TROYANOSYVIRUS
Active Threat β€’ LOW

185.230.209.136

Country of OriginπŸ‡ΈπŸ‡¦ SA
First Detection4/30/2026
Last Activity4/30/2026
ISPCloudsigma Ag
🎯
90
Total Attacks
πŸ”Œ
1
Ports
πŸ“‘
1
Attack Types
🦠
0
Malware

Geolocation

Country
πŸ‡ΈπŸ‡¦ SA
City
Unknown
ASN
AS50837
ISP
Cloudsigma Ag

Attack Types

ssh_telnet_honeypot

Attacked Ports

23

Associated Malware

No associated malware

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
2253801101114434655879939952079208220832086208720953306
Vulnerabilities
CVE-2025-30232CVE-2025-67896CVE-2024-39929
Hostnames
webdisk.cloud.ejraay.netwhm.cloud.ejraay.netautodiscover.cloud.ejraay.netejraay.netcloud.ejraay.netcpcontacts.cloud.ejraay.netmail.cloud.ejraay.netcpcalendars.cloud.ejraay.netipv6.cloud.ejraay.netwebmail.cloud.ejraay.netcpanel.cloud.ejraay.netwww.cloud.ejraay.netautoconfig.cloud.ejraay.net
CPEs
cpe:/o:canonical:ubuntu_linuxcpe:/a:cpanel:cpanelcpe:/a:exim:exim:4.97.1cpe:/a:apache:http_servercpe:/a:oracle:mysqlcpe:/a:openbsd:openssh:8.9p1

Risk Assessment

25
/100
LowMediumHighCritical