TROYANOSYVIRUS
Active ThreatMEDIUM

5.9.157.26

Country of Origin🇩🇪 Germany
First Detection4/21/2026
Last Activity4/21/2026
ISPHetzner Online GmbH
🎯
64
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
3
Malware

Geolocation

Country
🇩🇪 Germany
City
Falkenstein
ASN
AS24940
ISP
Hetzner Online GmbH

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

Attempted Credentials

🔐root/!@#$%^
4x
🔐root/!@#123qwe
4x
🔐root/!QAZ2wsx
3x

Executed Commands

$free -h | head -21x
$uname -a1x
$uptime1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
22251111235432
Hostnames
appsrv2.durst.shop
CPEs
cpe:/a:postgresql:postgresqlcpe:/a:openbsd:openssh:8.9p1cpe:/a:postfix:postfixcpe:/a:ntp:ntp:3

Risk Assessment

40
/100
LowMediumHighCritical