Total Attacks
π
1
Ports
π‘
1
Attack Types
π¦
21
Malware
Geolocation
- Country
- πΊπΈ United States
- City
- Santa Clara
- ASN
- AS14061
- ISP
- DigitalOcean, LLC
Attack Types
ssh_telnet_honeypot
Attacked Ports
22
Associated Malware
Attempted Credentials
π345gs5662d34/345gs5662d34
2xπtest/abc@123
1xπodoo/odoo15
1xπroot/root7
1xπroot/Admin12345@#
1xπtest/3245gs5662d34
1xπroot/postgres@123
1xπkaveh/123456
1xπroot/passw0rd.
1xπubuntu/qwerty1234
1xπtest/123456a@
1xπroot/root2023@@
1xπroot/123-asdf
1xπuser/User10
1xπdebian/P@ssw0rd
1xExecuted Commands
$
Enter new UNIX password:4x$
lscpu | grep Model2x$
ls -lh $(which ls)2x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'2x$
uname -a2x$
w2x$
cd ~; chattr -ia .ssh; lockr -ia .ssh2x$
lockr -ia .ssh2x$
top2x$
uname -m2xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Ports
2280443
Vulnerabilities
CVE-2020-13938CVE-2023-25690CVE-2024-27316CVE-2025-49812CVE-2017-15715CVE-2009-0796CVE-2024-38477CVE-2019-10082CVE-2022-28615CVE-2021-44224CVE-2025-53020CVE-2021-33193CVE-2023-38709CVE-2013-0941CVE-2022-23943CVE-2024-38476CVE-2018-1333CVE-2022-22721CVE-2024-42516CVE-2019-0217
Hostnames
repositoriolv.santaluzia.com.br
CPEs
cpe:/a:openbsd:openssh:7.6p1cpe:/a:apache:http_server:2.4.29cpe:/o:canonical:ubuntu_linux
Risk Assessment
55
/100
LowMediumHighCritical