Amenaza ActivaALTO

196.196.253.20

Pais de Origen🇬🇧 Reino Unido
Primera Deteccion15/1/2026
Ultima Actividad21/2/2026
ISPOrion Network Limited
🎯
2805
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
54
Malware

Geolocalizacion

Pais
🇬🇧 Reino Unido
Ciudad
City of London
ASN
AS58065
ISP
Orion Network Limited

Tipos de Ataque

cowrie

Puertos Atacados

22

Malware Asociado

Credenciales Intentadas

🔐345gs5662d34/345gs5662d34
19x
🔐root/1234rewq!
2x
🔐ubuntu/red123
2x
🔐root/3245gs5662d34
2x
🔐peer/peer2025
2x
🔐han/han123
2x
🔐sinusbot/sinusbot@123
1x
🔐tangjun/tangjun@123
1x
🔐alma/alma@123
1x
🔐root/!QAZ2wsx#
1x
🔐advantech/Password@123
1x
🔐netscreen/P@ssw0rd123
1x
🔐changrou/changrou123
1x
🔐admin/Huawei@123
1x
🔐github/123
1x

Comandos Ejecutados

$Enter new UNIX password:22x
$ls -lh $(which ls)19x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'19x
$lockr -ia .ssh19x
$uname -m19x
$top19x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'19x
$crontab -l19x
$cd ~; chattr -ia .ssh; lockr -ia .ssh19x
$whoami19x

Evaluacion de Riesgo

65
/100
BajoMedioAltoCritico