This IP address has been reported a total of
15
times from
15 distinct
sources.
104.196.178.138 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Netherlands
with 2
reports;
Belgium
with 1
report.
The most common categories in these recent reports were:
Web App Attack
12
times;
Hacking
4
times;
Brute-Force
3
times;
Bad Web Bot
2
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
WordPress attack-tool calls | method: GET | path: //xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; W ...
show moreWordPress attack-tool calls | method: GET | path: //xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
show less
Repeated requests for suspicious nonexistent URLs, for example: /wp/wp-includes/wlwmanifest.xml (HTT ...
show moreRepeated requests for suspicious nonexistent URLs, for example: /wp/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36")
show less
http-probing - IP: 104.196.178.138 - time="2026-10-05T15:50:47+02:00" level=info msg="(555f66b4f6a7 ...
show morehttp-probing - IP: 104.196.178.138 - time="2026-10-05T15:50:47+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 104.196.178.138 (US/396982) : 4h ban on Ip 104.196.178.138" module=db
show less
