TROYANOSYVIRUS
Active Threat • MEDIUM

201.42.31.74

Country of Origin🇧🇷 Brazil
First Detection4/21/2026
Last Activity4/22/2026
ISPTELEFONICA BRASIL S.A
🎯
68
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware

Geolocation

Country
🇧🇷 Brazil
City
São Paulo
ASN
AS27699
ISP
TELEFONICA BRASIL S.A

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

28ba533b0f3c4df63d6b...→

Attempted Credentials

🔐root/Minoxidil4you2023@
2x
🔐root/Minoxidil4you#2025
1x
🔐root/!2024Minoxidil4you
1x
🔐root/minoxidil4you@2024
1x
🔐root/2024$minoxidil4you
1x
🔐root/minoxidil4you@2023
1x
🔐minoxidil4you/1234.minoxidil4you
1x
🔐root/minoxidil4you2024@
1x
🔐root/2024minoxidil4you
1x
🔐root/$2023Minoxidil4you
1x
🔐minoxidil4you/minoxidil4you#2025
1x
🔐root/Minoxidil4you!@#123
1x

Executed Commands

$uname -a1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
222580111443465587993204922242226223280961005010051
Hostnames
201-42-31-74.dsl.telesp.net.brsmtp.proserviceon.com.brpop.proserviceon.com.brimap.proserviceon.com.brmail.proserviceon.com.br
CPEs
cpe:/a:openbsd:openssh:9.2p1cpe:/a:openresty:openrestycpe:/a:f5:nginxcpe:/a:openbsd:openssh:9.6p1cpe:/a:jquery:jquerycpe:/a:microsoft:asp.netcpe:/o:debian:debian_linuxcpe:/a:postfix:postfixcpe:/a:getbootstrap:bootstrap:3.4.1cpe:/o:canonical:ubuntu_linuxcpe:/o:linux:linux_kernelcpe:/a:lodash:lodashcpe:/a:jellyfin:jellyfin:10.11.6cpe:/a:openbsd:openssh:8.9p1

Risk Assessment

40
/100
LowMediumHighCritical