Active Threat • MEDIUM

5.231.70.68

Country of Origin🇩🇪 Germany

First Detection2/23/2026

Last Activity2/23/2026

ISPdataforest GmbH

🎯

163

Total Attacks

🔌

Ports

📡

Attack Types

🦠

Malware

Geolocation

Country: 🇩🇪 Germany
City: Frankfurt am Main
ASN: AS58212
ISP: dataforest GmbH

Attack Types

ssh_telnet_honeypot

Attacked Ports

Associated Malware

3b6409aecd4af0f82f5a...→

ThreatFox Intelabuse.ch

⚠️KNOWN C2 SERVER

Malware Families

elf.kaiji

Threat Types

botnet_cc

Confidence: 100%

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports

2280

Vulnerabilities

CVE-2013-0942CVE-2013-0941CVE-2012-4360CVE-2013-2765CVE-2009-0796CVE-2011-2688CVE-2011-1176CVE-2009-2299CVE-2007-4723CVE-2012-4001CVE-2013-4365CVE-2012-3526

CPEs

cpe:/a:apache:http_server:2.4.66cpe:/o:debian:debian_linuxcpe:/a:openbsd:openssh:9.2p1cpe:/o:linux:linux_kernel

Risk Assessment

/100

LowMediumHighCritical