TROYANOSYVIRUS
Active Threat β€’ HIGH

172.86.123.220

First Detection4/20/2026
Last Activity4/20/2026
ISPRouterHosting LLC
🎯
65
Total Attacks
πŸ”Œ
12
Ports
πŸ“‘
8
Attack Types
🦠
0
Malware

Geolocation

Country
πŸ‡ΊπŸ‡Έ United States
City
Dallas
ASN
AS14956
ISP
RouterHosting LLC

Attack Types

tcp_trap
ssh_telnet_honeypot
yaml_exploit_honeypot
redis_honeypot
elasticsearch_honeypot
malware_capture
web_honeypot
cisco_asa_honeypot

Attacked Ports

212223804434451433188333066379920027017

Associated Malware

No associated malware

Attempted Credentials

πŸ”GET / HTTP/1.1/Host:
1x
πŸ”EHLO zern.io/?
1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
223389
Hostnames
220.123.86.172.static.cloudzy.com
CPEs
cpe:/a:openbsd:openssh:for_Windows_9.5

Risk Assessment

60
/100
LowMediumHighCritical