TROYANOSYVIRUS
Active ThreatMEDIUM

195.161.21.219

Country of Origin🇷🇺 Russia
First Detection12/31/2025
Last Activity4/11/2026
ISPJSC RTComm.RU
🎯
38
Total Attacks
🔌
3
Ports
📡
3
Attack Types
🦠
2
Malware

Geolocation

Country
🇷🇺 Russia
City
Unknown
ASN
AS8342
ISP
JSC RTComm.RU

Attack Types

ssh_telnet_honeypot
redis_honeypot
tcp_trap

Attacked Ports

2263798081

Associated Malware

Attempted Credentials

🔐root/123456
1x
🔐root/password
1x

Executed Commands

$echo 1 > /dev/null && cat /bin/echo1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Risk Assessment

50
/100
LowMediumHighCritical