⚠TROYANOSYVIRUS
Amenaza Activa • ALTO

172.172.196.177

Primera Deteccion30/12/2025
Ultima Actividad20/2/2026
ISPMICROSOFT-CORP-MSN-AS-BLOCK
🎯
3703
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
69
Malware

Geolocalizacion

Pais
🇺🇸 Estados Unidos
Ciudad
Washington
ASN
AS8075
ISP
MICROSOFT-CORP-MSN-AS-BLOCK

Tipos de Ataque

cowrie

Puertos Atacados

22

Malware Asociado

00f3a4c54c20e5685ce3...→01ba4719c80b6fe911b0...→020e9b710ad74159bcff...→06319b6093021b51d302...→09a3e612f8cad1560057...→

Credenciales Intentadas

🔐345gs5662d34/345gs5662d34
27x
🔐root/3245gs5662d34
5x
🔐n8n/3245gs5662d34
2x
🔐deploy/20252025
2x
🔐frappeuser/frappeuser
2x
🔐root/LeitboGi0ro
2x
🔐root/@Pass123
2x
🔐root/nPSpP4PBW0
2x
🔐cloud/cloud123!
2x
🔐root/tesTtest123a
2x
🔐ai/1234
2x
🔐root/root
2x
🔐oracle/3245gs5662d34
1x
🔐root/1999
1x
🔐user10/user10
1x

Comandos Ejecutados

$Enter new UNIX password:35x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'27x
$top26x
$crontab -l26x
$uname -m26x
$lockr -ia .ssh26x
$cd ~; chattr -ia .ssh; lockr -ia .ssh26x
$uname25x
$cat /proc/cpuinfo | grep model | grep name | wc -l25x
$lscpu | grep Model25x

Evaluacion de Riesgo

65
/100
BajoMedioAltoCritico