103.74.20.77
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Wizard's Network (Pvt.) Ltd.
- Usage Type
- Fixed Line ISP
- ASN
- AS139879
- Domain Name
- wn.com.pk
- Country
- 🇵🇰 Pakistan
- City
- Karachi, Sindh
Abuse Reports
Total reports
49 from
26 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇭🇰 mutebot.net |
SRC=103.74.20.77, PROTO=TCP, SPT=14243, DPT=23
|
Port Scan | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/netgear_rce - events: 1
|
Web App Attack Hacking | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 50 malicious events (ssh_activity, ssh_bruteforce) detected.
|
Brute-Force SSH | |
| 🇩🇪 wupinyin |
Honeypot: sent a command-injection exploit that downloads malware to a decoy web server: hxxp://172.168.137.187:45998/Mozi.m [1 event, 2026-11-02T02:37:15Z; auto-reported by CrowdSec]
|
Hacking Exploited Host Web App Attack | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇨🇭 SOC [GOLINE SA] |
FortiGate detected brute force login attempt from IPv4 address 103.74.20.77
|
Brute-Force SSH | |
| 🇨🇭 SOC [GOLINE SA] |
FortiGate IPS: Mirai.Botnet (severity high)
|
Hacking | |
| 🇧🇾 stroytrest |
2026-10-28T12:55:52.869770+03:00 gate kernel: [2243642.759429] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=103.74.20.77 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=14474 PROTO=TCP SPT=14243 DPT=23 WINDOW=32857 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-27 16:41:20 UTC Unauthorized activity to TCP port 2323. Telnet
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-26 20:23:38 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Oct 8 22:16) SRC=103.74.20.77 LEN=40 TTL=48 ID=57323 TCP DPT=23 WINDOW=46823 SYN
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown