Amenaza Activa • MEDIO
121.228.31.181
🎯
170
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
18
Malware
Geolocalizacion
- Pais
- 🇨🇳 China
- Ciudad
- Desconocida
- ASN
- AS4134
- ISP
- Chinanet
Tipos de Ataque
cowrie
Puertos Atacados
22
Malware Asociado
Credenciales Intentadas
🔐aws/Password1
1x🔐uploader/uploader123
1x🔐logstash/P@ssw0rd
1x🔐unraid/1
1x🔐ansible/123
1x🔐ctxsys/12345678
1x🔐debian/debian2026
1x🔐dynamics/dynamics!
1x🔐chef/P@ssw0rd
1x🔐unraid/3245gs5662d34
1x🔐netgear/netgear!
1x🔐websphere/P@ssw0rd123
1x🔐kafka/kafka1234!
1x🔐root/default
1x🔐k8s/123
1xComandos Ejecutados
$
lscpu | grep Model1x$
ls -lh $(which ls)1x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'1x$
Enter new UNIX password: 1x$
uname -a1x$
echo -e "1\nko2mSlGBrRjd\nko2mSlGBrRjd"|passwd|bash1x$
w1x$
cat /proc/cpuinfo | grep name | wc -l1x$
echo "1\nko2mSlGBrRjd\nko2mSlGBrRjd\n"|passwd1x$
crontab -l1xEvaluacion de Riesgo
55
/100
BajoMedioAltoCritico