⚠TROYANOSYVIRUS
Active Threat • CRITICAL

165.22.78.221

Country of Origin🇩🇪 Germany
First Detection1/11/2026
Last Activity1/15/2026
ISPDIGITALOCEAN-ASN
🎯
170
Total Attacks
🔌
11
Ports
📡
5
Attack Types
🦠
2
Malware

Geolocation

Country
🇩🇪 Germany
City
Frankfurt am Main
ASN
AS14061
ISP
DIGITALOCEAN-ASN

Attack Types

cowrie
honeytrap
h0neytr4p
mailoney
tanner

Attacked Ports

11434644380200060001234850090422325443

Associated Malware

506338c1fa2662331854...→9d1e0e2d9459d06523ad...→

Attempted Credentials

🔐User-Agent: Go-http-client/1.1/Connection: close
15x
🔐GET /solr/admin/info/system HTTP/1.1/Host: 51.222.138.43:23
3x
🔐GET /solr/admin/info/system HTTP/1.1/Host: 51.178.49.206:23
3x
🔐GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1/Host: 51.178.49.206:23
3x
🔐GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1/Host: 146.59.94.170:23
3x
🔐GET /solr/admin/info/system HTTP/1.1/Host: 146.59.94.170:23
3x
🔐GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1/Host: 51.222.138.43:23
3x
🔐User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)/Accept: */*
1x
🔐GET / HTTP/1.1/Host: 162.19.221.151:23
1x
🔐Accept-Encoding: gzip/(empty)
1x

Executed Commands

$User-Agent: Go-http-client/1.16x
$Connection: close6x

Risk Assessment

82
/100
LowMediumHighCritical