JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.196.241.205

104.196.241.205 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	205.241.196.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.196.241.205

Whois 104.196.241.205

IP Abuse Reports for 104.196.241.205:

This IP address has been reported a total of 36 times from 29 distinct sources. 104.196.241.205 was first reported on August 25th 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-27 21:59:31 (21 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-26. show less	Web App Attack SSH Hacking
Anonymous	2026-08-27 09:32:03 (1 day ago)	Bot / scanning and/or hacking attempts: GET /env.js HTTP/1.1, GET /read?url=file:///proc/1/environ H ... show more Bot / scanning and/or hacking attempts: GET /env.js HTTP/1.1, GET /read?url=file:///proc/1/environ HTTP/1.1, GET /google-services.json HTTP/1.1, GET /fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-da, GET /.env.js HTTP/1.1, GET /?raw?? HTTP/1.1, GET /api/file?path=../../.env HTTP/1.1, GET / HTTP/1.1, GET /@fs/.env?raw?? HTTP/1.1, GET /debug/pprof/cmdline HTTP/1.1, GET /aws-exports.js HTTP/1.1, GET /.vercel/.env HTTP/1.1, GET /?file=../../.aws/credentials HTTP/1.1, GET /runtime-config.js HTTP/1.1, GET /download?file=../../.env HTTP/1.1, GET /private/.env HTTP/1.1, GET /prod/.env HTTP/1.1, GET /laravel/.env HTTP/1.1, GET /config/.env.production HTTP/1.1, GET /.env.orig HTTP/1.1, GET /api/..;/actuator/env HTTP/1.1, GET /internal/.env HTTP/1.1, GET /backend/api/.env HTTP/1.1, GET /dev/.env HTTP/1.1, GET /application.env HTTP/1.1, GET /api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fm show less	Hacking Web App Attack
🇧🇪 taivas.nl	2026-08-27 04:32:53 (1 day ago)	Many_bad_calls	Web App Attack
🇦🇺 2000cn.com.au	2026-08-26 19:21:25 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing	Web App Attack Hacking
🇩🇪 grassau.com	2026-08-26 18:21:18 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.196.241.205 (US/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.196.241.205 (US/United States/Oregon/The Dalles/205.241.196.104.bc.googleusercontent.com) show less	Bad Web Bot
Anonymous	2026-08-26 17:58:11 (2 days ago)	Bot / seems abusive / Apache connections: 102	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-08-26 15:27:10 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 grassau.com	2026-08-26 14:38:24 (2 days ago)	Port Scan detected from 104.196.241.205 (US/United States/Oregon/The Dalles/205.241.196.104.bc.goo ... show more Port Scan detected from 104.196.241.205 (US/United States/Oregon/The Dalles/205.241.196.104.bc.googleusercontent.com). show less	Port Scan
🇺🇸 mnsf	2026-08-26 12:05:23 (2 days ago)	Scanning/Probing (12)	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-08-26 11:46:41 (2 days ago)	Aggressive web search of vulnerable pages: /app/.env /.env /static../.env /config/.env /backend/.env ... show more Aggressive web search of vulnerable pages: /app/.env /.env /static../.env /config/.env /backend/.env ... show less	Web App Attack
🇳🇱 Site.eu	2026-08-26 11:00:51 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 consul.to	2026-08-26 09:47:33 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 paissangroup	2026-08-26 09:31:10 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 09:13:38 (2 days ago)	(mod_security) mod_security (id:211190) triggered by 104.196.241.205 (205.241.196.104.bc.googleuserc ... show more (mod_security) mod_security (id:211190) triggered by 104.196.241.205 (205.241.196.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:13:34.405688 2026] [security2:error] [pid 19814:tid 19814] [client 104.196.241.205:50968] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|mail.lovechicks.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /download?file=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lovechicks.com"] [uri "/download"] [unique_id "ao6uPtRrgvBaLq4SOFtmyQAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 09:03:11 (2 days ago)	104.196.241.205 - - [26/Aug/2026:11:02:52 +0200] "GET /.env HTTP/1.1" 403 5546 "https://necke.cc/.en ... show more 104.196.241.205 - - [26/Aug/2026:11:02:52 +0200] "GET /.env HTTP/1.1" 403 5546 "https://necke.cc/.env" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.1853.77 Mobile Safari/537.36; compatible; Claude-Sear show less	Web Spam Blog Spam Brute-Force Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 139.59.135.230

🇫🇷 2400:cb00:986:1000:916d:326b:9e97:314a

🇨🇳 106.12.86.201

🇺🇸 52.250.243.96

🇧🇷 35.198.7.145

🇺🇸 34.139.47.185

🇲🇦 196.75.170.141

🇨🇳 182.138.158.158

🇺🇸 162.216.150.131

🇺🇸 159.203.83.195

🇺🇸 136.107.71.16

🇫🇷 85.217.140.52

🇱🇺 46.151.182.231

🇬🇧 35.203.210.197

🇬🇧 35.203.210.106

🇬🇧 185.61.152.26

🇸🇪 171.25.158.47

🇵🇭 119.92.70.82

🇺🇸 66.132.186.226

🇬🇧 51.195.183.42