Active Threat • MEDIUM
202.184.159.103
Country of Origin🇲🇾 Malaysia
First Detection3/1/2026
Last Activity3/2/2026
ISPTIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
🎯
336
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
23
Malware
Geolocation
- Country
- 🇲🇾 Malaysia
- City
- Cyberjaya
- ASN
- AS9930
- ISP
- TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
Attack Types
cowrie
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐345gs5662d34/345gs5662d34
4x🔐root/3245gs5662d34
4x🔐root/Password123456@
1x🔐root/121212
1x🔐root/Changeme_1234
1x🔐root/Test123!!
1x🔐root/Pa$$w0rd2025
1x🔐root/Bb123456@
1x🔐root/Password123
1x🔐root/123123a@
1x🔐root/Abc.123456
1x🔐root/testpassword
1x🔐root/aA111111
1x🔐root/Q1w2e3r4!@#$
1x🔐root/Qwerty1234567890
1xExecuted Commands
$
lockr -ia .ssh4x$
top4x$
which ls4x$
uname4x$
cd ~; chattr -ia .ssh; lockr -ia .ssh4x$
uname -a4x$
df -h | head -n 2 | awk 'FNR == 2 {print $2;}'4x$
whoami3x$
rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;3x$
cat /proc/cpuinfo | grep name | wc -l3xRisk Assessment
55
/100
LowMediumHighCritical