Active Threat โ€ข MEDIUM

89.19.215.98

First Detection2/16/2026
Last Activity2/16/2026
ISPTimeweb, LLP
๐ŸŽฏ
198
Total Attacks
๐Ÿ”Œ
1
Ports
๐Ÿ“ก
1
Attack Types
๐Ÿฆ 
19
Malware

Geolocation

Country
๐Ÿ‡ท๐Ÿ‡บ Russia
City
Unknown
ASN
AS210976
ISP
Timeweb, LLP

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

๐Ÿ”345gs5662d34/345gs5662d34
2x
๐Ÿ”ubuntu/Welcome!
1x
๐Ÿ”sonar/1234
1x
๐Ÿ”remote/remote123
1x
๐Ÿ”root/Zg123456
1x
๐Ÿ”root/3245gs5662d34
1x
๐Ÿ”root/qQ@12345678
1x
๐Ÿ”valeriy/valeriy
1x
๐Ÿ”root/123!@#123
1x
๐Ÿ”root/456654
1x
๐Ÿ”root/openvpn
1x
๐Ÿ”root/P@Ssw0rd
1x
๐Ÿ”hadoop/1234
1x
๐Ÿ”root/k0s0ng
1x
๐Ÿ”dev/dev!@#
1x

Executed Commands

$w2x
$uname2x
$lscpu | grep Model2x
$whoami2x
$lockr -ia .ssh2x
$top2x
$uname -m2x
$rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;2x
$uname -a2x
$cat /proc/cpuinfo | grep name | wc -l2x

Risk Assessment

55
/100
LowMediumHighCritical