TROYANOSYVIRUS
Active Threat β€’ MEDIUM

195.26.253.224

First Detection2/15/2026
Last Activity3/20/2026
ISPContabo Inc.
🎯
16
Total Attacks
πŸ”Œ
5
Ports
πŸ“‘
4
Attack Types
🦠
0
Malware

Geolocation

Country
πŸ‡ΊπŸ‡Έ United States
City
St Louis
ASN
AS40021
ISP
Contabo Inc.

Attack Types

ssh_telnet_honeypot
yaml_exploit_honeypot
web_honeypot
tcp_trap

Attacked Ports

2380300030018088

Associated Malware

No associated malware

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
222222
Vulnerabilities
CVE-2009-3720CVE-2024-9287CVE-2021-32052CVE-2025-13836CVE-2025-13837CVE-2023-40217CVE-2009-2940CVE-2025-12084CVE-2024-6232CVE-2023-27043CVE-2025-12781CVE-2023-36632CVE-2024-7592CVE-2020-29396
Hostnames
vmi2212555.contaboserver.net
CPEs
cpe:/a:openbsd:openssh:8.9p1cpe:/a:python:python:3.10.12cpe:/o:canonical:ubuntu_linux

Risk Assessment

45
/100
LowMediumHighCritical