Active Threat • MEDIUM
81.30.162.19
Country of Origin🇺🇦 Ukraine
First Detection2/20/2026
Last Activity2/21/2026
ISPTelecommunication Company Vinteleport Ltd.
🎯
256
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
22
Malware
Geolocation
- Country
- 🇺🇦 Ukraine
- City
- Vinnytsia
- ASN
- AS24945
- ISP
- Telecommunication Company Vinteleport Ltd.
Attack Types
cowrie
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐345gs5662d34/345gs5662d34
3x🔐claude/claude123
1x🔐ubuntu/m123456
1x🔐root/abc123
1x🔐claude/3245gs5662d34
1x🔐socks/socks123
1x🔐root/123456abc
1x🔐ubuntu/123456789Aa
1x🔐sshtest/12345678
1x🔐n8n/n8n
1x🔐x/xpass
1x🔐bot1/123123
1x🔐admin/aa@qwe123
1x🔐n8n/3245gs5662d34
1x🔐gitlab/gitlab123456
1xExecuted Commands
$
Enter new UNIX password:5x$
lscpu | grep Model3x$
lockr -ia .ssh3x$
whoami3x$
uname3x$
cd ~; chattr -ia .ssh; lockr -ia .ssh2x$
w2x$
crontab -l2x$
cat /proc/cpuinfo | grep model | grep name | wc -l2x$
which ls2xRisk Assessment
55
/100
LowMediumHighCritical