This IP address has been reported a total of
20
times from
20 distinct
sources.
104.196.108.112 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-13.
show less
(mod_security) mod_security triggered on hostname [redacted] 104.196.108.112 (US/United States/112.1 ...
show more(mod_security) mod_security triggered on hostname [redacted] 104.196.108.112 (US/United States/112.108.196.104.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
Bot / scanning and/or hacking attempts: POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepe ...
show moreBot / scanning and/or hacking attempts: POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_, POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend, [286/285] done: stream 561, GET /__vite_rsc_findSourceMapURL?fi, POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_, POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%
show less
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000- ...
show moreBAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Web probing (622 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by ...
show moreWeb probing (622 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
http-probing - IP: 104.196.108.112 - time="2026-10-13T23:35:31+02:00" level=info msg="(555f66b4f6a7 ...
show morehttp-probing - IP: 104.196.108.112 - time="2026-10-13T23:35:31+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 104.196.108.112 (US/396982) : 4h ban on Ip 104.196.108.112" module=db
show less
(mod_security) mod_security triggered on hostname [redacted] 104.196.108.112 (US/United States/112.1 ...
show more(mod_security) mod_security triggered on hostname [redacted] 104.196.108.112 (US/United States/112.108.196.104.bc.googleusercontent.com)
show less