TROYANOSYVIRUS
Active Threat β€’ HIGH

166.1.60.230

First Detection3/14/2026
Last Activity3/31/2026
ISPBaykov Ilya Sergeevich
🎯
642
Total Attacks
πŸ”Œ
1
Ports
πŸ“‘
1
Attack Types
🦠
29
Malware

Geolocation

Country
πŸ‡ΊπŸ‡Έ United States
City
Secaucus
ASN
AS41745
ISP
Baykov Ilya Sergeevich

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

Attempted Credentials

πŸ”345gs5662d34/345gs5662d34
5x
πŸ”root/10203040
1x
πŸ”usuarioftp/Usuarioftp123!
1x
πŸ”wpuser/wpuser123!
1x
πŸ”Guest/12345
1x
πŸ”ve/password
1x
πŸ”mikrotik/Mikrotik123
1x
πŸ”cody/Cody123!
1x
πŸ”root/nas
1x
πŸ”root/Me123456.
1x
πŸ”mikrotik/3245gs5662d34
1x
πŸ”root/0123456
1x
πŸ”marissa/123
1x
πŸ”puppet/12345
1x
πŸ”root/passion
1x

Executed Commands

$Enter new UNIX password:8x
$lscpu | grep Model6x
$whoami6x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'6x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'6x
$lockr -ia .ssh6x
$which ls5x
$uname5x
$cd ~; chattr -ia .ssh; lockr -ia .ssh5x
$ls -lh $(which ls)5x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Risk Assessment

65
/100
LowMediumHighCritical