Active Threat • HIGH

111.20.145.238

Country of Origin🇨🇳 China

First Detection1/6/2026

Last Activity4/30/2026

ISPChina Mobile Communications Group Co., Ltd.

🎯

71

Total Attacks

🔌

4

Ports

📡

2

Attack Types

🦠

1

Malware

Geolocation

Country: 🇨🇳 China
City: Unknown
ASN: AS9808
ISP: China Mobile Communications Group Co., Ltd.

Attack Types

ssh_telnet_honeypot

tcp_trap

Attacked Ports

2222221000222222

Associated Malware

6fa4c8ac58e7a1d947dc...→

Attempted Credentials

🔐root/------fuck------

1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports

1239000

CPEs

cpe:/a:ntp:ntp:3

Risk Assessment

60

/100

LowMediumHighCritical