TROYANOSYVIRUS
Active ThreatLOW

188.43.204.45

Country of Origin🇷🇺 Russia
First Detection1/8/2026
Last Activity1/31/2026
ISPJoint Stock Company TransTeleCom
🎯
41
Total Attacks
🔌
1
Ports
📡
1
Attack Types
🦠
0
Malware

Geolocation

Country
🇷🇺 Russia
City
Unknown
ASN
AS20485
ISP
Joint Stock Company TransTeleCom

Attack Types

ssh_telnet_honeypot

Attacked Ports

22

Associated Malware

No associated malware

Shodan InternetDB ExposureShodan

InternetDB data, not real-time

Ports
1371614452222326051000
Vulnerabilities
CVE-2015-8935CVE-2015-3330CVE-2014-3587CVE-2016-3141CVE-2020-11579CVE-2019-9024CVE-2018-5712CVE-2016-3142CVE-2016-4342CVE-2019-6977CVE-2012-2376CVE-2015-4022CVE-2015-4605CVE-2017-11142CVE-2014-2020CVE-2016-5771CVE-2011-4885CVE-2016-10397CVE-2019-9023CVE-2016-9935
Hostnames
RZD-gw.transtelecom.net
CPEs
cpe:/a:lighttpd:lighttpd:1.4.32cpe:/o:linux:linux_kernelcpe:/a:php:php:5.3.8

Risk Assessment

25
/100
LowMediumHighCritical