IPMediumSignal 72/100
103.74.20.99
Location
Karachi, Sindh
ASN
AS139879
Wizards Network (Pvt.) Ltd.
First Seen
Oct 21, 2024
Last Seen
May 12, 2026
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
72%
Signal Score
72 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
Country
Pakistan
RegionKarachi, Sindh
ASNAS139879
OrganizationWizards Network (Pvt.) Ltd.
IP Category
⟲
Proxy
Proxy server
Feed Intelligence Summary
9 reports72% confidence
9
Source reports
72%
Confidence score
Category tags
active scanactive scanningasiabad web botbotnet activitybrute forcebrute force attackbrute force attackerbrute-forcebruteforcecredential accesscredential harvestingcredential stuffingexploitation activityexploited hosthackingidentity & access exploitationiot securityiot targetednetworkpassword attacksphishingphishing attackpkportscanproxyreconnaissanceresearchedscannerscannersservice scansocial engineeringspamsshssh attackt1110.001t1110.002t1110.003t1110.004t1566.001t1566.002t1566.003t1595.001t1595.002t1595.003telnetvultrweb app attackweb spam
Activity Timeline
May 12May 12
Threat Activity Heatmap
· Peak: 2026-05-12LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated
This Indicator of Compromise (IOC) represents a significant and active threat that demands immediate attention due to its high likelihood of facilitating unauthorized access and system compromise. The IP address `103.74.20.99` has been extensively reported across multiple threat intelligence feeds as engaging in malicious activities, including various forms of brute-force attacks, port scanning, and potentially spear phishing attempts. If left unaddressed, this activity could lead to successful …
Threat ScoreHigh Risk
72
SIGNAL
Signal Score
72%
Confidence
9
Reports
First seenOct 21, 2024
Last seenMay 12, 2026
GeolocationPK
CountryPakistan
LocationKarachi, Sindh
ASNAS139879
OrgWizards Network (Pvt.) Ltd.
Coords24.8608, 67.0104
Proxy
VirusTotal
Not checked
WHOIS
- description
- IPv4 hosts detected attempting to brute force TELNET on Vultr Melbourne (Australia) honeypot
- raw
- inetnum: 103.74.20.0 - 103.74.21.255 netname: Wizard-Net descr: Wizard's Network (Pvt.) Ltd. country: PK admin-c: WNPL3-AP tech-c: WNPL3-AP abuse-c: AW1039-AP status: ALLOCATED NON-PORTABLE mnt-by: MAINT-WN-PK mnt-irt: IRT-WN-PK last-modified: 2021-05-18T19:02:04Z source: APNIC irt: IRT-WN-PK address: Suite No. 401, 4th Floor,, Plot No. SB-25, Shaes Centre,, Gulshan-e-Iqbal, Block-13/C,, Main Univers e-mail: [email protected] abuse-mailbox: [email protected] admin-c: WNPL3-AP tech-c: WNPL3-AP auth: # Filtered remarks: [email protected] was validated on 2025-12-15 mnt-by: MAINT-WN-PK last-modified: 2025-12-15T09:27:39Z source: APNIC role: ABUSE WNPK country: ZZ address: Suite No. 401, 4th Floor,, Plot No. SB-25, Shaes Centre,, Gulshan-e-Iqbal, Block-13/C,, Main Univers phone: +000000000 e-mail: [email protected] admin-c: WNPL3-AP tech-c: WNPL3-AP nic-hdl: AW1039-AP remarks: Generated from irt object IRT-WN-PK remarks: [email protected] was validated on 2025-12-15 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-12-15T09:27:48Z source: APNIC role: Wizards Network PVT Limited administrator address: Suite No. 401, 4th Floor,, Plot No. SB-25, Shaes Centre,, Gulshan-e-Iqbal, Block-13/C,, Main Univers country: PK phone: +923323571408 fax-no: +923323571408 e-mail: [email protected] admin-c: WNPL3-AP tech-c: WNPL3-AP nic-hdl: WNPL3-AP mnt-by: MAINT-WN-PK last-modified: 2016-09-03T05:33:29Z source: APNIC route: 103.74.20.0/24 origin: AS139879 descr: Wizard's Network (PVT.) Limited. Near Pizza Blk 2 Gulshan-e-Iqbal mnt-by: MAINT-WN-PK last-modified: 2024-07-10T19:01:31Z source: APNIC
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 1 month ago
Appeared in 9 threat reports