JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.197.198.132

104.197.198.132 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	132.198.197.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.197.198.132

Whois 104.197.198.132

IP Abuse Reports for 104.197.198.132:

This IP address has been reported a total of 18 times from 17 distinct sources. 104.197.198.132 was first reported on May 7th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 kurdalan	2026-05-07 15:56:00 (2 months ago)		Port Scan Brute-Force Web App Attack
🇮🇱 Dolphi	2026-05-07 15:30:02 (2 months ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 15:21:10 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 104.197.198.132 (132.198.197.104.bc.googleuserc ... show more (mod_security) mod_security (id:225170) triggered by 104.197.198.132 (132.198.197.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 11:21:03.168867 2026] [security2:error] [pid 25727:tid 25727] [client 104.197.198.132:65378] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.ashleycroft.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ashleycroft.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "afyt3x2OvVKZ8vJX7pAYYAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-05-07 15:05:00 (2 months ago)	256.863 requests in 1 hour (2mos15h59m)	Brute-Force Bad Web Bot
🇺🇸 integrantservices.com	2026-05-07 15:04:49 (2 months ago)	(wordpress) Failed wordpress login from 104.197.198.132 (US/United States/132.198.197.104.bc.googleu ... show more (wordpress) Failed wordpress login from 104.197.198.132 (US/United States/132.198.197.104.bc.googleusercontent.com) show less	Brute-Force
Anonymous	2026-05-07 14:57:46 (2 months ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 14:56:27 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 104.197.198.132 (132.198.197.104.bc.googleuserc ... show more (mod_security) mod_security (id:225170) triggered by 104.197.198.132 (132.198.197.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 10:56:23.738388 2026] [security2:error] [pid 3047:tid 3047] [client 104.197.198.132:51922] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|timjbutler.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "timjbutler.com"] [uri "/test/wp-json/wp/v2/users/"] [unique_id "afyoF8F0OueErBGR30vBLwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-05-07 14:52:13 (2 months ago)	http-probing - IP: 104.197.198.132 - time="2026-05-07T16:52:13+02:00" level=info msg="(555f66b4f6a7 ... show more http-probing - IP: 104.197.198.132 - time="2026-05-07T16:52:13+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 104.197.198.132 (US/396982) : 4h ban on Ip 104.197.198.132" module=db show less	Web App Attack
🇳🇿 Antinson	2026-05-07 14:49:28 (2 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇨🇭 backslash	2026-05-07 14:42:00 (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-05-07 14:39:12 (2 months ago)	Exploit scanner detected on NON existing URI://wp-includes/wlwmanifest.xml \| User Agent:Mozilla/5.0 ... show more Exploit scanner detected on NON existing URI://wp-includes/wlwmanifest.xml \| User Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 pt show less	Web Spam Web App Attack
Anonymous	2026-05-07 14:34:47 (2 months ago)	104.197.198.132 - - [07/May/2026:16:34:47 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 292 ... show more 104.197.198.132 - - [07/May/2026:16:34:47 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.197.198.132 - - [07/May/2026:16:34:47 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.197.198.132 - - [07/May/2026:16:34:47 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.197.198.132 - - [07/May/2026:16:34:47 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.197.198.132 - - [07/May/2026:16:34:47 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 4 ... show less	Brute-Force Web App Attack
🇺🇸 WizardsToolkit	2026-05-07 14:34:39 (2 months ago)	attempted to access /404.php	Web App Attack
🇺🇸 9LEVEL.com.br	2026-05-07 14:30:53 (2 months ago)	Blocked by Fail2ban for traefik-404 abuse	Web App Attack
🇪🇸 masterguru	2026-05-07 14:30:49 (2 months ago)	WordPress: User enumeration. Pattern match "(author\\\\= (1000-123)	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.226.196.19

🇦🇷 181.191.26.23

🇨🇳 180.184.161.95

🇺🇸 172.190.89.127

🇺🇸 144.225.124.188

🇨🇳 111.26.69.160

🇷🇺 109.69.18.199

🇱🇰 101.2.190.147

🇺🇸 96.8.116.34

🇩🇪 69.5.169.174

🇵🇰 59.103.217.118

🇩🇪 23.251.48.18

🇺🇸 20.168.120.211

🇨🇳 223.221.36.42

🇦🇿 212.47.140.255

🇮🇩 202.59.200.27

🇺🇸 198.199.106.159

🇪🇬 197.49.162.127

🇷🇴 193.32.162.83

🇨🇴 190.248.119.153