103.131.144.3

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
44 reports
31 reporters · latest 3 hours ago
ISP
PLEXUS CLOUD
Usage Type
Fixed Line ISP
ASN
AS138362
Domain Name
plexuscloud.com.bd
Country
🇧🇩 Bangladesh
City
Maulavi Bazar, Sylhet Division
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
44 from 31 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 10 🇮🇩 Indonesia 9 🇧🇷 Brazil 7
Most common categories Port Scan 27 Hacking 11 Brute-Force 8 Exploited Host 3 Web App Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2
Brute-Force
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2
Brute-Force
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2
Brute-Force
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=2
Brute-Force
🇧🇷 noconex
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: exploit (ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)) de 103.131.144.3
Hacking IoT Targeted
🇨🇦 Slackin' Jack
Triggered honeypot on port 5555. (103.131.144.3)
Port Scan
🇺🇸 MPL
tcp/5555 (2 or more attempts)
Port Scan
🇫🇮 TrafficAnalyser
Port scanning
Port Scan
🇺🇸 Bankbook8585
T-Pot honeypot | adbhoney honeypot
Hacking
🇺🇸 MPL
tcp/5555
Port Scan
Anonymous
Realtek Jungle SDK Command Injection (CVE-2021-35394).
Web App Attack
🇮🇩 Diskominfo Lumajang
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=1
Brute-Force
🇫🇷 vtchost.com
scanning closed ports ...
Port Scan
🇮🇩 leomardsy_
Port Scan
🇧🇷 diego
[rede-44-49] 11/04/2026-04:59:25.557972, 103.131.144.3, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 141.193.153.146
🇰🇬 212.97.4.101
🇫🇷 201.24.163.237
🇺🇸 193.202.13.68
🇳🇱 193.47.62.31
🇳🇱 192.253.248.228
🇨🇳 121.46.244.19
🇮🇩 115.85.88.18
🇫🇷 91.231.89.171
🇺🇸 62.11.129.215
🇺🇸 45.136.26.178
🇮🇩 202.158.36.50
🇦🇷 201.177.237.6
🇫🇷 62.210.198.27
🇨🇳 60.26.60.55
🇺🇦 37.221.134.227
🇺🇸 20.169.55.196
🇺🇸 13.221.91.83
🇺🇸 170.168.174.124
🇺🇸 161.35.7.169
feedback