104.207.47.249
Classification: Malicious
104.207.47.249 is a malicious IP address in Washington, US. 25 sightings from 5 threat sources (Suspicious Host, HTTP Spammer), last seen 2026-10-18.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | GPF DNS Blocklist | 2026-09-26 23:01:03 | 2026-10-18 01:02:04 | attacker malicious-activity | |
| VPN | IPWhois.io | 2025-06-11 13:32:06 | 2026-09-27 01:37:11 | anonymization vpn | |
| HTTP Spammer | StopForumSpam.com | 2024-11-16 23:22:15 | 2025-06-25 19:32:54 | malicious-activity | |
| Proxy | IPWhois.io | 2025-02-09 01:23:59 | 2025-05-21 13:46:42 | anonymization | |
| Suspicious Host | AbuseIPDB | 2025-03-14 23:25:12 | 2025-04-21 15:07:56 | anomalous-activity | |
| Bruteforce login attacker | Blocklist.de | 2025-03-14 02:40:24 | 2025-03-14 02:40:24 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2025-03-14 01:35:46 | 2025-03-14 01:35:46 | malicious-activity |
Tags
bot abuse apache ddos rfi attacker login bruteforce joomla wordpressWhois information
- AS name
- AS200373 3xK Tech GmbH
- AS registry
- ripencc
- AS date
- 2014-09-24 00:00:00
- AS CIDR
- 104.207.47.0/24
- Registrant
- 3xK Tech GmbH
- City
- Washington
- State
- DC
- Postal code
- 20511
- Country
- US — United States 🇺🇸
- First indexed
- 2024-11-16 23:22:15
- Last updated
- 2026-10-18 01:02:04
Malicious IPs in the same CIDR
104.207.47.249 104.207.47.43 104.207.47.72 104.207.47.40 104.207.47.155 104.207.47.128 104.207.47.167 104.207.47.20 104.207.47.220 104.207.47.192 104.207.47.146 104.207.47.122 104.207.47.176 104.207.47.16 104.207.47.56 104.207.47.94 104.207.47.113 104.207.47.32 104.207.47.253 104.207.47.42 104.207.47.160 104.207.47.201 104.207.47.157 104.207.47.168 104.207.47.106