Active Threat • HIGH
211.72.129.211
Country of Origin🇹🇼 Taiwan
First Detection1/23/2026
Last Activity4/12/2026
ISPData Communication Business Group
🎯
293
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
24
Malware
Geolocation
- Country
- 🇹🇼 Taiwan
- City
- Taichung
- ASN
- AS3462
- ISP
- Data Communication Business Group
Attack Types
ssh_telnet_honeypot
Attacked Ports
22
Associated Malware
Attempted Credentials
🔐345gs5662d34/345gs5662d34
4x🔐root/3245gs5662d34
2x🔐root/123456.q
1x🔐teamspeak/3245gs5662d34
1x🔐root/Ww123456..
1x🔐postgres/postgres03
1x🔐root/aA12345
1x🔐teamspeak/Teamspeak10!
1x🔐root/bnghty56mju7
1x🔐root/Kumar@123
1x🔐root/wcwc
1x🔐postgres/3245gs5662d34
1x🔐ubuntu/A12345610
1x🔐root/aspirine
1x🔐claude/Claude08
1xExecuted Commands
$
Enter new UNIX password:4x$
uname -m3x$
cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'3x$
free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'3x$
cd ~; chattr -ia .ssh; lockr -ia .ssh3x$
uname -a3x$
w3x$
cat /proc/cpuinfo | grep name | wc -l3x$
lscpu | grep Model3x$
crontab -l3xShodan InternetDB ExposureShodan
InternetDB data, not real-time
Ports
4431723
Hostnames
www.draytek.com211-72-129-211.hinet-ip.hinet.net
Risk Assessment
65
/100
LowMediumHighCritical