Active Threat • HIGH
131.255.240.10
Country of Origin🇦🇷 Argentina
First Detection3/21/2026
Last Activity4/1/2026
ISPSM COMUNICACIONES S.R.L.
🎯
803
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
30
Malware
Geolocation
- Country
- 🇦🇷 Argentina
- City
- Salta
- ASN
- AS269810
- ISP
- SM COMUNICACIONES S.R.L.
Attack Types
ssh_telnet_honeypot
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐345gs5662d34/345gs5662d34
7x🔐root/3245gs5662d34
3x🔐root/abc1234.
1x🔐michael/Michael123
1x🔐root/202501
1x🔐business/1234
1x🔐root/woaini@123
1x🔐root/Qwerty@2025
1x🔐root/asd@qwe123
1x🔐root/Adm1n!
1x🔐root/black
1x🔐root/123678
1x🔐root/123qwe123
1x🔐root/open
1x🔐root/LINUX
1xExecuted Commands
$
Enter new UNIX password:8x$
ls -lh $(which ls)7x$
cd ~; chattr -ia .ssh; lockr -ia .ssh7x$
w7x$
cat /proc/cpuinfo | grep name | wc -l7x$
crontab -l7x$
cat /proc/cpuinfo | grep model | grep name | wc -l7x$
which ls7x$
uname7x$
whoami7xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Ports
82919072908291759176
Vulnerabilities
CVE-2019-11048CVE-2020-7061CVE-2019-13224CVE-2020-7069CVE-2017-8923CVE-2019-11046CVE-2020-7060CVE-2019-11050CVE-2019-11047CVE-2020-7066CVE-2022-37454CVE-2019-11044CVE-2020-7062CVE-2020-7070CVE-2019-11045CVE-2020-7063CVE-2013-2220CVE-2020-7064CVE-2024-3566CVE-2019-11043
CPEs
cpe:/a:php:php:7.2.22
Risk Assessment
65
/100
LowMediumHighCritical