103.74.20.18
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Wizard's Network (Pvt.) Ltd.
- Usage Type
- Fixed Line ISP
- ASN
- AS139879
- Domain Name
- wn.com.pk
- Country
- 🇵🇰 Pakistan
- City
- Karachi, Sindh
Abuse Reports
Total reports
58 from
35 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Vexedly |
SSH brute-force against an SSH honeypot: 17 credential attempt(s) across 17 logged events. Automated report from a Cowrie sensor.
|
Brute-Force SSH | |
| 🇩🇪 KPS |
Portscan-P
|
Port Scan | |
| 🇺🇸 Axel |
Atom Honypot: 106 connections to login:telnet (tcp/23), telnet (tcp/23) observed by 1 honeypot sensor between 2026-11-11 19:16 UTC and 2026-11-11 19:17 UTC. Includes 53 authentication attempts against decoy login services.
|
Port Scan Brute-Force | |
| 🇫🇮 dnsbd.tech |
nftables: Port scan (TCP:23) [srv2]
|
Port Scan Hacking | |
| 🇫🇷 sthoyer.de |
Nov 10 17:27:02 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=103.74.20.18 DST=173.212.223.67 LEN=40 TOS=0x08 PREC=0x20 TTL=49 ID=34246 PROTO=TCP SPT=23775 DPT=23 WINDOW=59311 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 7 packets across 1 port (23). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=103.74.20.18 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=24888 DF PROTO=TCP SPT=23402 DPT=23 WINDOW=14400 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-05 UTC.
|
Hacking | |
| 🇺🇸 RAP |
2026-11-02 23:29:06 UTC Unauthorized activity to TCP port 2323. Telnet
|
Port Scan | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇧🇬 geddo.in |
|
Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:5411 dst:23
|
Port Scan | |
| 🇺🇸 HamSammich |
Automated sensor: 4 HTTP connection/probe attempts over the last 24h (latest 2026-09-18T13:57Z).
|
Brute-Force Web App Attack | |
| 🇨🇦 Slackin' Jack |
Triggered honeypot on port 2323. (103.74.20.18)
|
Port Scan | |
| Anonymous |
23/tcp (1 or more attempts)
|
Port Scan | |
| 🇹🇷 oalver |
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. Sources: honeypot. First seen: 2026-08-27. Risk score: 90/100.
|
Brute-Force IoT Targeted |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown