⚠TROYANOSYVIRUS
Active Threat • MEDIUM

77.44.230.193

Country of Origin🇸🇾 SY
First Detection1/5/2026
Last Activity1/5/2026
ISPSyrian Telecommunication Private Closed Joint Stock Company
🎯
218
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
5
Malware

Geolocation

Country
🇸🇾 SY
City
Unknown
ASN
AS29256
ISP
Syrian Telecommunication Private Closed Joint Stock Company

Attack Types

cowrie

Attacked Ports

23

Associated Malware

aaa537576e46214ef570...→c307c8c93d6118bce28f...→f816c4c2d90b643cba23...→b4045e631f7802b4fb9f...→4e48590c9f54aed38ceb...→

Attempted Credentials

🔐root/5up
4x
🔐root/1001chin
4x
🔐support/support
3x
🔐admin1/password
3x
🔐root/realtek
3x
🔐admin/pass
3x
🔐root/hi3518
3x
🔐root/7ujMko0admin
3x
🔐guest/guest
3x
🔐root/aquario
3x
🔐root/7ujMko0vizxv
3x
🔐root/founder88
2x
🔐root/ikwb
2x
🔐user/user
2x
🔐admin/7ujMko0admin
2x

Executed Commands

$q10x
$system10x
$shell10x
$rm .s; exit5x
$sh5x
$enable5x
$dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s5x
$while read i5x
$tftp; wget; /bin/busybox JNPHT1x
$cat /proc/mounts; /bin/busybox JNPHT1x

Risk Assessment

50
/100
LowMediumHighCritical