TROYANOSYVIRUS
Active ThreatMEDIUM

103.156.20.188

Country of Origin🇮🇳 India
First Detection3/30/2026
Last Activity4/10/2026
ISPLEAPSWITCH NETWORKS PRIVATE LIMITED
🎯
381
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
0
Malware

Geolocation

Country
🇮🇳 India
City
Panvel
ASN
AS132335
ISP
LEAPSWITCH NETWORKS PRIVATE LIMITED

Attack Types

malware_capture

Attacked Ports

3306

Associated Malware

No associated malware

Attempted Credentials

🔐root/(empty)
381x

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
8013548481000018018
Vulnerabilities
CVE-2022-34970CVE-2022-38667
CPEs
cpe:/a:nodejs:node.jscpe:/a:microsoft:internet_information_services:10.0cpe:/a:microsoft:internet_information_servicescpe:/a:expressjs:expresscpe:/a:crowcpp:crow:1.0cpe:/o:microsoft:windowscpe:/a:microsoft:asp.net

Risk Assessment

45
/100
LowMediumHighCritical