This IP address has been reported a total of
45
times from
38 distinct
sources.
104.196.211.52 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 9
reports;
Germany
with 7
reports;
Netherlands
with 7
reports.
The most common categories in these recent reports were:
Web App Attack
31
times;
Bad Web Bot
14
times;
Brute-Force
13
times;
Hacking
7
times;
Port Scan
4
times;
Other
7
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-08.
show less
Request URL: https://1.com:443/trace.axd
Request path: /trace.axd
User host address: ...
show more Request URL: https://1.com:443/trace.axd
Request path: /trace.axd
User host address: 104.196.211.52
show less
harvesting of secret and configuration files (.env, .git/config, .aws/credentials, SSH keys); e.g. / ...
show moreharvesting of secret and configuration files (.env, .git/config, .aws/credentials, SSH keys); e.g. /@fs/var/task/.env, /static//home/user/.env, /.gitlab-ci.yml. Requests blocked by our WAF (automated report).
show less
Web App Attack
Hacking
Anonymous
IP matched detection query more than 2 hosts and only bad rq long ban.
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.196.211.52 (US/U ...
show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.196.211.52 (US/United States/South Carolina/North Charleston/52.211.196.104.bc.googleusercontent.com)
show less
(mod_security) mod_security triggered on hostname [redacted] 104.196.211.52 (US/United States/52.211 ...
show more(mod_security) mod_security triggered on hostname [redacted] 104.196.211.52 (US/United States/52.211.196.104.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
IP matched detection query 20 more in short time bad rqs.
