Dashboard›🇭🇰 Hong Kong›104.208.73.227
ABUSE.MOM
THREAT REPORT

IP Threat Report
104.208.73.227

ABUSE.MOM — BEHAVE OR GET EXPOSED

Generated: 2026-10-24 18:09:11
First seen: 2026-10-02 22:38:47
Last seen: 2026-10-11 01:06:39
280

⛔ Verdict: BLOCK

This IP address has been classified as a source of malicious automated activity. Threat score: 280/100. Total malicious requests observed: 6196.

BURSTDANGER_PATHRATIO_404REDIRECT_PROBEUA_SUS
01

Geolocation & Classification

IP Address
104.208.73.227
Type
Hosting
Country
🇭🇰 Hong Kong
City
Hong Kong
ISP
Microsoft Corporation
Organization
Microsoft Azure Cloud (eastasia)
Autonomous System
AS8075 Microsoft Corporation
Hit Count
6196
02

Detection Signatures

SignatureDescriptionPointsSeverity
404 ratio 40-60%Majority of requests returned 404 — enumeration+15
404 ratio >= 60%Majority of requests returned 404 — enumeration+25
Burst 11/2sAbnormally fast request rate — automated scanning+35
Burst 12/2sAbnormally fast request rate — automated scanning+35
Burst 13/2sAbnormally fast request rate — automated scanning+35
Burst 14/2sAbnormally fast request rate — automated scanning+35
Burst 35/10sAbnormally fast request rate — automated scanning+35
Burst 36/10sAbnormally fast request rate — automated scanning+35
Burst 37/10sAbnormally fast request rate — automated scanning+35
Burst 38/10sAbnormally fast request rate — automated scanning+35
Burst 39/10sAbnormally fast request rate — automated scanning+35
Burst 41/10sAbnormally fast request rate — automated scanning+35
Burst 42/10sAbnormally fast request rate — automated scanning+35
Burst 43/10sAbnormally fast request rate — automated scanning+35
Burst 44/10sAbnormally fast request rate — automated scanning+35
Burst 45/10sAbnormally fast request rate — automated scanning+35
Burst 46/10sAbnormally fast request rate — automated scanning+35
Burst 47/10sAbnormally fast request rate — automated scanning+35
Burst 48/10sAbnormally fast request rate — automated scanning+35
Burst 49/10sAbnormally fast request rate — automated scanning+35
Danger medium hits: 1031Medium-risk: admin panels, config files+60
Danger medium hits: 1046Medium-risk: admin panels, config files+60
Danger medium hits: 1049Medium-risk: admin panels, config files+60
Danger medium hits: 108Medium-risk: admin panels, config files+60
Danger medium hits: 1110Medium-risk: admin panels, config files+60
Danger medium hits: 1119Medium-risk: admin panels, config files+60
Danger medium hits: 1148Medium-risk: admin panels, config files+60
Danger medium hits: 115Medium-risk: admin panels, config files+60
Danger medium hits: 1157Medium-risk: admin panels, config files+60
Danger medium hits: 1164Medium-risk: admin panels, config files+60
Danger medium hits: 1177Medium-risk: admin panels, config files+60
Danger medium hits: 118Medium-risk: admin panels, config files+60
Danger medium hits: 119Medium-risk: admin panels, config files+60
Danger medium hits: 1217Medium-risk: admin panels, config files+60
Danger medium hits: 1225Medium-risk: admin panels, config files+60
Danger medium hits: 124Medium-risk: admin panels, config files+60
Danger medium hits: 125Medium-risk: admin panels, config files+60
Danger medium hits: 126Medium-risk: admin panels, config files+60
Danger medium hits: 1261Medium-risk: admin panels, config files+60
Danger medium hits: 128Medium-risk: admin panels, config files+60
Danger medium hits: 1290Medium-risk: admin panels, config files+60
Danger medium hits: 1314Medium-risk: admin panels, config files+60
Danger medium hits: 1328Medium-risk: admin panels, config files+60
Danger medium hits: 1359Medium-risk: admin panels, config files+60
Danger medium hits: 1367Medium-risk: admin panels, config files+60
Danger medium hits: 140Medium-risk: admin panels, config files+60
Danger medium hits: 1428Medium-risk: admin panels, config files+60
Danger medium hits: 148Medium-risk: admin panels, config files+60
Danger medium hits: 1486Medium-risk: admin panels, config files+60
Danger medium hits: 169Medium-risk: admin panels, config files+60
Danger medium hits: 174Medium-risk: admin panels, config files+60
Danger medium hits: 177Medium-risk: admin panels, config files+60
Danger medium hits: 178Medium-risk: admin panels, config files+60
Danger medium hits: 180Medium-risk: admin panels, config files+60
Danger medium hits: 182Medium-risk: admin panels, config files+60
Danger medium hits: 186Medium-risk: admin panels, config files+60
Danger medium hits: 193Medium-risk: admin panels, config files+60
Danger medium hits: 230Medium-risk: admin panels, config files+60
Danger medium hits: 235Medium-risk: admin panels, config files+60
Danger medium hits: 236Medium-risk: admin panels, config files+60
Danger medium hits: 240Medium-risk: admin panels, config files+60
Danger medium hits: 248Medium-risk: admin panels, config files+60
Danger medium hits: 249Medium-risk: admin panels, config files+60
Danger medium hits: 251Medium-risk: admin panels, config files+60
Danger medium hits: 256Medium-risk: admin panels, config files+60
Danger medium hits: 258Medium-risk: admin panels, config files+60
Danger medium hits: 282Medium-risk: admin panels, config files+60
Danger medium hits: 284Medium-risk: admin panels, config files+60
Danger medium hits: 293Medium-risk: admin panels, config files+60
Danger medium hits: 306Medium-risk: admin panels, config files+60
Danger medium hits: 307Medium-risk: admin panels, config files+60
Danger medium hits: 308Medium-risk: admin panels, config files+60
Danger medium hits: 314Medium-risk: admin panels, config files+60
Danger medium hits: 317Medium-risk: admin panels, config files+60
Danger medium hits: 323Medium-risk: admin panels, config files+60
Danger medium hits: 333Medium-risk: admin panels, config files+60
Danger medium hits: 335Medium-risk: admin panels, config files+60
Danger medium hits: 34Medium-risk: admin panels, config files+60
Danger medium hits: 341Medium-risk: admin panels, config files+60
Danger medium hits: 35Medium-risk: admin panels, config files+60
Danger medium hits: 352Medium-risk: admin panels, config files+60
Danger medium hits: 356Medium-risk: admin panels, config files+60
Danger medium hits: 369Medium-risk: admin panels, config files+60
Danger medium hits: 371Medium-risk: admin panels, config files+60
Danger medium hits: 375Medium-risk: admin panels, config files+60
Danger medium hits: 380Medium-risk: admin panels, config files+60
Danger medium hits: 381Medium-risk: admin panels, config files+60
Danger medium hits: 382Medium-risk: admin panels, config files+60
Danger medium hits: 384Medium-risk: admin panels, config files+60
Danger medium hits: 389Medium-risk: admin panels, config files+60
Danger medium hits: 40Medium-risk: admin panels, config files+60
Danger medium hits: 408Medium-risk: admin panels, config files+60
Danger medium hits: 410Medium-risk: admin panels, config files+60
Danger medium hits: 417Medium-risk: admin panels, config files+60
Danger medium hits: 421Medium-risk: admin panels, config files+60
Danger medium hits: 422Medium-risk: admin panels, config files+60
Danger medium hits: 425Medium-risk: admin panels, config files+60
Danger medium hits: 426Medium-risk: admin panels, config files+60
Danger medium hits: 428Medium-risk: admin panels, config files+60
Danger medium hits: 429Medium-risk: admin panels, config files+60
Danger medium hits: 433Medium-risk: admin panels, config files+60
Danger medium hits: 440Medium-risk: admin panels, config files+60
Danger medium hits: 442Medium-risk: admin panels, config files+60
Danger medium hits: 449Medium-risk: admin panels, config files+60
Danger medium hits: 45Medium-risk: admin panels, config files+60
Danger medium hits: 457Medium-risk: admin panels, config files+60
Danger medium hits: 458Medium-risk: admin panels, config files+60
Danger medium hits: 472Medium-risk: admin panels, config files+60
Danger medium hits: 473Medium-risk: admin panels, config files+60
Danger medium hits: 474Medium-risk: admin panels, config files+60
Danger medium hits: 481Medium-risk: admin panels, config files+60
Danger medium hits: 487Medium-risk: admin panels, config files+60
Danger medium hits: 489Medium-risk: admin panels, config files+60
Danger medium hits: 504Medium-risk: admin panels, config files+60
Danger medium hits: 505Medium-risk: admin panels, config files+60
Danger medium hits: 507Medium-risk: admin panels, config files+60
Danger medium hits: 509Medium-risk: admin panels, config files+60
Danger medium hits: 511Medium-risk: admin panels, config files+60
Danger medium hits: 520Medium-risk: admin panels, config files+60
Danger medium hits: 522Medium-risk: admin panels, config files+60
Danger medium hits: 523Medium-risk: admin panels, config files+60
Danger medium hits: 534Medium-risk: admin panels, config files+60
Danger medium hits: 54Medium-risk: admin panels, config files+60
Danger medium hits: 553Medium-risk: admin panels, config files+60
Danger medium hits: 559Medium-risk: admin panels, config files+60
Danger medium hits: 563Medium-risk: admin panels, config files+60
Danger medium hits: 565Medium-risk: admin panels, config files+60
Danger medium hits: 568Medium-risk: admin panels, config files+60
Danger medium hits: 57Medium-risk: admin panels, config files+60
Danger medium hits: 576Medium-risk: admin panels, config files+60
Danger medium hits: 579Medium-risk: admin panels, config files+60
Danger medium hits: 583Medium-risk: admin panels, config files+60
Danger medium hits: 599Medium-risk: admin panels, config files+60
Danger medium hits: 60Medium-risk: admin panels, config files+60
Danger medium hits: 601Medium-risk: admin panels, config files+60
Danger medium hits: 605Medium-risk: admin panels, config files+60
Danger medium hits: 607Medium-risk: admin panels, config files+60
Danger medium hits: 61Medium-risk: admin panels, config files+60
Danger medium hits: 611Medium-risk: admin panels, config files+60
Danger medium hits: 614Medium-risk: admin panels, config files+60
Danger medium hits: 620Medium-risk: admin panels, config files+60
Danger medium hits: 625Medium-risk: admin panels, config files+60
Danger medium hits: 645Medium-risk: admin panels, config files+60
Danger medium hits: 647Medium-risk: admin panels, config files+60
Danger medium hits: 648Medium-risk: admin panels, config files+60
Danger medium hits: 65Medium-risk: admin panels, config files+60
Danger medium hits: 653Medium-risk: admin panels, config files+60
Danger medium hits: 660Medium-risk: admin panels, config files+60
Danger medium hits: 662Medium-risk: admin panels, config files+60
Danger medium hits: 665Medium-risk: admin panels, config files+60
Danger medium hits: 672Medium-risk: admin panels, config files+60
Danger medium hits: 673Medium-risk: admin panels, config files+60
Danger medium hits: 681Medium-risk: admin panels, config files+60
Danger medium hits: 69Medium-risk: admin panels, config files+60
Danger medium hits: 698Medium-risk: admin panels, config files+60
Danger medium hits: 704Medium-risk: admin panels, config files+60
Danger medium hits: 718Medium-risk: admin panels, config files+60
Danger medium hits: 725Medium-risk: admin panels, config files+60
Danger medium hits: 729Medium-risk: admin panels, config files+60
Danger medium hits: 730Medium-risk: admin panels, config files+60
Danger medium hits: 74Medium-risk: admin panels, config files+60
Danger medium hits: 750Medium-risk: admin panels, config files+60
Danger medium hits: 754Medium-risk: admin panels, config files+60
Danger medium hits: 757Medium-risk: admin panels, config files+60
Danger medium hits: 758Medium-risk: admin panels, config files+60
Danger medium hits: 768Medium-risk: admin panels, config files+60
Danger medium hits: 77Medium-risk: admin panels, config files+60
Danger medium hits: 778Medium-risk: admin panels, config files+60
Danger medium hits: 785Medium-risk: admin panels, config files+60
Danger medium hits: 794Medium-risk: admin panels, config files+60
Danger medium hits: 797Medium-risk: admin panels, config files+60
Danger medium hits: 803Medium-risk: admin panels, config files+60
Danger medium hits: 807Medium-risk: admin panels, config files+60
Danger medium hits: 834Medium-risk: admin panels, config files+60
Danger medium hits: 843Medium-risk: admin panels, config files+60
Danger medium hits: 855Medium-risk: admin panels, config files+60
Danger medium hits: 862Medium-risk: admin panels, config files+60
Danger medium hits: 877Medium-risk: admin panels, config files+60
Danger medium hits: 890Medium-risk: admin panels, config files+60
Danger medium hits: 908Medium-risk: admin panels, config files+60
Danger medium hits: 909Medium-risk: admin panels, config files+60
Danger medium hits: 913Medium-risk: admin panels, config files+60
Danger medium hits: 930Medium-risk: admin panels, config files+60
Danger medium hits: 959Medium-risk: admin panels, config files+60
Danger medium hits: 966Medium-risk: admin panels, config files+60
Danger medium hits: 979Medium-risk: admin panels, config files+60
Danger medium hits: 995Medium-risk: admin panels, config files+60
Danger strong hits: 1High-risk paths: shells, RCE vectors, exploits+25
Danger strong hits: 10High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 105High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 11High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 110High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 111High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 113High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 115High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 116High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 12High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 13High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 133High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 134High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 136High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 138High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 14High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 140High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 142High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 143High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 145High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 147High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 148High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 149High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 15High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 150High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 151High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 152High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 153High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 154High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 155High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 16High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 161High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 162High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 163High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 164High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 165High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 166High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 167High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 168High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 17High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 170High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 173High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 176High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 177High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 178High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 179High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 18High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 180High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 181High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 183High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 185High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 186High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 19High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 194High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 195High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 20High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 202High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 208High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 209High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 21High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 218High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 22High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 223High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 225High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 228High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 24High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 241High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 246High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 247High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 249High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 26High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 27High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 270High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 272High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 275High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 282High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 3High-risk paths: shells, RCE vectors, exploits+75
Danger strong hits: 30High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 31High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 32High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 33High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 34High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 36High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 38High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 4High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 40High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 41High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 42High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 45High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 46High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 48High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 50High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 51High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 54High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 57High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 58High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 6High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 60High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 64High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 65High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 66High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 67High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 68High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 69High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 7High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 70High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 71High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 74High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 76High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 77High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 78High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 79High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 80High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 85High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 92High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 95High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 96High-risk paths: shells, RCE vectors, exploits+100
Danger strong hits: 97High-risk paths: shells, RCE vectors, exploits+100
Probe 302→404Behavioral anomaly detected by automated analysis+20
UA suspiciousBehavioral anomaly detected by automated analysis+15
Σ = 22425
03

Observed Activity

Reconstructed HTTP requests from server access logs. Target domains redacted for security.

[redacted]
GET
/
200
[redacted]
GET
/page
200
Requests shown: 2 · HTTP 404: 0 · Dangerous patterns: 0

* Typical request patterns for detected signatures. Actual target domains are redacted.

04

Timeline

2026-10-02 22:38:47
First malicious request detected
IP entered monitoring from server access logs
During observation
Multiple detection signatures triggered
404 ratio 40-60% (+15), 404 ratio >= 60% (+25), Burst 11/2s (+35)
2026-10-11 01:06:39
Last malicious request observed
Total score reached: 280/100
Next cycle
IP blocked — all subsequent requests denied (HTTP 403)
Added to blocklist automatically
05

Network Provider

Microsoft Corporation
AS8075 · 🇭🇰 Hong Kong

We have detected 1852 malicious IPs from this autonomous system.

View all IPs from AS8075 →
06

Recommendations

Actions taken & recommended

  • IP 104.208.73.227 is blocked at application level (HTTP 403)
  • Consider blocking at firewall level (iptables/CSF) to reduce server load
  • Other malicious IPs detected in the same /24 subnet — consider blocking 104.208.73.0/24
  • Report abuse to the network provider via their abuse contact
  • Ensure sensitive files (.env, .git, backups) are not accessible from the web

🔎 Path Enumeration Protection

Block scanning from 104.208.73.227: rate-limit 404 responses per IP, deploy a honeypot 404 page, ensure no backup files are web-accessible.

🌊 Traffic Flood Defense

IP 104.208.73.227 is generating excessive traffic. Limit connections per source IP. Enable geographic blocking if traffic from this region is unexpected.

🤖 User-Agent Anomaly Defense

IP 104.208.73.227 shows suspicious UA behavior. Block empty User-Agent requests. Implement JavaScript-based bot detection for sensitive endpoints.

07

Neighbors in 104.208.73.0/24

Other blocked IPs from the same /24 subnet — indicates systematic abuse from this network range.

104.208.73.251
Score: 280 · Hits: 2879
09

Blacklist Status (DNSBL)

This IP was checked against major DNS-based blacklists used by mail servers and firewalls worldwide.

✓ Clean
psbl.surriel.com
✓ Clean
b.barracudacentral.org
✓ Clean
cbl.abuseat.org
✓ Clean
zen.spamhaus.org
✓ Clean
bl.blocklist.de
✓ Clean
dnsbl.dronebl.org
✓ Clean
spam.dnsbl.sorbs.net
✓ Clean
bl.spamcop.net

Checked: Spamhaus, SpamCop, Barracuda, SORBS, CBL, UCEProtect. Results may change over time.

10

Threat Analysis

104.208.73.227 has been assigned a threat score of 280/100 (Critical). This places it in the critical threat category. Immediate blocking is strongly advised across all network perimeters.

The following attack categories were identified:

Path EnumerationRequest FloodingUser-Agent Anomaly

📊 Threat Analysis

Our monitoring infrastructure has identified 104.208.73.227, geolocated to Hong Kong, Hong Kong, operating on the network of Microsoft Corporation, as a source of suspicious network activity. Our sensors captured 6,196 malicious requests from this address across a 8-day span, reflecting a sustained attack cadence of ~774.5 requests per day. The IP is classified as hosting/datacenter infrastructure, commonly associated with rented servers used for automated attack campaigns, botnet command-and-control, or vulnerability scanning at scale. The diversity of 3 separate attack methods suggests a comprehensive attack toolkit — likely an automated scanner that tests for vulnerabilities across multiple categories. Our records show 1,329 malicious IPs originating from Hong Kong, positioning it as a major contributor to global threat activity. A score of 280/100 places this address in the top tier of severity. Block and investigate any historical connections.

This IP belongs to a hosting or data center provider. Malicious traffic from hosting infrastructure often originates from compromised VPS instances, rented servers used for scanning campaigns, or abused free-tier cloud accounts. Hosting providers typically respond to abuse reports within 24-72 hours.

11

Related Threats

🇭🇰 Top threats from Hong Kong

45.138.12.32 (358)45.138.12.45 (348)45.138.12.34 (340)45.138.12.47 (340)45.138.12.40 (340)View all →

🏢 Same network: AS8075

68.155.155.199 (320)20.127.136.245 (318)20.151.200.44 (315)20.92.77.159 (310)20.210.128.125 (310)View all →
12

Security Intelligence

💡 DDoS Mitigation Approaches

Distributed denial of service attacks overwhelm infrastructure with traffic volume. Effective mitigation combines always-on traffic scrubbing, anycast network distribution, rate limiting, and the ability to quickly scale absorption capacity during attacks.

💡 HTTP Header Analysis for Threat Detection

Examining HTTP headers beyond User-Agent reveals attack tools and automated scripts. Missing standard headers, unusual ordering, non-standard values, and inconsistencies with claimed client identity all serve as reliable detection signals.

🔍 Check Any IP Address

Share this report:
AboutDisclaimerTermsAbuse Reports Tracker
Report generated 24.10.2026 18:09
Behave or get exposed