187.103.21.74

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
47 reports
33 reporters · latest 38 minutes ago
ISP
JPR CONEXIÓN DIGITAL SPA
Usage Type
Fixed Line ISP
ASN
AS270056
Domain Name
Unknown
Country
🇨🇱 Chile
City
Penaflor, Santiago Metropolitan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
47 from 33 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 12 🇩🇪 Germany 4 🇨🇭 Switzerland 3
Most common categories Port Scan 13 SSH 12 Web App Attack 9 Brute-Force 8 Hacking 8
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 FireGuard Server
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=22
Port Scan Hacking
🇩🇪 cloudmax
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
Port Scan
🇵🇱 pshost.pl
2026-11-07T17:14:01.347Z, an unauthorized SSH access attempt was detected from source IP address 187.103.21.74 by our NetFlow-based intrusion detection.
Port Scan Brute-Force SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
Anonymous
wordpress authentication brute force
Brute-Force Web App Attack
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-11-06 09:35:37 | LAST=2026-11-06 09:35:38. Last seen 2026-11-06 09:35:38.
Port Scan
🇩🇪 senkodev
2026-11-06T04:16:50.131476+02:00 vm1386.de.snk.wtf sshd[363856]: error: kex_exchange_identification: Connection closed by remote host 2026-11-06T04:16:50.132697+02:00 vm1386.de.snk.wtf sshd[363856]: Connection closed by 187.103.21.74 port 51804 ...
Brute-Force SSH
🇨🇭 ardoshipsquad
Port scan blocked by firewall: TCP 22 (1 packet) within 24h.
Port Scan SSH
🇨🇭 ardoshipsquad
Port scan blocked by firewall: TCP 22 (1 packet) within 24h.
Port Scan SSH
Anonymous
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/2.0
Hacking Web App Attack
🇺🇸 dtorrer
Brute-force general attack.
Brute-Force
🇫🇷 LRob
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64; rv:148.0) Gecko/20100101 Firefox/148.0
Bad Web Bot
🇺🇸 RAP
2026-11-05 17:08:02 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇮🇩 Indobsd
Port Scan Web App Attack SSH
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 187.103.21.74 2026-11-05T00:58:23+0100 vpn Access-Reject station: 187.103.21.74
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 191.101.241.242
🇺🇸 89.19.34.34
🇺🇸 68.225.58.254
🇨🇳 60.29.128.122
🇧🇩 202.40.176.101
🇺🇸 199.66.182.232
🇳🇱 172.94.9.161
🇹🇭 171.102.130.59
🇺🇸 66.240.205.34
🇺🇸 45.148.233.248
🇿🇦 41.221.216.67
🇵🇰 39.35.252.171
🇬🇧 35.203.211.148
🇩🇪 23.132.164.184
🇮🇩 103.174.238.9
🇷🇴 92.118.39.77
🇧🇬 79.124.62.230
🇺🇸 66.132.159.36
🇺🇸 20.171.192.68
🇺🇸 20.65.202.202
feedback