Active ThreatMEDIUM

92.191.96.171

Country of Origin🇪🇸 Spain
First Detection12/31/2025
Last Activity12/31/2025
ISPOrange Espagne SA
🎯
304
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
23
Malware

Geolocation

Country
🇪🇸 Spain
City
Granada
ASN
AS12479
ISP
Orange Espagne SA

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

🔐345gs5662d34/345gs5662d34
3x
🔐yckim/1
1x
🔐print/P@ssw0rd123
1x
🔐kafka/123
1x
🔐jeff/password
1x
🔐couchdb/3245gs5662d34
1x
🔐nexus/P@ssw0rd123
1x
🔐ina/1
1x
🔐bruno/3245gs5662d34
1x
🔐pierre/123123
1x
🔐vincent/3245gs5662d34
1x
🔐vps/vps123
1x
🔐mongouser/mongouser@123
1x
🔐vincent/1
1x
🔐justin/justin2025
1x

Executed Commands

$uname -m3x
$uname3x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'3x
$cat /proc/cpuinfo | grep name | wc -l3x
$cd ~; chattr -ia .ssh; lockr -ia .ssh3x
$crontab -l3x
$whoami3x
$df -h | head -n 2 | awk 'FNR == 2 {print $2;}'3x
$cat /proc/cpuinfo | grep model | grep name | wc -l3x
$which ls3x

Risk Assessment

55
/100
LowMediumHighCritical