TROYANOSYVIRUS
Active Threat • MEDIUM

102.22.27.146

Country of Origin🇬🇭 GH
First Detection3/31/2026
Last Activity4/1/2026
ISPdds55
🎯
2,080
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware

Geolocation

Country
🇬🇭 GH
City
Accra
ASN
AS37350
ISP
dds55

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

28ba533b0f3c4df63d6b...→

Attempted Credentials

🔐systems/Itsemoemo2025@Washere2025
12x
🔐root/Itsemoemo2025@Fuck@allPBX
11x
🔐systems/Itsemoemo2025@Fuck@allPBX
10x
🔐systems/ZabTharwat@2016
9x
🔐systems/ItsemoemoWashere2023support
9x
🔐admin/Itsemoemo2025@Fuck@allPBX
9x
🔐systems/vivo@01011
9x
🔐systems/ZabTharwat@2026
8x
🔐root/Itsemoemo2025@Washere2025
8x
🔐admin/Itsemoemo2025@Washere2025
8x
🔐systems/ZabTharwat@2025
7x
🔐issabel/Itsemoemo2025@Washere2025
6x
🔐admin2/Itsemoemo2025@Washere2025
6x
🔐emoss/Itsemoemo2025@Washere2025
6x
🔐issabel/Itsemoemo2025@Fuck@allPBX
6x

Executed Commands

$uname -a3x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
222580143443993995506080899100
Vulnerabilities
CVE-2015-4116CVE-2024-42516CVE-2016-6289CVE-2016-3185CVE-2024-47252CVE-2017-8923CVE-2014-9426CVE-2015-2348CVE-2009-2299CVE-2019-9021CVE-2019-0217CVE-2023-38709CVE-2016-5094CVE-2020-13938CVE-2012-4360CVE-2013-2765CVE-2016-5771CVE-2017-12868CVE-2006-20001CVE-2015-9253
Hostnames
iom.dlp.africa
CPEs
cpe:/a:jquery:jquery_ui:1.11.4cpe:/a:jquery:jquery:1.11.2cpe:/a:php:php:5.4.16cpe:/a:openbsd:openssh:7.4cpe:/o:centos:centoscpe:/a:openssl:openssl:1.0.2kcpe:/a:postfix:postfixcpe:/a:apache:http_server:2.4.6cpe:/a:getbootstrap:bootstrap:5.2.0

Risk Assessment

45
/100
LowMediumHighCritical