This IP address has been reported a total of
7
times from
6 distinct
sources.
104.194.196.2 was first reported on
September 15th 2023 , and the most recent report was
4 weeks ago United States of America
with 2
reports.
The most common categories in these recent reports were:
DDoS Attack
2
times;
Brute-Force
1
time;
Web App Attack
1
time;
Bad Web Bot
1
time;
Exploited Host
1
time;
Other
1
time.
Old Reports
The most recent abuse report for this IP address is from
4 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
Shouddy Tarano
2026-09-26 19:04:14
(4 weeks ago)
[Sat Sep 26 13:04:13.306238 2026] [authz_core:error] [pid 3899133:tid 139792402581248] [client 104.1 ...
show more
[Sat Sep 26 13:04:13.306238 2026] [authz_core:error] [pid 3899133:tid 139792402581248] [client 104.194.196.2:48036] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/
[Sat Sep 26 13:04:13.308072 2026] [authz_core:error] [pid 3899133:tid 139792402581248] [client 104.194.196.2:48036] AH01630: client denied by server configuration: /usr/share/httpd/noindex/index.html
[Sat Sep 26 13:04:13.712083 2026] [authz_core:error] [pid 3775058:tid 139792092149504] [client 104.194.196.2:45976] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/robots.txt
[Sat Sep 26 13:04:14.091178 2026] [authz_core:error] [pid 3775306:tid 139792427759360] [client 104.194.196.2:45980] AH01630: client denied by server configuration: /var/www/erpcampestremty/public/
[Sat Sep 26 13:04:14.094395 2026] [authz_core:error] [pid 3775306:tid 139792427759360] [client 104.194.196.2:45980] AH01630: client denied by server configuration: /usr/share/httpd/noindex/index.html
...
show less
DDoS Attack
Web Spam
Brute-Force
Web App Attack
🇺🇸
Zandro
2026-09-06 05:00:14
(1 month ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇬🇧
Oakley
2026-05-13 12:06:44
(5 months ago)
(mod_security) mod_security (id:900209) triggered by 104.194.196.2 (US/United States/mailer-104-194- ...
show more
(mod_security) mod_security (id:900209) triggered by 104.194.196.2 (US/United States/mailer-104-194-196-2.mail.whitelistmaildomain.net): 5 in the last 900 secs
show less
Web App Attack
Hacking
🇸🇬
mypatricks
2026-04-24 02:12:38
(6 months ago)
104.194.196.2 | Port: 13235 | DNS: mailer-104-194-196-2.mail.whitelistmaildomain.net 2026-04-24T10:1 ...
show more
104.194.196.2 | Port: 13235 | DNS: mailer-104-194-196-2.mail.whitelistmaildomain.net 2026-04-24T10:12:37+08:00 America/Chicago | Mail Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74 HTTP/1.1 443 GET | URL: / | Ref: https://www.yahoo.com/ | Country: US/United States/-08:00 IP City: Dallas Android Mobile 9f1195766bfc21d2-DFW/Dallas, TX, United States 1 hits/0 secs Robots 0
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
2024-05-15 03:23:44
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-03-29 13:46:32
(2 years ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇷🇸
Smel
2023-09-15 04:03:46
(3 years ago)
Unauthorized Probe/Connection, Hack -
Port Scan
Hacking
Showing 1 to
7
of 7 reports
