TROYANOSYVIRUS
Active ThreatMEDIUM

111.39.190.137

Country of Origin🇨🇳 China
First Detection3/25/2026
Last Activity4/23/2026
ISPChina Mobile Communications Group Co., Ltd.
🎯
17
Total Attacks
🔌
3
Ports
📡
2
Attack Types
🦠
1
Malware

Geolocation

Country
🇨🇳 China
City
Unknown
ASN
AS9808
ISP
China Mobile Communications Group Co., Ltd.

Attack Types

ssh_telnet_honeypot
tcp_trap

Attacked Ports

22202260022

Associated Malware

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
2212350608686888090009100
Vulnerabilities
CVE-2020-14145CVE-2020-15778CVE-2021-41617CVE-2023-51767CVE-2025-32728CVE-2021-28041CVE-2023-38408CVE-2008-3844CVE-2020-12062CVE-2007-2768CVE-2023-51385CVE-2023-48795CVE-2021-36368CVE-2025-26465CVE-2016-20012
CPEs
cpe:/a:openbsd:openssh:8.2cpe:/a:ntp:ntp:3

Risk Assessment

50
/100
LowMediumHighCritical