103.74.20.82
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Wizard's Network (Pvt.) Ltd.
- Usage Type
- Fixed Line ISP
- ASN
- AS139879
- Domain Name
- wn.com.pk
- Country
- 🇵🇰 Pakistan
- City
- Karachi, Sindh
Abuse Reports
Total reports
72 from
37 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 Birdo |
|
Exploited Host Hacking IoT Targeted Brute-Force | |
| 🇺🇸 wristhulk |
Honeypot: 20 Telnet connection probes in 1 hour on Cowrie honeypot (port 23). No credentials — banner grabber / IoT scanner. (55 attempts)
|
Brute-Force IoT Targeted | |
| 🇺🇸 wristhulk |
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'admin' Password: '1234'. (7 attempts)
|
Brute-Force IoT Targeted | |
| 🇫🇮 syscfg |
Cowrie SSH honeypot: 75 attempt(s) from 103.74.20.82. Period: 2026-11-09T22:36:32 to 2026-11-09T22:41:57 UTC. Source: Cowrie honeypot (SSH/Telnet)
|
Brute-Force SSH | |
| Anonymous |
ALFA Webshell Over HTTP.
|
Web App Attack | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: Telnet (3 total hits)
|
Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:33730 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-31 18:05:35 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 FoxSec |
Honeypot: Telnet login brute force (IoT botnet pattern), 3 attempts
|
Brute-Force IoT Targeted | |
| 🇩🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 48 | Len: 44B | Win: 32912(1) | rDNS: 103-74-20-82.galaxy.net.pk | F2B/ufw-honeypot@2026-10-30T19:35:13Z
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-10-30 03:25:56 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇵🇱 ZyperSnare |
Automated T-Pot honeypot detection via ubuntu.
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:33730 dst:23
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 Tman111 |
Unsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; connection dropped. Scanner/bot behavior.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown