Active Threat โ€ข HIGH

195.250.72.168

Country of Origin๐Ÿ‡ฆ๐Ÿ‡ฒ AM
First Detection1/21/2026
Last Activity2/16/2026
ISPGNC-Alfa CJSC
๐ŸŽฏ
443
Total Attacks
๐Ÿ”Œ
1
Ports
๐Ÿ“ก
1
Attack Types
๐Ÿฆ 
20
Malware

Geolocation

Country
๐Ÿ‡ฆ๐Ÿ‡ฒ AM
City
Yerevan
ASN
AS49800
ISP
GNC-Alfa CJSC

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

๐Ÿ”345gs5662d34/345gs5662d34
2x
๐Ÿ”test5/test5123
1x
๐Ÿ”wow/wow
1x
๐Ÿ”ab/123456
1x
๐Ÿ”debian/1234567
1x
๐Ÿ”claude/claude123
1x
๐Ÿ”server/server@123
1x
๐Ÿ”tomcat/tomcat2025
1x
๐Ÿ”jla/xurros22$
1x
๐Ÿ”cb/cb123!
1x
๐Ÿ”deepak/deepak123
1x
๐Ÿ”root/ruijie@123
1x
๐Ÿ”atul/atul@123
1x
๐Ÿ”root/Root.2025
1x
๐Ÿ”root/Ty123456
1x

Executed Commands

$cd ~; chattr -ia .ssh; lockr -ia .ssh2x
$w2x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'2x
$uname -a2x
$crontab -l2x
$cat /proc/cpuinfo | grep model | grep name | wc -l2x
$Enter new UNIX password:2x
$uname2x
$lockr -ia .ssh2x
$top2x

Risk Assessment

65
/100
LowMediumHighCritical