TROYANOSYVIRUS
Active Threat • MEDIUM

181.204.16.107

Country of Origin🇨🇴 Colombia
First Detection2/17/2026
Last Activity3/23/2026
ISPColombia Movil
🎯
63
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
9
Malware

Geolocation

Country
🇨🇴 Colombia
City
Cartagena
ASN
AS27831
ISP
Colombia Movil

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

1d6f385dd0e7ccc3ada3...→28ba533b0f3c4df63d6b...→3e8341eade715d716ae9...→3fabfde4895f276b5d24...→4e9fdfe29ef2ada08ab1...→

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
22
Vulnerabilities
CVE-2023-51384CVE-2023-28531CVE-2008-3844CVE-2007-2768CVE-2023-38408CVE-2023-48795CVE-2023-51385CVE-2023-51767CVE-2025-32728CVE-2024-6387CVE-2025-26465
Hostnames
Static-BA-181-204-16-107.tigoune.com.co
CPEs
cpe:/a:openbsd:openssh:8.9

Risk Assessment

55
/100
LowMediumHighCritical