Active Threat • MEDIUM
34.85.163.94
Country of Origin🇺🇸 United States
First Detection1/6/2026
Last Activity1/6/2026
ISPGOOGLE-CLOUD-PLATFORM
🎯
372
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
23
Malware
Geolocation
- Country
- 🇺🇸 United States
- City
- Washington
- ASN
- AS396982
- ISP
- GOOGLE-CLOUD-PLATFORM
Attack Types
cowrie
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐345gs5662d34/345gs5662d34
3x🔐cinema/cinema
1x🔐cinema/3245gs5662d34
1x🔐testuser/testuser2025
1x🔐karen/karen123
1x🔐claude/3245gs5662d34
1x🔐claude/claude
1x🔐hung/hung
1x🔐yang/yang
1x🔐root/Welcome@2025
1x🔐mysql2/mysql2
1x🔐pnlp/pnlp
1x🔐dst/3245gs5662d34
1x🔐admin/2024
1x🔐root/Qq123456
1xExecuted Commands
$
cd ~; chattr -ia .ssh; lockr -ia .ssh3x$
top3x$
w3x$
uname -m3x$
free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'3x$
cat /proc/cpuinfo | grep name | wc -l3x$
crontab -l3x$
cat /proc/cpuinfo | grep model | grep name | wc -l3x$
which ls3x$
lscpu | grep Model3xRisk Assessment
55
/100
LowMediumHighCritical