TROYANOSYVIRUS
Active ThreatLOW

159.89.31.79

Country of Origin🇩🇪 Germany
First Detection4/22/2026
Last Activity4/23/2026
ISPDigitalOcean, LLC
🎯
38
Total Attacks
🔌
2
Ports
📡
2
Attack Types
🦠
0
Malware

Geolocation

Country
🇩🇪 Germany
City
Frankfurt am Main
ASN
AS14061
ISP
DigitalOcean, LLC

Attack Types

ssh_telnet_honeypot
tcp_trap

Attacked Ports

222222

Associated Malware

No associated malware

Attempted Credentials

🔐a/a
2x
🔐nil/(empty)
2x
🔐root/root
1x
🔐admin/admin
1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
212223804455131099212122223000543260006667800980819090
Vulnerabilities
CVE-2022-28615CVE-2009-2299CVE-2008-3259CVE-2010-4150CVE-2011-4885CVE-2016-4538CVE-2016-7416CVE-2015-4603CVE-2016-6295CVE-2013-1635CVE-2007-4850CVE-2018-10545CVE-2012-0053CVE-2011-3639CVE-2017-7272CVE-2009-3560CVE-2018-10548CVE-2011-1468CVE-2015-6837CVE-2007-6750
CPEs
cpe:/a:f5:nginx:1.25.4cpe:/a:apache:http_server:2.2.8cpe:/a:openbsd:openssh:4.7p1cpe:/a:php:php:5.2.4cpe:/a:golang:gocpe:/a:openbsd:openssh:8.9p1cpe:/a:postgresql:postgresql:8.3cpe:/a:caddyserver:caddycpe:/o:canonical:ubuntu_linuxcpe:/a:jquery:jquery:2.2.4cpe:/o:linux:linux_kernelcpe:/a:cloudflare:cloudflarecpe:/a:proftpd:proftpd:1.3.1

Risk Assessment

30
/100
LowMediumHighCritical