Active Threat • MEDIUM

209.38.20.25

Country of Origin🇦🇺 Australia

First Detection3/26/2026

Last Activity3/26/2026

ISPDigitalOcean, LLC

🎯

94

Total Attacks

🔌

1

Ports

📡

1

Attack Types

🦠

19

Malware

Geolocation

Country: 🇦🇺 Australia
City: Sydney
ASN: AS14061
ISP: DigitalOcean, LLC

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

09a3e612f8cad1560057...→28720365c5e7476a011e...→28ba533b0f3c4df63d6b...→328465f9fae87d90eb84...→3f1f9a5db692d999bb3d...→

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports

2280

Vulnerabilities

CVE-2025-23419CVE-2023-44487

CPEs

cpe:/a:f5:nginx:1.24.0cpe:/a:openbsd:openssh:9.6p1cpe:/o:linux:linux_kernelcpe:/o:canonical:ubuntu_linux

Risk Assessment

45

/100

LowMediumHighCritical