JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.197.218.238

104.197.218.238 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	238.218.197.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.197.218.238

Whois 104.197.218.238

IP Abuse Reports for 104.197.218.238:

This IP address has been reported a total of 18 times from 12 distinct sources. 104.197.218.238 was first reported on December 26th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 pusathosting.com	2026-02-02 13:30:05 (4 months ago)	2ds22 bruteforce	Brute-Force Web App Attack
Anonymous	2026-01-31 00:54:57 (4 months ago)	Forum/form spam	Web Spam
🇵🇱 sefinek.net	2026-01-30 13:05:21 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 dynamix	2026-01-26 17:22:15 (4 months ago)	Multiple WAF Violations	Web App Attack
🇵🇱 sefinek.net	2026-01-26 14:54:48 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 dynamix	2026-01-23 05:08:07 (4 months ago)	Multiple WAF Violations	Web App Attack
🇦🇺 Block Rockin' Beats	2026-01-21 19:25:04 (5 months ago)	Scanning forum with forged referal	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-01-16 22:59:43 (5 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-01-15. show less	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-01-15 07:28:18 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.197.218.238 (238.218.197.104.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 104.197.218.238 (238.218.197.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 02:28:15.268693 2026] [security2:error] [pid 15444:tid 15444] [client 104.197.218.238:47652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ieas.org"] [uri "/.git/config"] [unique_id "aWiXD7uHZwGWwYmYDC5ROwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-14 21:55:24 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.197.218.238 (238.218.197.104.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 104.197.218.238 (238.218.197.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 16:55:20.705548 2026] [security2:error] [pid 2879:tid 2879] [client 104.197.218.238:43220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandbox.davis.monster"] [uri "/.git/config"] [unique_id "aWgQyJYukcXAl1u4J5iSngAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rsiddall	2026-01-14 15:37:36 (5 months ago)	104.197.218.238 - - [14/Jan/2026:10:37:33 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "https://blog. ... show more 104.197.218.238 - - [14/Jan/2026:10:37:33 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "https://blog.janehaddam.com/2008/12/24/adjuncts/" "PHP/7.3.73" 104.197.218.238 - - [14/Jan/2026:10:37:35 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "https://blog.janehaddam.com/2008/12/24/adjuncts/" "PHP/7.3.73" ... show less	Brute-Force
🇲🇾 Rizzy	2026-01-11 10:52:37 (5 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇹 Progetto1	2026-01-11 06:55:02 (5 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-01-08 03:33:29 (5 months ago)		Web App Attack
🇬🇧 relianoid.com	2026-01-06 22:09:13 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 165.154.1.18

🇺🇸 73.125.165.234

🇺🇸 47.194.116.243

🇨🇳 27.185.57.13

🇷🇴 2.57.122.177

🇺🇸 216.180.246.7

🇯🇲 207.204.64.175

🇬🇧 195.206.182.210

🇳🇱 178.16.54.22

🇲🇾 113.211.215.245

🇺🇸 107.175.46.222

🇺🇸 104.36.177.218

🇮🇳 103.190.7.203

🇩🇪 85.215.192.100

🇺🇸 75.188.178.119

🇺🇸 74.7.241.185

🇵🇰 72.255.18.18

🇺🇸 68.41.124.21

🇧🇪 34.14.123.87

🇬🇧 2a06:4880:c000::f4