Active Threat • HIGH
172.86.116.48
🎯
114
Total Attacks
🔌
2
Ports
📡
2
Attack Types
🦠
18
Malware
Geolocation
- Country
- 🇺🇸 United States
- City
- Dallas
- ASN
- AS14956
- ISP
- RouterHosting LLC
Attack Types
ssh_telnet_honeypot
voip_honeypot
Attacked Ports
225060
Associated Malware
Attempted Credentials
🔐root/QWE@!@#
1x🔐root/dog
1x🔐root/netnumen
1x🔐root/admin@!QAZ2wsx
1x🔐root/t3r0rr1st
1x🔐root/Qwer123
1x🔐root/zaxscdvfbgnhmj,k.l/;
1x🔐root/root02#123
1x🔐root/azsxdcfvgbhn
1xExecuted Commands
$
lscpu | grep Model1x$
ls -lh $(which ls)1x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'1x$
uname -a1x$
w1x$
cat /proc/cpuinfo | grep name | wc -l1x$
crontab -l1x$
cat /proc/cpuinfo | grep model | grep name | wc -l1x$
which ls1x$
uname1xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Ports
2122255380110143443465587993995800080839443
Hostnames
mail.worthitwindows.comhostclt.duckdns.orgwww.hostclt.duckdns.org48.116.86.172.static.cloudzy.com
CPEs
cpe:/a:f5:nginxcpe:/a:angularjs:angular.jscpe:/a:openbsd:openssh:8.9p1cpe:/a:portainer:portainer:2.33.6
Risk Assessment
75
/100
LowMediumHighCritical