TROYANOSYVIRUS
Active Threat • LOW

193.233.127.72

Country of Origin🇷🇺 Russia
First Detection4/25/2026
Last Activity4/25/2026
ISPGlobal Connectivity Solutions Llp
🎯
24
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
2
Malware

Geolocation

Country
🇷🇺 Russia
City
Unknown
ASN
AS215540
ISP
Global Connectivity Solutions Llp

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

94f2e4d8d4436874785c...→fddc57b57be704bfc5ce...→

Attempted Credentials

🔐root/ubuntu
1x
🔐root/linux
1x
🔐root/debian
1x
🔐root/centos
1x

Executed Commands

$chmod +x ./.8453073541210163631/sshd;nohup ./.8453073541210163631/sshd 139.162.165.252 103.61.122.197 185.182.108.74 38.12.6.229 157.230.38.136 156.227.232.239 65.181.92.228 143.198.24.202 202.129.205.122 103.210.22.17 167.86.84.93 191.252.210.242 43.252.230.102 5.227.65.68 177.136.246.131 45.55.30.94 45.55.91.50 62.216.168.19 217.18.61.65 141.148.140.182 160.191.89.7 194.124.250.20 103.186.97.118 143.198.27.218 23.251.57.59 148.72.168.29 50.6.230.112 158.51.96.38 50.6.228.52 156.227.232.184 1591x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
22
Hostnames
141323.ip-ptr.tech

Risk Assessment

25
/100
LowMediumHighCritical