Active Threat β€’ MEDIUM

52.159.243.198

First Detection1/16/2026
Last Activity1/16/2026
ISPMICROSOFT-CORP-MSN-AS-BLOCK
🎯
837
Total Attacks
πŸ”Œ
1
Ports
πŸ“‘
1
Attack Types
🦠
8
Malware

Geolocation

Country
πŸ‡ΊπŸ‡Έ United States
City
San Jose
ASN
AS8075
ISP
MICROSOFT-CORP-MSN-AS-BLOCK

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

πŸ”root/1234
5x
πŸ”root/1
5x
πŸ”root/key123
5x
πŸ”root/Qwerty1?
5x
πŸ”root/key2
5x
πŸ”root/zhaohao1234
5x
πŸ”root/jqk
5x
πŸ”root/1234567
5x
πŸ”root/123123ab!
5x
πŸ”root/key6
5x
πŸ”root/1212
5x
πŸ”root/myserver123
5x
πŸ”root/key9
5x
πŸ”root/key3
5x
πŸ”root/123
5x

Executed Commands

$history | tail -54x
$uname -a3x
$pwd2x
$hostname2x
$ps aux | head -102x
$netstat -tulpn | head -101x
$nproc 2>/dev/null || (grep -c '^processor' /proc/cpuinfo 2>/dev/null) || echo 01x
$grep -c ^processor /proc/cpuinfo 2 > /dev/null1x

Risk Assessment

55
/100
LowMediumHighCritical