⚠TROYANOSYVIRUS
Active Threat • HIGH

178.128.203.23

Country of Origin🇩🇪 Germany
First Detection2/13/2026
Last Activity2/17/2026
ISPDigitalOcean, LLC
🎯
93
Total Attacks
🔌
12
Ports
📡
3
Attack Types
🦠
2
Malware

Geolocation

Country
🇩🇪 Germany
City
Frankfurt am Main
ASN
AS14061
ISP
DigitalOcean, LLC

Attack Types

h0neytr4p
cowrie
honeytrap

Attacked Ports

23443123419112525489164438086850090421143418789

Associated Malware

6a031bec86a91a28b1f5...→9d1e0e2d9459d06523ad...→

Attempted Credentials

🔐User-Agent: Go-http-client/1.1/Connection: close
6x
🔐GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1/Host: 15.235.184.72:23
3x
🔐GET /solr/admin/info/system HTTP/1.1/Host: 15.235.184.72:23
3x
🔐GET / HTTP/1.1/Host: 15.235.184.72:23
1x
🔐User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)/Accept: */*
1x

Executed Commands

$Accept-Encoding: gzip2x

Risk Assessment

67
/100
LowMediumHighCritical