Amenaza ActivaALTO

20.40.73.192

Pais de Origen🇦🇺 Australia
Primera Deteccion18/1/2026
Ultima Actividad2/2/2026
ISPMicrosoft Corporation
🎯
1068
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
35
Malware

Geolocalizacion

Pais
🇦🇺 Australia
Ciudad
Sydney
ASN
AS8075
ISP
Microsoft Corporation

Tipos de Ataque

cowrie

Puertos Atacados

22

Malware Asociado

Credenciales Intentadas

🔐345gs5662d34/345gs5662d34
9x
🔐root/root
3x
🔐hg/123
1x
🔐marcel/marcel
1x
🔐centos/centos
1x
🔐user5/user5
1x
🔐wildfly/wildfly
1x
🔐bh/3245gs5662d34
1x
🔐root/123abc
1x
🔐teamspeak/test
1x
🔐demon/123
1x
🔐nikhil/123
1x
🔐vpnuser1/vpnuser1
1x
🔐greg/greg
1x
🔐supervisor/supervisor@123
1x

Comandos Ejecutados

$Enter new UNIX password:10x
$which ls9x
$uname9x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'9x
$df -h | head -n 2 | awk 'FNR == 2 {print $2;}'9x
$ls -lh $(which ls)9x
$lscpu | grep Model9x
$whoami9x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'9x
$lockr -ia .ssh9x

Evaluacion de Riesgo

65
/100
BajoMedioAltoCritico