Active Threat โ€ข HIGH

178.132.4.68

First Detection2/19/2026
Last Activity2/22/2026
ISPWorldStream B.V.
๐ŸŽฏ
473
Total Attacks
๐Ÿ”Œ
1
Ports
๐Ÿ“ก
1
Attack Types
๐Ÿฆ 
25
Malware

Geolocation

Country
๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands
City
Naaldwijk
ASN
AS49981
ISP
WorldStream B.V.

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

๐Ÿ”345gs5662d34/345gs5662d34
4x
๐Ÿ”root/password@2025
1x
๐Ÿ”ec2-user/Password123!
1x
๐Ÿ”ubuntu/woailaopo
1x
๐Ÿ”root/Qwert123!@#
1x
๐Ÿ”root/1qasdfghjkl
1x
๐Ÿ”ubuntu/Qwer1234!
1x
๐Ÿ”develop/develop123
1x
๐Ÿ”user2/test
1x
๐Ÿ”root/Aa11223344
1x
๐Ÿ”root/3245gs5662d34
1x
๐Ÿ”armen/armen
1x
๐Ÿ”toan/123456
1x
๐Ÿ”nc/nc
1x
๐Ÿ”backupuser/111111
1x

Executed Commands

$cat /proc/cpuinfo | grep name | wc -l4x
$top4x
$lockr -ia .ssh4x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'4x
$uname -a4x
$uname4x
$Enter new UNIX password:4x
$w4x
$crontab -l4x
$cd ~; chattr -ia .ssh; lockr -ia .ssh3x

Risk Assessment

60
/100
LowMediumHighCritical