Active ThreatMEDIUM

185.196.8.161

Country of Origin🇨🇭 CH
First Detection1/9/2026
Last Activity1/9/2026
ISPGlobal-Data System IT Corporation
🎯
347
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
22
Malware

Geolocation

Country
🇨🇭 CH
City
Unknown
ASN
AS42624
ISP
Global-Data System IT Corporation

Attack Types

cowrie

Attacked Ports

22

Associated Malware

Attempted Credentials

🔐345gs5662d34/345gs5662d34
3x
🔐root/Server1234
1x
🔐root/ccc
1x
🔐root/Welcome@888!
1x
🔐admin/Qwerty!@#
1x
🔐ubuntu/w3lc0m3
1x
🔐admin1/admin11
1x
🔐root/ab@123
1x
🔐root/somepassword
1x
🔐admin1/3245gs5662d34
1x
🔐user/userP@ss
1x
🔐admin/3245gs5662d34
1x
🔐root/Admin@2024
1x
🔐ubuntu/Root2024!
1x
🔐ubuntu/Qwerty2024
1x

Executed Commands

$uname -m3x
$free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'3x
$cat /proc/cpuinfo | grep name | wc -l3x
$which ls3x
$cd ~; chattr -ia .ssh; lockr -ia .ssh3x
$lscpu | grep Model3x
$w3x
$crontab -l3x
$uname3x
$whoami3x

Risk Assessment

55
/100
LowMediumHighCritical
IP 185.196.8.161 - Detected Threat | TroyanosYVirus.com | TroyanosYVirus.com