JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.198.104.28

104.198.104.28

Neutral Activity

56 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Google LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS396982

Hostname(s)

28.104.198.104.bc.googleusercontent.com

Domain Name

google.com

Country

🇺🇸 United States of America

City

The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.198.104.28 has been reported 56 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 104.198.104.28:

This IP address has been reported a total of 56 times from 19 distinct sources. 104.198.104.28 was first reported on March 28th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-03-30 15:16:58 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 30 11:16:54.397765 2024] [security2:error] [pid 20162] [client 104.198.104.28:56489] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.89"] [uri "/.env"] [unique_id "Zggs5gQ7zzJhdfh_DmBcAgAAADA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MogBox	2024-03-30 13:29:31 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (US/United States/28.104.198.104 ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (US/United States/28.104.198.104.bc.googleusercontent.com): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Mar 30 09:29:28.872896 2024] [security2:error] [pid 39686:tid 47051391940352] [client 104.198.104.28:54500] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "67.225.186.60"] [uri "/.env"] [unique_id "ZggTuH7DjWJ7ulDRb5SF_AAAAAM"] show less	Hacking
Anonymous	2024-03-30 12:50:00 (2 years ago)	PHPUnit PHP remote code execution attempt	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-03-30 12:41:29 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 30 08:41:23.594003 2024] [security2:error] [pid 26509] [client 104.198.104.28:52631] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.199"] [uri "/.env"] [unique_id "ZggIc25L2UXrBJifXhQyJwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-30 05:13:37 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 30 01:13:33.306195 2024] [security2:error] [pid 19842] [client 104.198.104.28:63936] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.74"] [uri "/.env"] [unique_id "ZgeffaTIY6b2KQn1E0gztwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-30 03:55:27 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 23:55:20.947851 2024] [security2:error] [pid 6752] [client 104.198.104.28:62376] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.179"] [uri "/.env"] [unique_id "ZgeNKKafpsCdPl1lzHO_ZQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pigro	2024-03-30 02:57:17 (2 years ago)	104.198.104.28 - - [30/Mar/2024:03:57:15 +0100] "GET /wp-content/.env HTTP/1.1" 404 188 "-" "Mozilla ... show more 104.198.104.28 - - [30/Mar/2024:03:57:15 +0100] "GET /wp-content/.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 104.198.104.28 - - [30/Mar/2024:03:57:16 +0100] "GET /wp-admin/.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2024-03-30 02:20:38 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 22:20:33.169338 2024] [security2:error] [pid 26441] [client 104.198.104.28:53666] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.115"] [uri "/.env"] [unique_id "Zgd28YLlGmJ8MP3N7JW_xgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 Xuan Can	2024-03-30 02:16:00 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (US/United States/28.104.198.104 ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (US/United States/28.104.198.104.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 30 09:15:53.760435 2024] [security2:error] [pid 32273:tid 47342243124992] [client 104.198.104.28:60953] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "112.213.89.139"] [uri "/.env"] [unique_id "Zgd12aIS_H0M-lXoctPSdgAAAYU"] show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-03-30 01:35:31 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 21:35:29.187889 2024] [security2:error] [pid 12261] [client 104.198.104.28:61775] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.237"] [uri "/.env"] [unique_id "ZgdsYceW5IXPRsEb_KcOwAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2024-03-30 00:23:06 (2 years ago)	15 attempts against mh-modsecurity-ban on hostbillst	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-03-29 20:42:30 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 16:42:25.869909 2024] [security2:error] [pid 16410] [client 104.198.104.28:60489] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.243"] [uri "/.env"] [unique_id "ZgcnsbnHUWZMKGPsqFtdQQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-29 19:59:03 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 15:58:57.391501 2024] [security2:error] [pid 18984] [client 104.198.104.28:49562] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.245"] [uri "/.env"] [unique_id "ZgcdgZQIkOdWxjKxp-5OtQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-29 18:38:16 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 14:38:09.571607 2024] [security2:error] [pid 4161] [client 104.198.104.28:62993] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.61"] [uri "/.env"] [unique_id "ZgcKke-xLdJDtYZ0kgSSmQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-29 17:51:11 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.198.104.28 (28.104.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 13:51:05.294267 2024] [security2:error] [pid 10489] [client 104.198.104.28:62784] [client 104.198.104.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.149"] [uri "/.env"] [unique_id "Zgb_iV6fuDqc8WqB75j1TAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.150.171.99

🇺🇸 216.25.89.129

🇳🇱 195.178.110.30

🇺🇸 191.96.196.10

🇺🇦 188.124.228.197

🇹🇼 101.13.9.48

🇩🇪 94.154.113.197

🇺🇸 93.177.118.104

🇩🇪 91.247.163.134

🇯🇵 8.211.148.150

🇺🇸 216.218.206.70

🇩🇪 213.209.159.238

🇳🇱 194.87.202.139

🇳🇱 185.218.86.25

🇻🇳 116.102.252.4

🇺🇸 91.245.236.18

🇺🇸 91.132.198.58

🇺🇸 91.132.125.117

🇫🇮 89.47.55.75

🇳🇱 45.148.10.141