TROYANOSYVIRUS
Active Threat • LOW

207.154.250.192

Country of Origin🇺🇸 United States
First Detection4/17/2026
Last Activity4/17/2026
ISPDigitalOcean, LLC
🎯
24
Total Attacks
🔌
2
Ports
📡
2
Attack Types
🦠
0
Malware

Geolocation

Country
🇺🇸 United States
City
Unknown
ASN
AS14061
ISP
DigitalOcean, LLC

Attack Types

ssh_telnet_honeypot
tcp_trap

Attacked Ports

222222

Associated Malware

No associated malware

Attempted Credentials

🔐root/root
1x
🔐a/a
1x
🔐nil/(empty)
1x
🔐admin/admin
1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
212223258044551310992121300060006667800988889090
Vulnerabilities
CVE-2019-11358CVE-2019-12815CVE-2019-19269CVE-2020-11022CVE-2015-9251CVE-2011-4130CVE-2012-6095CVE-2019-19270CVE-2019-18217CVE-2011-1137CVE-2009-0543CVE-2009-3639CVE-2010-4652CVE-2008-7265CVE-2020-1938CVE-2021-46854CVE-2019-19271CVE-2019-19272CVE-2010-3867CVE-2020-11023
CPEs
cpe:/a:openbsd:openssh:8.9p1cpe:/o:debian:debian_linuxcpe:/a:apache:http_server:2.4.66cpe:/a:jquery:jquery:2.2.4cpe:/a:apache:tomcatcpe:/a:f5:nginx:1.25.4cpe:/a:php:php:8.5.2cpe:/a:f5:nginx:1.29.2cpe:/a:proftpd:proftpd:1.3.1cpe:/o:canonical:ubuntu_linuxcpe:/a:postfix:postfixcpe:/a:cloudflare:cloudflare

Risk Assessment

25
/100
LowMediumHighCritical