104.196.37.138
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Google LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS396982
- Hostname(s)
- 138.37.196.104.bc.googleusercontent.com
- Domain Name
- google.com
- Country
- 🇺🇸 United States of America
- City
- North Charleston, South Carolina
No reports in the last 60 days
104.196.37.138 has been reported 32 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
32 from
28 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇪 cmbplf |
2.995 requests with url.path */xmlrpc.php
245 requests with url.path */wp-includes/wlwmanifest.xml
|
Brute-Force Bad Web Bot | |
| 🇺🇸 mnsf |
Too many Status 40X (18)
Too many Status 50X (37)
|
Brute-Force Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from 4 different servers
|
Brute-Force Web App Attack | |
| 🇩🇪 Rey |
WordPress xmlrpc.php attack [8yrbkr76]
|
Web App Attack | |
| 🇩🇪 Mario Silber |
(wordpress) Failed wordpress login from 104.196.37.138 (US/United States/138.37.196.104.bc.googleusercontent.com)
|
Brute-Force | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
|
Exploited Host Web App Attack | |
| 🇩🇪 rh24 |
(wordpress) Failed wordpress login from 104.196.37.138 (US/United States/138.37.196.104.bc.googleusercontent.com): (CF_ENABLE)
|
Brute-Force | |
| 🇸🇪 SkyDancer |
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
|
Hacking Brute-Force | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/104.196.37.138
2025-08-30 07:47:22 /wp
2025-08-30 07:47:23 /backup
2025-08-30 07:47:22 /wordpress
2025-08-30 07:47:23 /bc
2025-08-30 07:47:22 /
|
Web App Attack | |
| Anonymous |
Fuzzing/Looking for credentials files.
|
Brute-Force Web App Attack | |
| 🇺🇸 octageeks.com |
Wordpress malicious attack:[octablocked]
|
Web App Attack | |
| Anonymous |
|
Web App Attack | |
| 🇩🇪 todix |
WebAttack or semilar from 104.196.37.138
|
Web App Attack | |
| 🇩🇪 kernel-error.de |
|
Brute-Force Web App Attack | |
| Anonymous |
Bot / seems abusive / Apache connections: 37
|
DDoS Attack Web Spam Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown