Active Threat • MEDIUM

36.41.186.9

Country of Origin🇨🇳 China

First Detection1/13/2026

Last Activity4/26/2026

ISPCHINANET SHAANXI province Cloud Base network

🎯

27

Total Attacks

🔌

4

Ports

📡

2

Attack Types

🦠

1

Malware

Geolocation

Country: 🇨🇳 China
City: Unknown
ASN: AS134768
ISP: CHINANET SHAANXI province Cloud Base network

Attack Types

ssh_telnet_honeypot

tcp_trap

Attacked Ports

22100222222022222

Associated Malware

6fa4c8ac58e7a1d947dc...→

Attempted Credentials

🔐root/root123456

1x

🔐root/h3c.com!

1x

🔐root/------fuck------

1x

Executed Commands

$uname -s -m1x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports

22

CPEs

cpe:/a:openbsd:openssh:6.6.1p1cpe:/o:canonical:ubuntu_linux

Risk Assessment

50

/100

LowMediumHighCritical