JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.74.105.224

103.74.105.224 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 76%: ?

76%

ISP	VIETSERVER SERVICES TECHNOLOGY COMPANY LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63737
Domain Name	vietserver.vn
Country	🇻🇳 Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.74.105.224

Whois 103.74.105.224

IP Abuse Reports for 103.74.105.224:

This IP address has been reported a total of 19 times from 15 distinct sources. 103.74.105.224 was first reported on August 29th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-31 23:45:39 (1 day ago)	SSH brute force detected by CrowdSec	Brute-Force
🇺🇸 mutebot.net	2026-08-31 22:51:55 (1 day ago)	SRC=103.74.105.224, PROTO=TCP, SPT=50494, DPT=3132 SRC=103.74.105.224, PROTO=TCP, SPT=3825, DPT=1203 ... show more SRC=103.74.105.224, PROTO=TCP, SPT=50494, DPT=3132 SRC=103.74.105.224, PROTO=TCP, SPT=3825, DPT=12030 SRC=103.74.105.224, PROTO=TCP, SPT=45607, DPT=8081 SRC=103.74.105.224, PROTO=TCP, SPT=35563, DPT=25000 SRC=103.74.105.224, PROTO=TCP, SPT=14033, DPT=8090 show less	Port Scan
🇩🇪 dom4k	2026-08-31 21:27:26 (1 day ago)	2026-08-31T21:27:24.826995+00:00 dom4k.pro kernel: [2257924.352855] [UFW BLOCK] IN=ens3 OUT= MAC=52: ... show more 2026-08-31T21:27:24.826995+00:00 dom4k.pro kernel: [2257924.352855] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:ca:13:e8:02:00:00:00:00:01:08:00 SRC=103.74.105.224 DST=84.21.173.199 LEN=44 TOS=0x04 PREC=0x00 TTL=111 ID=60635 DF PROTO=TCP SPT=62489 DPT=12030 WINDOW=65369 RES=0x00 SYN URGP=0 2026-08-31T21:27:25.093191+00:00 dom4k.pro kernel: [2257924.621815] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:ca:13:e8:02:00:00:00:00:01:08:00 SRC=103.74.105.224 DST=84.21.173.199 LEN=44 TOS=0x04 PREC=0x00 TTL=109 ID=36497 DF PROTO=TCP SPT=31806 DPT=8085 WINDOW=64126 RES=0x00 SYN URGP=0 2026-08-31T21:27:25.197505+00:00 dom4k.pro kernel: [2257924.726125] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:ca:13:e8:02:00:00:00:00:01:08:00 SRC=103.74.105.224 DST=84.21.173.199 LEN=44 TOS=0x04 PREC=0x00 TTL=109 ID=8616 DF PROTO=TCP SPT=41600 DPT=9090 WINDOW=64417 RES=0x00 SYN URGP=0 2026-08-31T21:27:25.646067+00:00 dom4k.pro kernel: [2257925.174593] [UFW BLOCK] IN=ens3 OUT= MAC=52:54:00:ca:13:e8:02:00:00:00:00:01:08:00 SRC=10 ... show less	Port Scan
🇺🇸 schematics.cc	2026-08-31 17:01:10 (1 day ago)	Blocked by on honeypot2 [3129/tcp] \| SPT: 41437 \| TTL: 236 \| LEN: 40 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [3129/tcp] \| SPT: 41437 \| TTL: 236 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇩🇪 phil2k	2026-08-31 16:18:24 (1 day ago)	fail2ban:firewall:2026-08-31T18:18:19.776667+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-08-31T18:18:19.776667+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=103.74.105.224 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=60380 DF PROTO=TCP SPT=37474 DPT=8085 WINDOW=64459 RES=0x00 SYN URGP=0 2026-08-31T18:18:19.913302+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=103.74.105.224 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=5628 DF PROTO=TCP SPT=2547 DPT=55555 WINDOW=64157 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇩🇪 Tsumugi Kotobuki	2026-08-31 11:11:36 (1 day ago)	Port Scan on Honeypot \| Ports: 8443/HTTPS-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 239 \| Len: 44B ... show more Port Scan on Honeypot \| Ports: 8443/HTTPS-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 239 \| Len: 44B \| Win: 64405(1) \| F2B/ufw-honeypot@2026-08-31T11:11:36Z show less	Port Scan Hacking
Anonymous	2026-08-31 11:10:59 (1 day ago)	Portscan	Port Scan
🇸🇬 nayumi	2026-08-31 06:46:50 (2 days ago)	CrowdSec detection: crowdsecurity/http-open-proxy \| Service: http	Web App Attack
Anonymous	2026-08-31 06:46:28 (2 days ago)	20115/tcp,20000/tcp,1053/tcp,20128/tcp,20103/tcp,81/tcp,20124/tcp,3129/tcp,1050/tcp,3128/tcp,8888/tc ... show more 20115/tcp,20000/tcp,1053/tcp,20128/tcp,20103/tcp,81/tcp,20124/tcp,3129/tcp,1050/tcp,3128/tcp,8888/tcp,1058/tcp,31280/tcp,6588/tcp,1068/tcp,20114/tcp,3132/tcp,43440/tcp,1077/tcp,51080/tcp,8088/tcp,7077/tcp,1082/tcp,20106/tcp,20126/tcp,1059/tcp,1075/tcp,20117/tcp,88/tcp (119 or more attempts) show less	Port Scan
🇩🇪 F2BP	2026-08-30 15:36:15 (2 days ago)	Fail2Ban [nginx-bad-request] - Observed: http_scanning (web_scanning) Target: http:80/tcp \| Activity ... show more Fail2Ban [nginx-bad-request] - Observed: http_scanning (web_scanning) Target: http:80/tcp \| Activity: 12 attempts Timeline: 2026-08-30T15:35:52Z - 2026-08-30T15:35:52Z Evidence: 2026-08-30T15:35:52Z 103.74.105.224 - - [30/Aug/2026:03:55:08 -0400] "\x05\x01\x00" 400 150 "-" "-" 2026-08-30T15:35:52Z 103.74.105.224 - - [30/Aug/2026:03:55:09 -0400] "\x04\x01\x00P\x01\x01\x01\x01\x00" 400 150 "-" "-" 2026-08-30T15:35:52Z 103.74.105.224 "CONNECT 1.1.1.1:80 HTTP/1.1" 400 2026-08-30T15:35:52Z 103.74.105.224 - - [30/Aug/2026:08:19:21 -0400] "\x05\x01\x00" 400 150 "-" "-" 2026-08-30T15:35:52Z 103.74.105.224 - - [30/Aug/2026:08:19:22 -0400] "\x04\x01\x00P\x01\x01\x01\x01\x00" 400 150 "-" "-" 2026-08-30T15:35:52Z 103.74.105.224 - - [30/Aug/2026:10:21:06 -0400] "\x05\x01\x00" 400 150 "-" "-" 2026-08-30T15:35:52Z 103.74.105.224 - - [30/Aug/2026:10:21:06 -0400] "\x04\x01\x00P\x01\x01\x01\x01\x00" 400 150 "-" "-" 2026-08-30T15:35:52Z 103.74.105.224 - - [30/Aug/2026:11:18:45 -0400] "\x05\x01\x00" 400 150 "-" "-" show less	Bad Web Bot Web App Attack
🇫🇷 vtchost.com	2026-08-30 14:58:58 (2 days ago)	2026-08-30T16:58:57.263046+02:00 vmi3482414 kernel: WEBSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0:6 ... show more 2026-08-30T16:58:57.263046+02:00 vmi3482414 kernel: WEBSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0:69:11:b2:c8:03:08:00 SRC=103.74.105.224 DST=169.58.115.24 LEN=40 TOS=0x00 PREC=0x20 TTL=238 ID=42150 DF PROTO=TCP SPT=33614 DPT=80 WINDOW=64134 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-08-30 13:03:06 (2 days ago)	external scanner	Port Scan
Anonymous	2026-08-30 10:33:39 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-open-proxy	Web App Attack
Anonymous	2026-08-30 10:22:46 (2 days ago)	SSH brute force detected by CrowdSec	Brute-Force
🇺🇸 en0	2026-08-30 06:52:57 (3 days ago)	103.74.105.224 was recorded 18 times by 1 hosts attempting to connect to 18 unique ports. Incident c ... show more 103.74.105.224 was recorded 18 times by 1 hosts attempting to connect to 18 unique ports. Incident counter (4h, 24h, all-time): 18, 63, 63 show less	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.238

🇺🇸 162.216.150.12

🇺🇸 91.230.168.10

🇺🇸 64.62.197.53

🇮🇳 49.204.233.216

🇺🇸 34.31.203.120

🇺🇸 2607:f8b0:4001:c61::122

🇺🇸 2607:f8b0:4001:c13::12b

🇫🇷 2400:cb00:19:1000:735d:a915:2150:eca6

🇦🇷 190.15.219.197

🇻🇳 171.240.16.32

🇮🇶 169.224.124.136

🇹🇳 165.51.69.5

🇺🇸 162.216.150.64

🇺🇸 159.223.184.166

🇺🇸 142.93.90.204

🇨🇳 116.162.133.56

🇧🇬 79.124.59.186

🇺🇸 65.49.20.117

🇬🇧 46.101.59.194