JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.196.46.111

104.196.46.111 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	111.46.196.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.196.46.111

Whois 104.196.46.111

IP Abuse Reports for 104.196.46.111:

This IP address has been reported a total of 98 times from 64 distinct sources. 104.196.46.111 was first reported on July 31st 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Mendip_Defender	2026-08-01 17:11:16 (21 minutes ago)	[01/Aug/2026:18:11:19.912384 +0100] am4ot_PS9bFJqWblUJmsUwAAAEo 104.196.46.111 44036 188.246.206.60 ... show more [01/Aug/2026:18:11:19.912384 +0100] am4ot_PS9bFJqWblUJmsUwAAAEo 104.196.46.111 44036 188.246.206.60 7080 [01/Aug/2026:18:11:19.915091 +0100] am4otxJ5F5jXYD78OBQByAAAAAg 104.196.46.111 44066 188.246.206.60 7080 ... show less	Brute-Force
Anonymous	2026-08-01 17:03:33 (28 minutes ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇷🇴 SpamStopper	2026-08-01 16:56:48 (35 minutes ago)	Fail2Ban - WordPress Bruteforce WordPress\(Anomis\) logins and Looking for CMS/PHP/SQL vulnerabiliti ... show more Fail2Ban - WordPress Bruteforce WordPress\(Anomis\) logins and Looking for CMS/PHP/SQL vulnerabilities show less	Port Scan Hacking Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-08-01 16:39:20 (53 minutes ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 15:42:55 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 104.196.46.111 (111.46.196.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.196.46.111 (111.46.196.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 11:42:50.626135 2026] [security2:error] [pid 4080833:tid 4080833] [client 104.196.46.111:59096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.akramansari.com"] [uri "/.env.production"] [unique_id "am4T-oHsd-1we9Z2jEtRvwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-01 14:52:02 (2 hours ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: /wp-config.php.bak \| 2 distinct paths \| UA: CCBot ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: /wp-config.php.bak \| 2 distinct paths \| UA: CCBot/2.0 (https://commoncrawl.org/faq/) show less	Bad Web Bot
Anonymous	2026-08-01 14:50:21 (2 hours ago)	Blocked by ModSec and CSF	Port Scan
🇨🇭 Mario Bretscher	2026-08-01 14:41:54 (2 hours ago)	[Sat Aug 01 16:41:51.004772 2026] [php:error] [pid 3047534] [client 104.196.46.111:43624] script '/v ... show more [Sat Aug 01 16:41:51.004772 2026] [php:error] [pid 3047534] [client 104.196.46.111:43624] script '/var/www/html/config.php' not found or unable to stat [Sat Aug 01 16:41:51.533562 2026] [php:error] [pid 3046591] [client 104.196.46.111:43860] script '/var/www/html/.env.php' not found or unable to stat [Sat Aug 01 16:41:53.617819 2026] [php:error] [pid 3046600] [client 104.196.46.111:43760] script '/var/www/html/.env.local.php' not found or unable to stat ... show less	Web App Attack
🇨🇦 1gz	2026-08-01 14:03:50 (3 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 rh24	2026-08-01 13:38:57 (3 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 104.196.46.111 (US/United States/111.46 ... show more (mod_security) mod_security triggered on hostname [redacted] 104.196.46.111 (US/United States/111.46.196.104.bc.googleusercontent.com) show less	SQL Injection
🇨🇭 4server	2026-08-01 13:06:36 (4 hours ago)	[SatAug0115:06:31.2637432026][security2:error][pid3587667:tid3587699][client104.196.46.111:0]ModSecu ... show more [SatAug0115:06:31.2637432026][security2:error][pid3587667:tid3587699][client104.196.46.111:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"leonitraslochi.ch\"][uri\"/.env.development\"][unique_id\"am3vV44Yz5ZluIgUc6x38QAAAU8\"] show less	Hacking Web App Attack
🇫🇮 Christopher Hughes	2026-08-01 13:01:04 (4 hours ago)	[Sat Aug 01 14:01:04.385609 2026] [proxy_fcgi:error] [pid 2451353:tid 139826527454784] [client 104.1 ... show more [Sat Aug 01 14:01:04.385609 2026] [proxy_fcgi:error] [pid 2451353:tid 139826527454784] [client 104.196.46.111:38298] AH01071: Got error 'Primary script unknown' [Sat Aug 01 14:01:04.411293 2026] [proxy_fcgi:error] [pid 2450563:tid 139826510669376] [client 104.196.46.111:38328] AH01071: Got error 'Primary script unknown' [Sat Aug 01 14:01:04.412690 2026] [proxy_fcgi:error] [pid 2450563:tid 139825445320256] [client 104.196.46.111:38484] AH01071: Got error 'Primary script unknown' [Sat Aug 01 14:01:04.412856 2026] [proxy_fcgi:error] [pid 2450563:tid 139826544240192] [client 104.196.46.111:38442] AH01071: Got error 'Primary script unknown' [Sat Aug 01 14:01:04.415367 2026] [proxy_fcgi:error] [pid 2451300:tid 139825445320256] [client 104.196.46.111:38452] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 LRob	2026-08-01 13:00:35 (4 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /api/.env \| 5 distinct paths \| UA: Mozilla/5.0 A ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /api/.env \| 5 distinct paths \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot show less	Hacking
🇫🇷 Campus France	2026-08-01 12:29:25 (5 hours ago)	[Sat Aug 01 14:29:24.800290 2026] [php:error] [pid 3066577] [client 104.196.46.111:15508] script '/v ... show more [Sat Aug 01 14:29:24.800290 2026] [php:error] [pid 3066577] [client 104.196.46.111:15508] script '/var/www/html/campus-perpignan/.env.php' not found or unable to stat [Sat Aug 01 14:29:24.805436 2026] [php:error] [pid 3065060] [client 104.196.46.111:15330] script '/var/www/html/campus-perpignan/.env.local.php' not found or unable to stat [Sat Aug 01 14:29:24.806498 2026] [php:error] [pid 3066944] [client 104.196.46.111:15314] script '/var/www/html/campus-perpignan/.env.production.php' not found or unable to stat [Sat Aug 01 14:29:24.805436 2026] [php:error] [pid 3065060] [client 104.196.46.111:15330] script '/var/www/html/campus-perpignan/.env.local.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 12:21:45 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.196.46.111 (111.46.196.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.196.46.111 (111.46.196.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 08:21:39.565497 2026] [security2:error] [pid 4089020:tid 4089020] [client 104.196.46.111:17968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homecheckinmaine.com"] [uri "/.env"] [unique_id "am3k09UzXi-QjwhEC9gVpQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.208

🇨🇳 180.103.119.98

🇧🇷 177.61.176.110

🇵🇱 176.53.159.198

🇦🇺 158.178.141.210

🇮🇳 152.32.158.219

🇹🇼 111.70.49.182

🇹🇼 35.194.155.53

🇮🇩 34.101.98.152

🇬🇧 20.254.237.184

🇰🇷 210.114.22.126

🇺🇸 173.252.82.19

🇸🇬 172.104.59.83

🇳🇱 104.29.157.159

🇺🇸 96.85.104.2

🇳🇱 77.239.124.247

🇩🇪 45.144.233.56

🇬🇧 35.203.210.135

🇩🇪 35.198.97.144

🇺🇸 35.188.248.134