TROYANOSYVIRUS
Active ThreatLOW

112.173.117.101

Country of Origin🇰🇷 South Korea
First Detection1/2/2026
Last Activity3/25/2026
ISPKorea Telecom
🎯
36
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware

Geolocation

Country
🇰🇷 South Korea
City
Yeonje-gu
ASN
AS4766
ISP
Korea Telecom

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

Attempted Credentials

🔐admin/1admin!
1x
🔐admin/admin
1x
🔐admin/root123
1x

Executed Commands

$./oinasf; dd if=/proc/self/exe bs=22 count=1 || while read i; do echo $i; done < /proc/self/exe || cat /proc/self/exe;1x
$while read i1x
$./oinasf1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Risk Assessment

35
/100
LowMediumHighCritical