Active Threat • MEDIUM
176.65.132.242
Country of Origin🇩🇪 Germany
First Detection4/30/2026
Last Activity4/30/2026
ISPPfcloud UG (haftungsbeschrankt)
🎯
1,262
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
1
Malware
Geolocation
- Country
- 🇩🇪 Germany
- City
- Unknown
- ASN
- AS51396
- ISP
- Pfcloud UG (haftungsbeschrankt)
Attack Types
ssh_telnet_honeypot
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐whzhu/123
1x🔐mhchu/123456
1x🔐nifi/!@#
1x🔐prueba/123456
1x🔐bpadmin/bpadmin
1x🔐ceshi/123456
1x🔐nginx/letmein
1x🔐shyunchen/shyunchen
1x🔐user/19621962
1x🔐kolosal/kolosal
1x🔐git/321123
1x🔐emuser/emuser
1x🔐linda/1234
1x🔐frappe/Frappe
1x🔐alex/123456
1xExecuted Commands
$
uname -s -v -n -r -m2xThreatFox Intelabuse.ch
⚠️KNOWN C2 SERVER
Malware Families
win.cobalt_strike
Threat Types
botnet_cc
Confidence: 100%
Shodan InternetDB ExposureShodan
InternetDB data, not real-time
Ports
80
Vulnerabilities
CVE-2024-4577CVE-2024-11233CVE-2021-21708CVE-2025-14177CVE-2024-11236CVE-2025-1219CVE-2024-5585CVE-2024-9026CVE-2024-3096CVE-2023-3824CVE-2013-2220CVE-2025-1736CVE-2023-3247CVE-2022-31631CVE-2022-31625CVE-2025-14178CVE-2024-3566CVE-2024-8929CVE-2024-8927CVE-2007-3205
CPEs
cpe:/a:php:php:8.1.2
Risk Assessment
45
/100
LowMediumHighCritical