JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.196.245.78

104.196.245.78 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 88%: ?

88%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	78.245.196.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.196.245.78

Whois 104.196.245.78

IP Abuse Reports for 104.196.245.78:

This IP address has been reported a total of 18 times from 15 distinct sources. 104.196.245.78 was first reported on June 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-15 22:03:48 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-15 10:08:46 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 104.196.245.78 (78.245.196.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.196.245.78 (78.245.196.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:08:42.178569 2026] [security2:error] [pid 12061:tid 12061] [client 104.196.245.78:39484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twccsolutions.com"] [uri "/.env.prod.bak"] [unique_id "ai_PKqahdbbZIQA1BdVSuAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-06-15 08:21:33 (2 days ago)	20 attempts against mh-misbehave-ban on joost-pr	Brute-Force Bad Web Bot Web App Attack
🇸🇬 serverutama	2026-06-15 06:03:01 (2 days ago)	Nginx scanner: 104.196.245.78 - - [15/Jun/2026:12:13:13 +0700] "GET /.env.test HTTP/1.1" 444 0 "-" " ... show more Nginx scanner: 104.196.245.78 - - [15/Jun/2026:12:13:13 +0700] "GET /.env.test HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 OPR/58.0.3135.132" "-" 104.196.245.78 - - [15/Jun/2026:12:13:13 +0700] "GET /.env.live HTTP/1.1" 444 0 "-" "WebCopier v4.6" "-" show less	Web App Attack Bad Web Bot
🇩🇪 ger-stg-sifi1	2026-06-15 03:52:47 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 ConsulHosting	2026-06-15 00:26:58 (2 days ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 ISPLtd	2026-06-15 00:14:45 (2 days ago)	Jun 14 18:14:44 104.196.245.78 TCP SPT=52404 DPT=443 SYN Jun 14 18:14:44 104.196.245.78 TCP SPT=5242 ... show more Jun 14 18:14:44 104.196.245.78 TCP SPT=52404 DPT=443 SYN Jun 14 18:14:44 104.196.245.78 TCP SPT=52420 DPT=443 SYN Jun 14 18:14:44 104.196.245.78 TCP SPT=52436 DPT=443 ... show less	DDoS Attack
Anonymous	2026-06-14 22:59:51 (2 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-14 22:02:44 (3 days ago)	Auto-ban: >3000 req/min op 2026-06-14	Web App Attack SSH Hacking
🇺🇸 cwytech	2026-06-14 17:27:10 (3 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-http-sensitive-files.	Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-06-14 12:56:04 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 104.196.245.78 (US/United States/78.245 ... show more (mod_security) mod_security triggered on hostname [redacted] 104.196.245.78 (US/United States/78.245.196.104.bc.googleusercontent.com) show less	SQL Injection
🇨🇭 4server	2026-06-14 06:22:19 (3 days ago)	[SunJun1408:22:11.4795902026][security2:error][pid879036:tid879275][client104.196.245.78:0]ModSecuri ... show more [SunJun1408:22:11.4795902026][security2:error][pid879036:tid879275][client104.196.245.78:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.studiokellybenessere.ch.81-17-25-250.cpanel.site\"][uri\"/api/v3/.env\"][unique_id\"ai5Ik4BN6pSUewQ6kH4O1wAAAMA\"] show less	Hacking Web App Attack
🇨🇦 1gz	2026-06-14 05:56:03 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /.env.default UA: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.16) Gecko/20120421 Gecko Firefox/11.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Aetherweb Ark	2026-06-14 04:29:57 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 104.196.245.78 (US/United States/78.245.196.104 ... show more (mod_security) mod_security (id:949110) triggered by 104.196.245.78 (US/United States/78.245.196.104.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇨🇭 backslash	2026-06-14 03:51:01 (3 days ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:538:1000:b0f9:1f03:8f33:a18a

🇨🇳 117.132.5.139

🇫🇷 104.23.225.42

🇺🇸 18.220.119.98

🇫🇷 2400:cb00:1038:1000:c2a0:47c9:2eaf:17d0

🇫🇷 2400:cb00:987:1000:efc0:5998:1875:3833

🇫🇷 2400:cb00:727:1000:802f:1cbf:1d89:3b98

🇫🇷 2400:cb00:727:1000:6b09:8eb5:a7fe:8478

🇫🇷 2400:cb00:532:1000:7d6c:d524:5f24:bfc8

🇫🇷 2400:cb00:19:1000:8baa:4acf:678e:a493

🇹🇼 198.235.24.81

🇨🇴 181.49.8.57

🇺🇸 167.172.201.247

🇧🇪 128.90.145.9

🇺🇸 104.22.1.208

🇺🇸 66.132.224.15

🇳🇱 45.148.10.147

🇺🇸 43.162.103.6

🇺🇸 18.221.203.219

🇺🇸 3.145.216.37