JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.207.47.73

104.207.47.73 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.207.47.73

Whois 104.207.47.73

IP Abuse Reports for 104.207.47.73:

This IP address has been reported a total of 126 times from 13 distinct sources. 104.207.47.73 was first reported on June 20th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-04-19 19:46:56 (1 month ago)	(antiscrape_rule) Web application abuse detected 104.207.47.73 (US/United States/-): 5 in the last 9 ... show more (antiscrape_rule) Web application abuse detected 104.207.47.73 (US/United States/-): 5 in the last 900 secs show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-01-13 12:37:08 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.207.47.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.207.47.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:37:02.613007 2026] [security2:error] [pid 10753:tid 10753] [client 104.207.47.73:28493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plumehair239.com"] [uri "/.svn/wc.db"] [unique_id "aWY8buK_62sFKR7UtD5XcAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-12-23 02:08:24 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-12-14 18:37:24 (5 months ago)	botnet	DDoS Attack
Anonymous	2025-11-13 20:31:58 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 octageeks.com	2025-11-13 05:08:42 (6 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 TPI-Abuse	2025-10-22 10:02:13 (7 months ago)	(mod_security) mod_security (id:211700) triggered by 104.207.47.73 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211700) triggered by 104.207.47.73 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 22 06:01:32.204467 2025] [security2:error] [pid 2646:tid 2646] [client 104.207.47.73:23085] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:[ ()]case ?\\\\(\|\\\\) ?like ?\\\\(\|\\\\bhaving ?[^\\\\s]+ ?[^\\\\w ]\|\\\\bif ?\\\\([\\\\d\\\\w] ?[=<>~])" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "33"] [id "211700"] [rev "8"] [msg "COMODO WAF: Detects conditional SQL injection attempts\|\|kountz.org\|F\|2"] [data "Matched Data: having found within MATCHED_VAR: mnameAND6538'='6538'))OR1GROUPBYCONCAT(0x37504a51,(SELECT(ELT(2836=2836,1))),0x41453863,FLOOR(RAND(0)2))HAVINGMIN(0)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "kountz.org"] [uri "/famsearch.php"] [unique_id "aPirfEp3Yu9AL65M5hysQAAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-15 23:14:13 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-15 22:33:06 (7 months ago)	GlobalProtect login attempts with user tlutz.	VPN IP Brute-Force
Anonymous	2025-10-07 23:23:30 (7 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.07 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 00:44:31 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.03 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 17:10:07 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-29 07:34:23 (8 months ago)	Attempted brute force login to web vpn 27 time(s); last attempt for 2025.09.29 is noted in report ti ... show more Attempted brute force login to web vpn 27 time(s); last attempt for 2025.09.29 is noted in report timestamp show less	Hacking Brute-Force
🇧🇷 hostseries	2025-09-28 08:34:47 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.189.206

🇺🇸 170.9.16.186

🇫🇮 147.185.133.219

🇺🇸 139.144.239.72

🇳🇱 89.21.67.164

🇷🇺 87.103.196.161

🇱🇹 81.30.98.158

🇺🇸 67.205.168.116

🇨🇳 218.59.201.12

🇬🇷 212.251.0.147

🇺🇸 207.90.244.25

🇳🇱 204.76.203.219

🇲🇽 200.77.172.159

🇮🇳 182.79.218.164

🇧🇷 177.55.94.137

🇺🇸 135.237.81.94

🇮🇳 125.19.207.50

🇦🇺 124.150.139.38

🇨🇳 123.123.196.140

🇭🇰 118.193.36.63