Active Threat • LOW

120.208.156.149

Country of Origin🇨🇳 China

First Detection4/19/2026

Last Activity4/19/2026

ISPChina Mobile communications corporation

🎯

24

Total Attacks

🔌

1

Ports

📡

1

Attack Types

🦠

2

Malware

Geolocation

Country: 🇨🇳 China
City: Unknown
ASN: AS56042
ISP: China Mobile communications corporation

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

56c5ae7d4831a838ea39...→9f86d081884c7d659a2f...→

Attempted Credentials

🔐root/123456789

2x

🔐root/123456

1x

🔐root/1234567

1x

Executed Commands

$echo -n test>/tmp/.config1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Risk Assessment

25

/100

LowMediumHighCritical