Active Threat • LOW
189.126.64.72
Country of Origin🇧🇷 Brazil
First Detection2/18/2026
Last Activity2/18/2026
ISPProvedornet Telecom. e Servicos de Internet Ltda
🎯
20
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware
Geolocation
- Country
- 🇧🇷 Brazil
- City
- Fortaleza
- ASN
- AS28225
- ISP
- Provedornet Telecom. e Servicos de Internet Ltda
Attack Types
cowrie
Attacked Ports
23
Associated Malware
Attempted Credentials
🔐root/12345
1xExecuted Commands
$
q2x$
system2x$
shell2x$
enable1x$
rm .s; exit1x$
cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox LYRSB1x$
dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s1x$
/bin/busybox LYRSB1x$
cat /proc/mounts; /bin/busybox LYRSB1x$
while read i1xRisk Assessment
25
/100
LowMediumHighCritical