Active Threat • MEDIUM
172.215.209.243
Country of Origin🇺🇸 United States
First Detection2/19/2026
Last Activity2/19/2026
ISPMicrosoft Corporation
🎯
1439
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
4
Malware
Geolocation
- Country
- 🇺🇸 United States
- City
- Cheyenne
- ASN
- AS8075
- ISP
- Microsoft Corporation
Attack Types
cowrie
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐root/111222
4x🔐root/hi@123
4x🔐root/123456z
4x🔐root/1111111
4x🔐root/222
4x🔐root/@@//123456
4x🔐root/family
4x🔐root/123456ABC
4x🔐root/supreme112233
4x🔐root/987Hi@@//
4x🔐root/Demo@123
4x🔐root/123abc
4x🔐root/hello1234
4x🔐root/supreme123
4x🔐root/123456Hello@@//
4xExecuted Commands
$
hostname3x$
pwd1x$
nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 01x$
grep model name /proc/cpuinfo 2 > /dev/null | head -1 | cut -d : -f2- | sed s/^ *// | xargs1x$
grep 'model name' /proc/cpuinfo 2>/dev/null | head -1 | cut -d ':' -f2- | sed 's/^ *//' | xargs || echo unknown1x$
grep -c ^processor /proc/cpuinfo 2 > /dev/null1xRisk Assessment
50
/100
LowMediumHighCritical