TROYANOSYVIRUS
Active Threat • MEDIUM

157.245.10.239

Country of Origin🇺🇸 United States
First Detection3/30/2026
Last Activity3/31/2026
ISPDigitalOcean, LLC
🎯
515
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
2
Malware

Geolocation

Country
🇺🇸 United States
City
Clifton
ASN
AS14061
ISP
DigitalOcean, LLC

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

7063dece7cccf374d9fa...→a1159e9df3670d549d04...→

Attempted Credentials

🔐user/monkey
2x
🔐user/123456789
2x
🔐root/12345678
2x
🔐user/qwerty
2x
🔐user/letmein
2x
🔐user/root
2x
🔐user/dragon
2x
🔐user/password
2x
🔐root/123456789
2x
🔐user/12345678
2x
🔐user/admin
2x
🔐root/admin
2x
🔐user/welcome
2x
🔐root/123456
2x
🔐user/123456
2x

Executed Commands

$hostname1x
$pwd1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
2280500059006080
Vulnerabilities
CVE-2020-29396CVE-2009-2940CVE-2025-13837CVE-2025-13836CVE-2021-32052CVE-2009-3720CVE-2025-12084CVE-2025-12781CVE-2025-6075
CPEs
cpe:/o:linux:linux_kernelcpe:/a:openbsd:openssh:10.0p2cpe:/a:python:python:3.13.7cpe:/o:canonical:ubuntu_linuxcpe:/a:f5:nginx:1.28.0

Risk Assessment

45
/100
LowMediumHighCritical