Active Threat • HIGH

162.240.148.15

Country of Origin🇺🇸 United States

First Detection2/28/2026

Last Activity3/18/2026

ISPUnified Layer

🎯

573

Total Attacks

🔌

Ports

📡

Attack Types

🦠

Malware

Geolocation

Country: 🇺🇸 United States
City: Unknown
ASN: AS46606
ISP: Unified Layer

Attack Types

ssh_telnet_honeypot

Attacked Ports

Associated Malware

01ba4719c80b6fe911b0...→09a3e612f8cad1560057...→0ceb4447bd868ef28655...→118d86c2407af1381f7b...→28720365c5e7476a011e...→

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports

212653801101111434434655879939951194208220862087330688831143422022

Vulnerabilities

CVE-2025-32728CVE-2021-36368CVE-2025-63389CVE-2020-14145CVE-2023-48795CVE-2023-38408CVE-2025-26465CVE-2016-20012CVE-2020-15778CVE-2007-2768CVE-2019-16905CVE-2023-51767CVE-2023-51385CVE-2008-3844CVE-2021-41617

Hostnames

mail.vps-1266584.internal-atautomation.comwhm.vps-1266584.internal-atautomation.comwebmail.vps-1266584.internal-atautomation.comautoconfig.vps-1266584.internal-atautomation.comwebdisk.vps-1266584.internal-atautomation.comvps-1266584.internal-atautomation.comautodiscover.vps-1266584.internal-atautomation.comwww.vps-1266584.internal-atautomation.comiiotsupervisor-utr53a.comcpcontacts.vps-1266584.internal-atautomation.comcpanel.vps-1266584.internal-atautomation.comcpcalendars.vps-1266584.internal-atautomation.comipv6.vps-1266584.internal-atautomation.com

CPEs

cpe:/a:exim:exim:4.99.1cpe:/a:ollama:ollama:0.6.8cpe:/a:apache:http_servercpe:/a:mariadb:mariadbcpe:/a:openbsd:openssh:8.0

Risk Assessment

/100

LowMediumHighCritical