TROYANOSYVIRUS
Active ThreatLOW

85.11.167.130

Country of Origin🇧🇬 BG
First Detection4/30/2026
Last Activity4/30/2026
ISPColocaTel Inc.
🎯
48
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware

Geolocation

Country
🇧🇬 BG
City
Sofia
ASN
AS213438
ISP
ColocaTel Inc.

Attack Types

ssh_telnet_honeypot

Attacked Ports

23

Associated Malware

Attempted Credentials

🔐root/root
2x
🔐root/123456
1x
🔐telecomadmin/admintelecom
1x
🔐hikvision/hikvision
1x
🔐root/(empty)
1x

Executed Commands

$./6x
$cat /proc3x
$echo SHELL_TEST3x
$/bin/busybox TEST3x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Risk Assessment

25
/100
LowMediumHighCritical