Active Threat • HIGH
189.4.4.85
Country of Origin🇧🇷 Brazil
First Detection1/13/2026
Last Activity1/14/2026
ISPClaro NXT Telecomunicacoes Ltda
🎯
835
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
33
Malware
Geolocation
- Country
- 🇧🇷 Brazil
- City
- Araucária
- ASN
- AS28573
- ISP
- Claro NXT Telecomunicacoes Ltda
Attack Types
cowrie
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐345gs5662d34/345gs5662d34
8x🔐vps/vps123!
1x🔐hp/123
1x🔐sage/1
1x🔐download/download
1x🔐mariadb/Password123
1x🔐liberty/liberty2026
1x🔐peoplesoft/Password1
1x🔐clickhouse/clickhouse2025!
1x🔐cloud/12345678
1x🔐readonly/readonly2025!
1x🔐mail/mail@1234
1x🔐carel/carel2026
1x🔐Administrator/Wonderware
1x🔐ftpuser/ZYPCOM
1xExecuted Commands
$
cd ~; chattr -ia .ssh; lockr -ia .ssh8x$
ls -lh $(which ls)8x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'8x$
Enter new UNIX password: 8x$
uname -a8x$
w8x$
cat /proc/cpuinfo | grep name | wc -l8x$
crontab -l8x$
cat /proc/cpuinfo | grep model | grep name | wc -l8x$
which ls8xRisk Assessment
60
/100
LowMediumHighCritical