TROYANOSYVIRUS
Active Threat • LOW

1.53.110.92

Country of Origin🇻🇳 Vietnam
First Detection3/19/2026
Last Activity3/19/2026
ISPFPT Telecom Company
🎯
24
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
2
Malware

Geolocation

Country
🇻🇳 Vietnam
City
Hanoi
ASN
AS18403
ISP
FPT Telecom Company

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

1b1e905c93ca90f78400...→94f2e4d8d4436874785c...→

Attempted Credentials

🔐root/ubuntu
1x
🔐root/linux
1x
🔐root/debian
1x
🔐root/centos
1x

Executed Commands

$chmod +x ./.5857407181261915406/sshd;nohup ./.5857407181261915406/sshd 103.166.226.235 36.137.79.219 91.99.78.20 103.139.101.114 115.68.217.228 183.94.33.160 183.131.107.184 198.46.253.100 45.118.144.36 148.72.168.29 158.51.96.38 47.97.42.134 159.65.235.41 166.1.144.75 106.13.57.206 36.155.114.218 101.69.132.194 180.76.225.49 112.217.86.2 5.253.41.54 177.234.250.10 86.111.189.27 144.31.190.135 103.210.22.17 45.156.24.98 137.184.53.92 115.190.87.147 50.6.231.169 77.239.108.0 59.110.83.71 123.234.1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
535380831913225565
CPEs
cpe:/a:minecraft:minecraft

Risk Assessment

25
/100
LowMediumHighCritical