TROYANOSYVIRUS
Amenaza ActivaALTO

14.224.227.189

Pais de Origen🇻🇳 Vietnam
Primera Deteccion5/1/2026
Ultima Actividad18/4/2026
ISPVNPT Corp
🎯
1,098
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
33
Malware

Geolocalizacion

Pais
🇻🇳 Vietnam
Ciudad
Ho Chi Minh City
ASN
AS45899
ISP
VNPT Corp

Tipos de Ataque

ssh_telnet_honeypot

Puertos Atacados

22

Malware Asociado

Credenciales Intentadas

🔐345gs5662d34/345gs5662d34
8x
🔐root/3245gs5662d34
2x
🔐ubuntu/1234
1x
🔐testuser/12345678
1x
🔐root/Qwertyuiop@
1x
🔐root/1Qwer
1x
🔐ali/3245gs5662d34
1x
🔐root/ZZaa112233
1x
🔐root/Azerty2026
1x
🔐sdc/sdc
1x
🔐root/a123456b123456
1x
🔐root/23452345
1x
🔐cy/cy123
1x
🔐testftp/testftp123
1x
🔐user1/qwer1234
1x

Comandos Ejecutados

$Enter new UNIX password:10x
$cd ~; chattr -ia .ssh; lockr -ia .ssh8x
$w8x
$cat /proc/cpuinfo | grep name | wc -l8x
$crontab -l8x
$cat /proc/cpuinfo | grep model | grep name | wc -l8x
$which ls8x
$uname8x
$whoami8x
$df -h | head -n 2 | awk 'FNR == 2 {print $2;}'8x

Exposicion segun Shodan InternetDBShodan

Datos de InternetDB, actualizacion no en tiempo real

Puertos
8094
Vulnerabilidades
CVE-2022-26488CVE-2018-1000656CVE-2013-7440CVE-2025-6075CVE-2024-9287CVE-2015-5652CVE-2011-4944CVE-2009-2940CVE-2017-9233CVE-2014-9365CVE-2012-2135CVE-2009-3720CVE-2021-28667CVE-2019-10160CVE-2016-4472CVE-2025-12084CVE-2022-0391CVE-2023-40217CVE-2020-8492CVE-2019-15903
Hostnames
static.vnpt.vn
CPEs
cpe:/a:python:python:2.7.3cpe:/a:palletsprojects:flask:0.8.1

Evaluacion de Riesgo

65
/100
BajoMedioAltoCritico