JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.196.112.207

104.196.112.207 was found in our database!

This IP was reported 242 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	207.112.196.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.196.112.207

Whois 104.196.112.207

IP Abuse Reports for 104.196.112.207:

This IP address has been reported a total of 242 times from 124 distinct sources. 104.196.112.207 was first reported on September 11th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 🇨🇭 Hosting	2026-10-14 05:10:32 (1 week ago)	Automated WAF report: 300-400 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇧🇷 radardatelecom	2026-10-13 14:15:05 (1 week ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-13 13:19:52 (1 week ago)	[ti-12al] Web exploit scanning: 13 suspicious requests detected by fail2ban jail <name>. Example: 10 ... show more [ti-12al] Web exploit scanning: 13 suspicious requests detected by fail2ban jail <name>. Example: 104.196.112.207 - - \[13/Oct/2026:15:19:48 +0200\] "GET /static../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 $compatible\; GrokBot/1.0\; +https://x.ai/$" 104.196.112.207 - - \[13/Oct/2026:15:19:48 +0200\] "GET /build../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 AppleWebKit/537.36 $KHTML, like Gecko\; compatible\; Claude-SearchBot/1.0\; [email protected]$" 104.196.112.207 - - \[13/Oct/2026:15:19:48 +0200\] "GET /css../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 $compatible\; cohere-ai\; +https://cohere.com/crawler$" 104.196.112.207 - - \[13/Oct/2026:15:19:48 +0200\] "GET /js../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 $compatible\; Qwenbot/1.0\; +https://qwen.alibaba.com/$" 123masterzeilen.nl: ... show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-10-13 13:18:50 (1 week ago)	excessive HTTP 404 errors	Bad Web Bot
🇩🇪 eposs-it.de	2026-10-13 13:00:14 (1 week ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=443,80,8080,8443	Port Scan Hacking
🇳🇱 Site.eu	2026-10-13 06:11:15 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 consul.to	2026-10-13 05:32:54 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 voormedia	2026-10-13 05:17:44 (2 weeks ago)	Accessed trap at '/.npmrc'	Web App Attack
🇹🇷 eryilmaz	2026-10-13 04:11:05 (2 weeks ago)	Automated attack blocked by eryilmaz WAF/defense engine (level 6, source: siem_correlation, path: /)	Web App Attack Hacking
🇹🇷 ferique	2026-10-13 03:19:11 (2 weeks ago)	Real-time Intercept: IIS_RAW attack. Reference: EventID: 1309 Path: /.env.local::$DATA Error: İste ... show more Real-time Intercept: IIS_RAW attack. Reference: EventID: 1309 Path: /.env.local::$DATA Error: İstemcide (:) zararlı olabilecek bir değer Request.Path algılandı. (Threshold hit: 3 errors in 90 sec) show less	Web App Attack Bad Web Bot
🇫🇷 ecode hosting	2026-10-13 02:39:20 (2 weeks ago)	Domain : MailEnable WebMail Rule : hack 2026-10-13 01:57:22 10.100.1.20 GET /@fs/home/ec2-user/.aws/ ... show more Domain : MailEnable WebMail Rule : hack 2026-10-13 01:57:22 10.100.1.20 GET /@fs/home/ec2-user/.aws/credentials raw?? 443 - 104.196.112.207 Mozilla/5.0 (compatible; DeepSeekBot/1.0; https://www.deepseek.com/) - 404 0 2 168 - - show less	Hacking SQL Injection Brute-Force
🇹🇷 hostopya.com	2026-10-13 02:07:28 (2 weeks ago)	[plesk-apache] 6 failed attempt(s). Log: [Tue Oct 13 05:01:50.852417 2026] [authz_core:error] [pid 1 ... show more [plesk-apache] 6 failed attempt(s). Log: [Tue Oct 13 05:01:50.852417 2026] [authz_core:error] [pid 1299655] [client 104.196.112.207:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/firebase-admin.json\|[Tue Oct 13 05:01:50.883505 2026] [authz_core:error] [pid 1192464] [client 104.196.112.207:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/gcp-credentials.json\|[Tue Oct 13 05:01:51.065744 2026] [authz_core:error] [pid 1129324] [client 104.196.112.207:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env\|[Tue Oct 13 05:07:27.274514 2026] [authz_core:error] [pid 1192459] [client 104.196.112.207:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/firebase-admin.json\|[Tue Oct 13 05:07:27.504474 2026] [authz_core:error] [pid 1129324] [client 104.196.112.207:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/gcp-credential show less	Brute-Force Web App Attack
🇹🇷 ScchutzZ	2026-10-13 02:05:07 (2 weeks ago)	Fail2Ban banı. Jail: plesk-modsecurity.	Brute-Force
🇹🇷 SeczarSecureOps	2026-10-13 01:46:13 (2 weeks ago)	Auto-blocked by Seczar SecureOps — WAF Attack Burst (449 events in 10min) at 2026-10-13 01:46	Web App Attack Bad Web Bot
🇮🇹 VHosting	2026-10-13 01:45:07 (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 242 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 2a02:cb80:4068:c7c1:64ea:cd9:26ea:74c9

🇷🇺 201.24.124.238

🇺🇸 199.165.159.186

🇧🇷 191.37.76.156

🇵🇰 153.117.69.20

🇬🇧 144.126.228.71

🇧🇩 113.212.110.23

🇮🇳 103.172.56.123

🇵🇰 103.31.93.156

🇫🇷 91.196.152.3

🇳🇱 86.38.187.12

🇪🇸 81.36.71.136

🇺🇸 52.180.140.72

🇨🇳 43.226.39.182

🇮🇩 43.133.131.35

🇨🇳 39.104.64.139

🇵🇪 38.224.143.2

🇻🇪 38.74.245.10

🇮🇪 34.250.170.186

🇺🇸 34.24.85.52