Active Threat • LOW

174.34.132.104

Country of Origin🇺🇸 United States

First Detection5/4/2026

Last Activity5/4/2026

ISPLeaseweb USA, Inc.

🎯

330

Total Attacks

🔌

Ports

📡

Attack Types

🦠

Malware

Geolocation

Country: 🇺🇸 United States
City: Dallas
ASN: AS394380
ISP: Leaseweb USA, Inc.

Attack Types

ssh_telnet_honeypot

Attacked Ports

Associated Malware

No associated malware

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports

21222653801101111434434655879939951883207920822083208620873306484886638666

Vulnerabilities

CVE-2025-32728CVE-2021-36368CVE-2016-20012CVE-2021-41617CVE-2025-26465CVE-2024-6387CVE-2023-38408CVE-2008-3844CVE-2007-2768CVE-2023-48795CVE-2023-51385CVE-2023-51767CVE-2026-35414

Hostnames

mail.server.nermil.netcpanel.server.nermil.netwww.server.nermil.netwebmail.server.nermil.netcpcontacts.server.nermil.netcpcalendars.server.nermil.netserver.nermil.netautodiscover.server.nermil.netipv6.server.nermil.netnermil.netwhm.server.nermil.netautoconfig.server.nermil.netwebdisk.server.nermil.net

CPEs

cpe:/a:cpanel:cpanelcpe:/a:openbsd:openssh:8.7cpe:/a:exim:exim:4.99.1cpe:/a:apache:tomcatcpe:/a:oracle:glassfish_servercpe:/a:eclipse:mosquitto:2.0.22cpe:/a:apache:http_servercpe:/a:mariadb:mariadb:10.6.25-MariaDBcpe:/a:oracle:jre

Risk Assessment

/100

LowMediumHighCritical