Active Threat • HIGH
88.213.102.206
Country of Origin🇸🇦 SA
First Detection2/28/2026
Last Activity3/4/2026
ISPMiddle East Internet Company Limited
🎯
403
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
21
Malware
Geolocation
- Country
- 🇸🇦 SA
- City
- Riyadh
- ASN
- AS34397
- ISP
- Middle East Internet Company Limited
Attack Types
cowrie
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐root/3245gs5662d34
4x🔐345gs5662d34/345gs5662d34
4x🔐root/Aa520520
1x🔐root/Aa123123..
1x🔐root/qwe@1234
1x🔐root/123qweQWE!
1x🔐root/qq123456..
1x🔐root/Cp123456
1x🔐root/12312312
1x🔐root/1234Qwer!
1x🔐root/1@Qwertyuiop
1x🔐root/123455
1x🔐root/Admin#123456
1x🔐root/Password@
1x🔐root/Ubuntu@2024
1xExecuted Commands
$
uname -m4x$
free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'4x$
cat /proc/cpuinfo | grep model | grep name | wc -l4x$
uname4x$
rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;4x$
w4x$
whoami4x$
uname -a4x$
df -h | head -n 2 | awk 'FNR == 2 {print $2;}'4x$
lockr -ia .ssh4xRisk Assessment
62
/100
LowMediumHighCritical