TROYANOSYVIRUS
Active Threat โ€ข MEDIUM

186.118.142.245

First Detection5/6/2026
Last Activity5/6/2026
ISPCOLOMBIA TELECOMUNICACIONES S.A. ESP BIC
๐ŸŽฏ
184
Total Attacks
๐Ÿ”Œ
1
Ports
๐Ÿ“ก
1
Attack Types
๐Ÿฆ 
19
Malware

Geolocation

Country
๐Ÿ‡จ๐Ÿ‡ด Colombia
City
Bogotรก
ASN
AS3816
ISP
COLOMBIA TELECOMUNICACIONES S.A. ESP BIC

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

Attempted Credentials

๐Ÿ”ubuntu/Qwe123
1x
๐Ÿ”admin/pass@word1
1x
๐Ÿ”admin/root2024
1x
๐Ÿ”test/3245gs5662d34
1x
๐Ÿ”admin/55555
1x
๐Ÿ”ftp_user/ftp_user123
1x
๐Ÿ”kafka/kafka@2024
1x
๐Ÿ”lee/test123
1x
๐Ÿ”debian/debian@2024
1x
๐Ÿ”ubuntu/1024
1x
๐Ÿ”server/p@ssw0rd
1x
๐Ÿ”ubuntu/ABCabc123!@#
1x
๐Ÿ”root/server1212
1x
๐Ÿ”ubuntu/Password1234
1x
๐Ÿ”testing/12345678
1x

Executed Commands

$Enter new UNIX password:2x
$echo -e "test777\nYkgW4I9RICWP\nYkgW4I9RICWP"|passwd|bash1x
$ls -lh $(which ls)1x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'1x
$uname -a1x
$w1x
$cat /proc/cpuinfo | grep name | wc -l1x
$crontab -l1x
$cat /proc/cpuinfo | grep model | grep name | wc -l1x
$which ls1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Risk Assessment

55
/100
LowMediumHighCritical
IP 186.118.142.245 - Detected Threat | TroyanosYVirus.com | TroyanosYVirus.com