TROYANOSYVIRUS
Active Threat • MEDIUM

91.98.225.226

Country of Origin🇩🇪 Germany
First Detection4/21/2026
Last Activity4/22/2026
ISPHetzner Online GmbH
🎯
83
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware

Geolocation

Country
🇩🇪 Germany
City
Nuremberg
ASN
AS24940
ISP
Hetzner Online GmbH

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

28ba533b0f3c4df63d6b...→

Attempted Credentials

🔐root/1234$minoxidil4you
2x
🔐root/minoxidil4you2020
2x
🔐minoxidil4you/2024minoxidil4you
1x
🔐root/Minoxidil4you2026#
1x
🔐minoxidil4you/Minoxidil4you2024
1x
🔐minoxidil4you/minoxidil4you2023
1x
🔐minoxidil4you/minoxidil4you#2026
1x
🔐root/Minoxidil4you.2022
1x
🔐minoxidil4you/minoxidil4you.1234
1x
🔐minoxidil4you/Minoxidil4you#2026
1x
🔐root/minoxidil4you1234@
1x
🔐admin/Minoxidil4you@123
1x
🔐root/2026#Minoxidil4you
1x
🔐minoxidil4you/Admin1234
1x

Executed Commands

$uname -a1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
2280
Vulnerabilities
CVE-2023-44487CVE-2025-23419
Hostnames
static.226.225.98.91.clients.your-server.de
CPEs
cpe:/a:openbsd:openssh:9.6p1cpe:/a:f5:nginx:1.24.0cpe:/o:canonical:ubuntu_linuxcpe:/o:linux:linux_kernel

Risk Assessment

40
/100
LowMediumHighCritical