Active Threat • LOW
85.159.0.251
Country of Origin🇺🇦 Ukraine
First Detection1/4/2026
Last Activity1/4/2026
ISPPrivate Joint Stock Company datagroup
🎯
23
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware
Geolocation
- Country
- 🇺🇦 Ukraine
- City
- Vinnytsia
- ASN
- AS31520
- ISP
- Private Joint Stock Company datagroup
Attack Types
cowrie
Attacked Ports
23
Associated Malware
Attempted Credentials
🔐root/ttnet
1x🔐root/aquario
1x🔐root/1001chin
1x🔐root/zsun1188
1xExecuted Commands
$
shell2x$
system2x$
q2x$
dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s1x$
tftp; wget; /bin/busybox QXFAB1x$
cat /proc/mounts; /bin/busybox QXFAB1x$
sh1x$
while read i1x$
enable1x$
/bin/busybox QXFAB1xRisk Assessment
25
/100
LowMediumHighCritical