JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.197.195.101

104.197.195.101 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 68%: ?

68%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	101.195.197.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.197.195.101

Whois 104.197.195.101

IP Abuse Reports for 104.197.195.101:

This IP address has been reported a total of 11 times from 11 distinct sources. 104.197.195.101 was first reported on July 13th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-13 16:02:56 (3 days ago)	8.643 requests in 1 hour (1mo3w2d)	Brute-Force Bad Web Bot
Anonymous	2026-07-13 14:49:40 (3 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-includes/id3/license.txt/shop/wp-includes ... show more [Drupal AbuseIPDB module] Request path is blacklisted. /wp-includes/id3/license.txt/shop/wp-includes/wlwmanifest.xml show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 14:44:21 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 104.197.195.101 (101.195.197.104.bc.googleuserc ... show more (mod_security) mod_security (id:225170) triggered by 104.197.195.101 (101.195.197.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 10:44:14.957551 2026] [security2:error] [pid 10629:tid 10629] [client 104.197.195.101:61292] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pardescommunications.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pardescommunications.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "alT5vrRj7MmQ-E3OwMKHGwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 mondor.ro	2026-07-13 14:44:14 (3 days ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 104.197.195.101, Reaso ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 104.197.195.101, Reason:[(manifest) WordPress wlwmanifest.xml Attack 104.197.195.101 (US/United States/101.195.197.104.bc.googleusercontent.com): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇺🇸 Rip	2026-07-13 14:43:19 (3 days ago)	WordPress fingerprinting and attack surface probing	Port Scan Web App Attack
🇮🇹 VHosting	2026-07-13 14:40:05 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇨🇭 Origon	2026-07-13 14:34:59 (3 days ago)	http-probing - IP: 104.197.195.101 - time="2026-07-13T16:34:59+02:00" level=info msg="(555f66b4f6a7 ... show more http-probing - IP: 104.197.195.101 - time="2026-07-13T16:34:59+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 104.197.195.101 (US/396982) : 4h ban on Ip 104.197.195.101" module=db show less	Web App Attack
🇳🇱 ipoac.nl	2026-07-13 14:34:39 (3 days ago)	-:443 104.197.195.101 - - [13/Jul/2026:16:34:39 +0200] - "GET //xmlrpc.php?rsd HTTP/1.1" 403 1964 "- ... show more -:443 104.197.195.101 - - [13/Jul/2026:16:34:39 +0200] - "GET //xmlrpc.php?rsd HTTP/1.1" 403 1964 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Bad Web Bot
🇳🇱 Savvii	2026-07-13 14:31:02 (3 days ago)	10 attempts against mh-misc-ban on ficus	Web App Attack
🇺🇸 WeekendWeb	2026-07-13 14:30:15 (3 days ago)	Wordpress Vunerability attack	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-13 14:27:53 (3 days ago)	104.197.195.101 - - [13/Jul/2026:17:27:52 +0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 45 ... show more 104.197.195.101 - - [13/Jul/2026:17:27:52 +0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 4524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 104.197.195.101 - - [13/Jul/2026:17:27:53 +0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.42

🇭🇰 154.221.23.59

🇵🇭 123.253.136.251

🇨🇳 120.78.9.93

🇺🇸 54.245.178.241

🇮🇶 5.175.147.87

🇹🇼 198.235.24.79

🇨🇳 106.13.165.101

🇬🇧 104.218.165.239

🇭🇰 103.243.26.174

🇯🇴 92.253.93.24

🇧🇬 91.92.47.35

🇬🇵 90.15.92.166

🇺🇸 2606:c700:1:69:94ca:a771:e069:eab1

🇩🇪 193.124.20.252

🇺🇸 146.190.76.77

🇨🇳 111.36.57.69

🇫🇷 91.231.89.86

🇺🇸 20.169.81.226

🇺🇸 3.148.190.93