TROYANOSYVIRUS
Active ThreatHIGH

107.189.30.132

Country of Origin🇱🇺 LU
First Detection3/26/2026
Last Activity4/23/2026
ISPFranTech Solutions
🎯
419
Total Attacks
🔌
58
Ports
📡
4
Attack Types
🦠
0
Malware

Geolocation

Country
🇱🇺 LU
City
Unknown
ASN
AS53667
ISP
FranTech Solutions

Attack Types

adb_honeypot
web_honeypot
tcp_trap
credential_capture

Attacked Ports

80108024653128555560426666749780508089888890509090959598981000910012100841024615147+38

Associated Malware

No associated malware

Attempted Credentials

🔐root/root
2x
🔐123456/123456
2x
🔐root/123456
2x
🔐admin/123456
2x
🔐1234/1234
2x
🔐123/123
2x
🔐admin/admin
2x
🔐12345/12345
2x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
22
Hostnames
tar.iconmarkethub.com
CPEs
cpe:/o:debian:debian_linuxcpe:/o:linux:linux_kernelcpe:/a:openbsd:openssh:8.4p1

Risk Assessment

75
/100
LowMediumHighCritical