This IP address has been reported a total of
19
times from
19 distinct
sources.
104.196.9.148 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
United States of America
with 4
reports;
United Kingdom of Great Britain and Northern Ireland
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
14
times;
Brute-Force
5
times;
Hacking
4
times;
Bad Web Bot
3
times;
Port Scan
2
times;
Other
3
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
(mod_security) mod_security (id:949110) triggered by 104.196.9.148 (US/United States/148.9.196.104.b ...
show more(mod_security) mod_security (id:949110) triggered by 104.196.9.148 (US/United States/148.9.196.104.bc.googleusercontent.com): N in the last X secs
show less
Request URL: https://1.net:443/trace.axd
Request path: /trace.axd
User host address: ...
show more Request URL: https://1.net:443/trace.axd
Request path: /trace.axd
User host address: 104.196.9.148
show less
{"level":"info","ts":1790858123.264752,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more{"level":"info","ts":1790858123.264752,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"104.196.9.148","remote_port":"57182","client_ip":"104.196.9.148","proto":"HTTP/2.0","method":"GET","host":"status.exdatis.ai","uri":"/webpack-stats.json","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"X-Nextjs-Data":["1"],"Sec-Ch-Ua-Platform":["\"Android\""],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?1"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0"],"Accept":["text/ht
...
show less
DDoS Attack
Web App Attack
Anonymous
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 104.196.9.148 (US/United States/148.9.1 ...
show more(mod_security) mod_security triggered on hostname [redacted] 104.196.9.148 (US/United States/148.9.196.104.bc.googleusercontent.com)
show less
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: POST /api/designer/v1/file-content HTTP/2.0, POST /api/templ ...
show moreBot / scanning and/or hacking attempts: POST /api/designer/v1/file-content HTTP/2.0, POST /api/templates/preview HTTP/2.0, POST /index.php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_fi, POST /api/v1/node-load-method/customMCP HTTP/2.0, POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_fil, POST /feast/read-document HTTP/2.0, POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_, [478/478] read: stream 0, , POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend, POST /php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_, POST /api/fs/exec HTTP/2.0, POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_, POST /langflow/api/v1/validate/code HTTP/2.0, POST /flowise/api/v1/node-load-method/customMCP HTTP/2.0, POST /api/v1/validate/code HTTP/2.0, POST /exec-py HTTP/2.0, POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%, POST /api/v1/build_public_tmp/00000000-0000-0000-0000-000000000, POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e
show less
