⚠TROYANOSYVIRUS
Active Threat • MEDIUM

152.200.205.179

Country of Origin🇨🇴 Colombia
First Detection1/9/2026
Last Activity1/9/2026
ISPCOLOMBIA TELECOMUNICACIONES S.A. ESP BIC
🎯
356
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
22
Malware

Geolocation

Country
🇨🇴 Colombia
City
Bogotá
ASN
AS3816
ISP
COLOMBIA TELECOMUNICACIONES S.A. ESP BIC

Attack Types

cowrie

Attacked Ports

22

Associated Malware

48b1340afb9bec262f7d...→6fd1a456582717008b0d...→28720365c5e7476a011e...→afd0dd76c8d59e416fec...→f8aac38134c3f1bfccc8...→

Attempted Credentials

🔐345gs5662d34/345gs5662d34
3x
🔐root/LeitboGi0ro
2x
🔐test1/admin256
1x
🔐user/adminqwe
1x
🔐frappe/qwe
1x
🔐userftp/123456
1x
🔐administrador/3245gs5662d34
1x
🔐user1/q1w2e3r4t5y6
1x
🔐postgres/P@ssword1
1x
🔐test/test1234
1x
🔐steam/abcd@1234
1x
🔐user/server2024
1x
🔐ubuntu/ubuntu1234
1x
🔐server/@dm!n
1x
🔐claude/1qa2ws3ed4rf
1x

Executed Commands

$crontab -l3x
$cat /proc/cpuinfo | grep model | grep name | wc -l3x
$which ls3x
$top3x
$w3x
$uname -m3x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'3x
$cat /proc/cpuinfo | grep name | wc -l3x
$cd ~; chattr -ia .ssh; lockr -ia .ssh3x
$lscpu | grep Model3x

Risk Assessment

55
/100
LowMediumHighCritical