Amenaza ActivaALTO

189.4.4.85

Pais de Origen🇧🇷 Brasil
Primera Deteccion13/1/2026
Ultima Actividad25/1/2026
ISPClaro NXT Telecomunicacoes Ltda
🎯
1123
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
37
Malware

Geolocalizacion

Pais
🇧🇷 Brasil
Ciudad
Araucária
ASN
AS28573
ISP
Claro NXT Telecomunicacoes Ltda

Tipos de Ataque

cowrie

Puertos Atacados

22

Malware Asociado

Credenciales Intentadas

🔐345gs5662d34/345gs5662d34
10x
🔐pwserver/pwserver2026
1x
🔐Administrator/Wonderware
1x
🔐mail/mail123!
1x
🔐botuser/1234
1x
🔐ftpuser/ZYPCOM
1x
🔐readonly/readonly1234
1x
🔐mariadb/Password123
1x
🔐peoplesoft/Password1
1x
🔐readonly/readonly2025!
1x
🔐mail/mail@1234
1x
🔐ansible/password
1x
🔐nexus/3245gs5662d34
1x
🔐deployer/deployer123
1x
🔐vps/vps123!
1x

Comandos Ejecutados

$Enter new UNIX password:12x
$cd ~; chattr -ia .ssh; lockr -ia .ssh10x
$w10x
$whoami10x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'10x
$lscpu | grep Model10x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'10x
$uname -a10x
$cat /proc/cpuinfo | grep name | wc -l10x
$crontab -l10x

Evaluacion de Riesgo

65
/100
BajoMedioAltoCritico