TROYANOSYVIRUS
Amenaza Activa • ALTO

14.37.160.15

Primera Deteccion8/3/2026
Ultima Actividad15/4/2026
ISPKorea Telecom
🎯
1,583
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
46
Malware

Geolocalizacion

Pais
🇰🇷 Corea del Sur
Ciudad
Bupyeong-gu
ASN
AS4766
ISP
Korea Telecom

Tipos de Ataque

ssh_telnet_honeypot

Puertos Atacados

22

Malware Asociado

05c29065a87eee0350a3...→09a3e612f8cad1560057...→0d0614485d17b059e6f9...→0ef098a1fe32e1fbb2fc...→1039812326b542464a51...→

Credenciales Intentadas

🔐345gs5662d34/345gs5662d34
9x
🔐root/3245gs5662d34
2x
🔐postgres/123123
1x
🔐root/Aa123
1x
🔐hath/hath
1x
🔐root/Root123123
1x
🔐ftp/123456
1x
🔐test/Welcome1
1x
🔐deployer/deployer!
1x
🔐username/123
1x
🔐mine/minecraft
1x
🔐root/ZZbb123
1x
🔐root/A123456H
1x
🔐odoo/123
1x
🔐root/ZAQ!2wsx4321@#
1x

Comandos Ejecutados

$Enter new UNIX password:14x
$ls -lh $(which ls)9x
$lscpu | grep Model9x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'9x
$uname -a9x
$w9x
$cat /proc/cpuinfo | grep name | wc -l9x
$crontab -l9x
$cat /proc/cpuinfo | grep model | grep name | wc -l9x
$which ls9x

Exposicion segun Shodan InternetDBShodan

Datos de InternetDB, actualizacion no en tiempo real

Puertos
80443102220002049
Vulnerabilidades
CVE-2008-3844CVE-2007-2768CVE-2023-38408CVE-2023-48795CVE-2025-26465CVE-2018-15473CVE-2023-51385CVE-2019-6111CVE-2020-15778CVE-2021-41617CVE-2016-20012CVE-2025-23419CVE-2017-15906CVE-2019-6110CVE-2018-20685CVE-2019-6109CVE-2020-14145CVE-2018-15919CVE-2025-32728CVE-2021-36368
Hostnames
www.labdip.dong-in.comlabdip.dong-in.com
CPEs
cpe:/a:getbootstrap:bootstrap:3.4.1cpe:/a:f5:nginx:1.21.6cpe:/a:openbsd:openssh:7.4

Evaluacion de Riesgo

65
/100
BajoMedioAltoCritico