This IP address has been reported a total of
52
times from
37 distinct
sources.
104.197.205.136 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 11
reports;
Germany
with 8
reports;
Netherlands
with 7
reports.
The most common categories in these recent reports were:
Web App Attack
47
times;
Brute-Force
19
times;
Bad Web Bot
15
times;
Hacking
11
times;
SSH
2
times;
Other
5
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
(mod_security) mod_security (id:210492) triggered by 104.197.205.136 (US/United States/136.205.197.1 ...
show more(mod_security) mod_security (id:210492) triggered by 104.197.205.136 (US/United States/136.205.197.104.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
show less
[FriAug2817:31:38.1432582026][security2:error][pid1952921:tid1953067][client104.197.205.136:0]ModSec ...
show more[FriAug2817:31:38.1432582026][security2:error][pid1952921:tid1953067][client104.197.205.136:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"freshshopcvv.cc.81-17-25-250.cpanel.site\"][uri\"/.env.production\"][unique_id\"apGp2j287Hhcp75WRQTfBwAAAAY\"]
show less
[FriAug2815:31:22.1299042026][security2:error][pid2709463:tid2709558][client104.197.205.136:0]ModSec ...
show more[FriAug2815:31:22.1299042026][security2:error][pid2709463:tid2709558][client104.197.205.136:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.bestrestmaterassi.ch.136-243-54-122.cpanel.site\"][uri\"/storage/logs/laravel.log\"][unique_id\"apGNqvejEgON3POW0Ee4HAAAAMQ\"]
show less
[28/Aug/2026:16:08:47 +0300] -- 104.197.205.136 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.e ...
show more[28/Aug/2026:16:08:47 +0300] -- 104.197.205.136 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.prod HTTP/1.1
show less
