TROYANOSYVIRUS
Active ThreatLOW

59.6.41.4

Country of Origin🇰🇷 South Korea
First Detection4/7/2026
Last Activity4/7/2026
ISPKorea Telecom
🎯
28
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware

Geolocation

Country
🇰🇷 South Korea
City
Seoul
ASN
AS4766
ISP
Korea Telecom

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

Attempted Credentials

🔐minoxidil4you/Minoxidil4you#
1x
🔐minoxidil4you/minoxidil4you@123
1x
🔐root/Passw0rd123
1x
🔐root/minoxidil4you123!
1x
🔐root:Passw0rd123/root:Passw0rd123
1x

Executed Commands

$uname -a1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
2122801613306
Vulnerabilities
CVE-2016-6294CVE-2002-0422CVE-2015-0232CVE-2022-31629CVE-2012-1171CVE-2000-0304CVE-2006-0026CVE-2016-7129CVE-2015-7804CVE-2014-3487CVE-2018-10549CVE-2019-6110CVE-2002-0148CVE-2018-15132CVE-2013-7456CVE-2008-1446CVE-2015-1351CVE-2000-0770CVE-2000-0631CVE-2016-5772
CPEs
cpe:/a:openbsd:openssh:5.3cpe:/a:oracle:mysql:5.6.20-logcpe:/a:microsoft:internet_information_services:5.0cpe:/a:php:php:5.3.27cpe:/o:microsoft:windows

Risk Assessment

25
/100
LowMediumHighCritical