104.207.38.203

Classification: Malicious

104.207.38.203 is a malicious IP address in Washington, US. 115 sightings from 4 threat sources (HTTP Spammer, DDoS Attacker), last seen 2026-10-12.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-05-26 12:36:29 2026-10-12 16:49:40 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:44:18 2026-09-11 16:43:55 attacker malicious-activity
VPN IPWhois.io 2026-09-06 10:48:18 2026-09-06 10:48:18 anonymization vpn
HTTP Spammer StopForumSpam.com 2026-02-23 16:10:50 2026-05-19 16:51:08 malicious-activity
Suspicious Host AbuseIPDB 2024-12-26 23:19:37 2025-11-25 04:04:03 anomalous-activity
Proxy IPWhois.io 2024-12-27 07:46:11 2024-12-27 07:46:11 anonymization

Tags

bot abuse

Whois information

AS name
AS200373 3xK Tech GmbH
AS registry
ripencc
AS date
2014-09-24 00:00:00
AS CIDR
104.207.38.0/24
Registrant
3xK Tech GmbH
City
Washington
State
DC
Postal code
20005
Country
US — United States 🇺🇸
First indexed
2024-12-27 07:46:09
Last updated
2026-10-12 16:49:40

Malicious IPs in the same CIDR

104.207.38.78 104.207.38.179 104.207.38.117 104.207.38.171 104.207.38.165 104.207.38.47 104.207.38.83 104.207.38.250 104.207.38.220 104.207.38.161 104.207.38.226 104.207.38.211 104.207.38.163 104.207.38.32 104.207.38.18 104.207.38.224 104.207.38.175 104.207.38.96 104.207.38.192 104.207.38.30 104.207.38.123 104.207.38.46 104.207.38.75 104.207.38.106 104.207.38.203