TROYANOSYVIRUS
Active Threat β€’ MEDIUM

34.72.208.101

First Detection5/1/2026
Last Activity5/1/2026
ISPGoogle LLC
🎯
218
Total Attacks
πŸ”Œ
1
Ports
πŸ“‘
1
Attack Types
🦠
18
Malware

Geolocation

Country
πŸ‡ΊπŸ‡Έ United States
City
Council Bluffs
ASN
AS396982
ISP
Google LLC

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

Attempted Credentials

πŸ”root/Cs123456789
1x
πŸ”root/Zy123456789
1x
πŸ”admin/asdf
1x
πŸ”hadoop/3245gs5662d34
1x
πŸ”root/rhkg38yw4w
1x
πŸ”root/Hello2026
1x
πŸ”root/666999
1x
πŸ”ubuntu/Password@123
1x
πŸ”root/Mq@123456
1x
πŸ”root/alexander123
1x
πŸ”guest/qwer1234
1x
πŸ”github/changeme
1x
πŸ”root/123+123
1x
πŸ”root/Admin-2025
1x
πŸ”root/sysadm
1x

Executed Commands

$Enter new UNIX password:2x
$echo "1234567\nUGDQC2zur73H\nUGDQC2zur73H\n"|passwd1x
$ls -lh $(which ls)1x
$cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'1x
$uname -a1x
$w1x
$cat /proc/cpuinfo | grep name | wc -l1x
$crontab -l1x
$cat /proc/cpuinfo | grep model | grep name | wc -l1x
$which ls1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
22
Hostnames
101.208.72.34.bc.googleusercontent.com
CPEs
cpe:/a:openbsd:openssh:8.2p1cpe:/o:canonical:ubuntu_linux

Risk Assessment

55
/100
LowMediumHighCritical