Confidence Level

57%

Medium?

Geolocation

🇯🇵

Japan

ISPNTT PC Communications, Inc.

ASNAS2514

Activity Timeline

First seenMar 6, 2026, 01:35 AM

Last seen23h ago

1Sessions

1Events

Protocol Breakdown

TELNET

1 / 1

133.232.80.199 has a moderate threat confidence level of 57%, originating from Japan, on the NTT PC Communications, Inc. network (2514). It has been observed across 1 sessions targeting TELNET, First observed on March 6, 2026, most recently active March 6, 2026.

Primitives

Individual actions observed

Telnet Command Cd11 Telnet Busybox Echo Redirect File Create11 Telnet Shell Execute Writable Hidden File11 Telnet Command Sh5 Telnet Busybox Binary Invocation5 Telnet Command Ping1 Telnet Command Shell1 Telnet Command Enable1 Telnet Command System1 Telnet Command Linuxshell1 Telnet Busybox Wget Execution1 Telnet Sh Execute Downloaded Script1 Telnet Busybox Ftpget Remote File Download1 Telnet Busybox Tftp Get Remote File Stdout1 Telnet Curl Remote Script Stdout Execution1

Related Threats

Explore related threat intelligence

🇯🇵More threats fromJapan ASMore threats fromNTT PC Communications, Inc.TELNETMore threats targetingTELNET { }Browse allAttack Patterns

WHOIS Lookup

IP Address	Confidence	Events
111.89.22.81	51%	1
157.120.0.12	54%	649
111.89.113.29	68%	2
128.53.174.171	72%	4
1.33.30.125	83%	440

IP Address	Confidence	Events
155.248.164.42	100%	987
220.144.45.200	16%	9
157.7.113.83	100%	224
150.246.249.149	99%	3,091
8.209.246.80	88%	87