JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.204.208.204

103.204.208.204 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 27%: ?

27%

ISP	Level3 Carrier Limited
Usage Type	Fixed Line ISP
ASN	AS58682
Hostname(s)	204.208.204.103-level3carrier.net
Domain Name	level3carrier.com
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.204.208.204

Whois 103.204.208.204

IP Abuse Reports for 103.204.208.204:

This IP address has been reported a total of 26 times from 16 distinct sources. 103.204.208.204 was first reported on July 21st 2023, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 wiredalter	2026-08-21 15:40:36 (12 hours ago)	Blocked by fail2ban on o2VPS [23/tcp] Source Port: 53672 TTL: 43 Packet Length: 60 TOS: 0x08 Analyz ... show more Blocked by fail2ban on o2VPS [23/tcp] Source Port: 53672 TTL: 43 Packet Length: 60 TOS: 0x08 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇫🇷 Zkillu	2026-08-19 21:12:41 (2 days ago)	UDP flood (DDoS) vs AS215599: 76 pkts / 0.11 MB to UDP 8443 across 59 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 76 pkts / 0.11 MB to UDP 8443 across 59 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:12:41 (2 days ago)	UDP flood (DDoS) vs AS215599: 76 pkts / 0.11 MB to UDP 8443 across 59 dst IP(s), 2026-08-19 21:46 to ... show more UDP flood (DDoS) vs AS215599: 76 pkts / 0.11 MB to UDP 8443 across 59 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-15 17:59:00 (6 days ago)	UDP flood attack on 31.56.58.1 UDP:22 (2026-08-15 17:53-18:05 UTC). Peak aggregate 47 Gbps / 4.2 Mpp ... show more UDP flood attack on 31.56.58.1 UDP:22 (2026-08-15 17:53-18:05 UTC). Peak aggregate 47 Gbps / 4.2 Mpps against victim AS215599. This IP (AS58682) sent ~186251 packets (247.07 MB) during the attack window. Likely a compromised device (Mirai-like botnet). show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-02 04:15:14 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-14 18:15:49 (1 month ago)	Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/shopby/manufacturer-audiocodes-optoma-lsi-aruba_networks-haivision-xyz.html?mode=grid&p=2 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-07-13 21:52:07 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 06:30:22 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇦🇺 prologic	2026-06-13 08:58:50 (2 months ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 05:35:34 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 103.204.208.204 (204.208.204.103-level3carrier. ... show more (mod_security) mod_security (id:210730) triggered by 103.204.208.204 (204.208.204.103-level3carrier.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 00:35:31.404954 2026] [security2:error] [pid 72289:tid 72289] [client 103.204.208.204:53794] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Catnapper/images/Teddy Bear/Thumbs.db"] [unique_id "aYlyI-CiyDuL8Xey3DMEXQAAAAU"], referer: https://vitalitywebb.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-20 08:13:19 (9 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-02-05 00:28:08 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇷🇸 Smel	2023-10-19 11:04:15 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇩🇪 ps-center	2023-08-26 11:28:47 (2 years ago)	C1-W: TCP-Scanner. Port: 23	Port Scan
🇨🇦 George Horton	2023-08-24 14:06:00 (2 years ago)	Source IP is spoofing, and phishing using unauthorized sender	Phishing Email Spam Spoofing

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 159.203.115.61

🇨🇳 118.212.120.86

🇨🇳 111.226.107.122

🇧🇬 79.124.58.218

🇫🇷 2400:cb00:532:1000:a2f3:abb6:1daf:b28

🇧🇷 200.71.122.160

🇺🇸 172.245.102.33

🇸🇦 159.0.216.176

🇫🇮 147.185.133.147

🇫🇮 147.185.133.47

🇺🇿 144.124.196.65

🇮🇳 122.176.100.127

🇫🇷 85.217.140.39

🇧🇬 79.124.56.202

🇺🇸 64.62.197.161

🇺🇸 64.62.156.118

🇺🇸 38.133.189.67

🇺🇸 34.28.185.226

🇱🇹 213.176.26.69

🇬🇧 213.166.84.58