Active Threat • LOW
101.76.205.122
Country of Origin🇨🇳 China
First Detection4/12/2026
Last Activity4/12/2026
ISPChina Education and Research Network Center
🎯
37
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
4
Malware
Geolocation
- Country
- 🇨🇳 China
- City
- Unknown
- ASN
- AS4538
- ISP
- China Education and Research Network Center
Attack Types
adb_honeypot
Attacked Ports
5555
Associated Malware
Executed Commands
$
rm -rf /data/local/tmp/*4x$
ps | grep log2x$
/data/local/tmp/nohup su -c /data/local/tmp/log2x$
pm install /data/local/tmp/tv.apk2x$
am start -n com.google.home.tv/com.example.test.MainActivity2x$
/data/local/tmp/nohup /data/local/tmp/log2x$
chmod 0755 /data/local/tmp/nohup2x$
ps | grep rig2x$
rm -f /data/local/tmp/tv.apk2x$
pm path com.google.home.tv2xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Ports
804438080
Hostnames
www.sdu.edu.cnowa.sdu.edu.cnsdu.edu.cnautodiscover.sdu.edu.cnmail.sdu.edu.cn
CPEs
cpe:/a:f5:nginx
Risk Assessment
30
/100
LowMediumHighCritical