TROYANOSYVIRUS
Monthly Report

March 2026

Complete analysis of malicious activity detected during the month.

12,832,829
Total Attacks
52244
Unique IPs
17912
Malware Samples
10
Source Countries

Top Countries

1🇸🇬SG
2,441,078
2🇺🇸US
1,939,091
3🇳🇱NL
1,086,936
4🇸🇨SC
838,788
5🇷🇴RO
759,765
6🇩🇪DE
672,657
7🇮🇳IN
381,594
8🇮🇩ID
374,367
9🇭🇰HK
361,453
10🇺🇦UA
304,070

Top Malicious IPs

#IPCountryAttacksRisk
1217.217.253.12🇸🇬1,658,64955
2192.169.88.9🇺🇸718,44060
3194.50.16.198🇳🇱509,674100
4167.99.137.131🇩🇪451,53342
5103.141.235.46🇸🇬378,88255
6160.119.76.47🇸🇨290,80860
7154.91.64.84🇸🇨208,43255
862.149.25.72🇺🇦208,04145
945.142.193.233🇷🇴177,32455
10188.166.127.177🇳🇱143,67755
11154.91.90.45🇸🇨143,52155
12172.110.223.68🇭🇰126,27345
13187.108.1.130🇧🇷108,64375
148.216.133.44🇸🇬106,09455
152.57.122.177🇷🇴95,91780

Top Malware

12188x
11682x
11451x
11248x
11161x
11160x
11160x
11153x
11148x
11147x

Top Commands

1lockr -ia .ssh12,167x
2Enter new UNIX password:12,161x
3cd ~; chattr -ia .ssh; lockr -ia .ssh11,028x
4cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nza...10,819x
5uname -a10,168x
6cat /proc/cpuinfo | grep name | wc -l10,005x
7crontab -l10,003x
8uname -m9,997x
9cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$...9,969x
10free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'9,960x