TROYANOSYVIRUS
Active ThreatLOW

81.181.166.215

Country of Origin🇷🇴 Romania
First Detection4/14/2026
Last Activity4/16/2026
ISPDataNode DC SRL
🎯
18
Total Attacks
🔌
3
Ports
📡
3
Attack Types
🦠
0
Malware

Geolocation

Country
🇷🇴 Romania
City
Unknown
ASN
AS48881
ISP
DataNode DC SRL

Attack Types

tcp_trap
elasticsearch_honeypot
web_honeypot

Attacked Ports

804439200

Associated Malware

No associated malware

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
22443
Vulnerabilities
CVE-2025-23419CVE-2023-44487
Hostnames
pontajerp.saloanelemagic.ro
CPEs
cpe:/a:openbsd:openssh:9.6p1cpe:/a:expressjs:expresscpe:/o:canonical:ubuntu_linuxcpe:/a:f5:nginx:1.24.0cpe:/a:nodejs:node.jscpe:/o:linux:linux_kernel

Risk Assessment

35
/100
LowMediumHighCritical