Amenaza Activa • ALTO
122.165.121.195
Pais de Origen🇮🇳 India
Primera Deteccion21/1/2026
Ultima Actividad24/4/2026
ISPBharti Airtel Ltd., Telemedia Services
🎯
964
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
34
Malware
Geolocalizacion
- Pais
- 🇮🇳 India
- Ciudad
- Desconocida
- ASN
- AS24560
- ISP
- Bharti Airtel Ltd., Telemedia Services
Tipos de Ataque
ssh_telnet_honeypot
Puertos Atacados
22
Malware Asociado
Credenciales Intentadas
🔐ali/3245gs5662d34
1x🔐ali/Ali0
1x🔐eddy/eddy
1x🔐345gs5662d34/345gs5662d34
1xComandos Ejecutados
$
Enter new UNIX password:2x$
ls -lh $(which ls)1x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'1x$
uname -a1x$
echo "Ali0\nJPJLsizsJnQ9\nJPJLsizsJnQ9\n"|passwd1x$
w1x$
echo -e "Ali0\nJPJLsizsJnQ9\nJPJLsizsJnQ9"|passwd|bash1x$
cat /proc/cpuinfo | grep name | wc -l1x$
crontab -l1x$
cat /proc/cpuinfo | grep model | grep name | wc -l1xExposicion segun Shodan InternetDBShodan
Datos de InternetDB, actualizacion no en tiempo real
Puertos
8050017001800080808181
Vulnerabilidades
CVE-2022-29404CVE-2022-28615CVE-2012-3526CVE-2024-43204CVE-2007-4723CVE-2024-38474CVE-2006-20001CVE-2022-30556CVE-2013-0942CVE-2013-2765CVE-2024-39573CVE-2025-53020CVE-2011-2688CVE-2025-59775CVE-2025-66200CVE-2023-25690CVE-2023-31122CVE-2022-31813CVE-2024-38477CVE-2012-4360
Hostnames
abts-tn-static-195.121.165.122.airtelbroadband.in
CPEs
cpe:/a:f5:nginx:1.24.0cpe:/a:python:pythoncpe:/a:apache:http_server:2.4.52cpe:/o:linux:linux_kernelcpe:/o:canonical:ubuntu_linuxcpe:/a:encode:uvicorncpe:/a:apache:http_server
Evaluacion de Riesgo
65
/100
BajoMedioAltoCritico