Active Threat • HIGH
86.54.42.68
🎯
498
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
22
Malware
Geolocation
- Country
- 🇸🇬 Singapore
- City
- Unknown
- ASN
- AS16276
- ISP
- OVH SAS
Attack Types
cowrie
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐345gs5662d34/345gs5662d34
3x🔐root/Tester123
1x🔐root/Bb12345678@
1x🔐m/m
1x🔐root/jl@123456
1x🔐root/dev123
1x🔐max/12345
1x🔐test1/0
1x🔐retag/retag
1x🔐ubuntu/Aa@123456
1x🔐trung/trung@123
1x🔐ai/1234
1x🔐root/QWE123
1x🔐root/3245gs5662d34
1x🔐mcuser/mcuser
1xExecuted Commands
$
Enter new UNIX password:4x$
w3x$
cd ~; chattr -ia .ssh; lockr -ia .ssh3x$
which ls3x$
uname3x$
df -h | head -n 2 | awk 'FNR == 2 {print $2;}'3x$
lockr -ia .ssh3x$
top3x$
uname -m3x$
whoami3xThreatFox Intelabuse.ch
⚠️KNOWN C2 SERVER
Malware Families
win.nimplantwin.cobalt_strike
Threat Types
botnet_cc
Confidence: 100%
Risk Assessment
62
/100
LowMediumHighCritical