JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.154.225.39

104.154.225.39 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	39.225.154.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.154.225.39

Whois 104.154.225.39

IP Abuse Reports for 104.154.225.39:

This IP address has been reported a total of 44 times from 33 distinct sources. 104.154.225.39 was first reported on June 8th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-12 04:32:29 (6 days ago)	579 requests with url.path *.env	Brute-Force Bad Web Bot
🇩🇪 Philister11	2026-06-12 00:26:54 (1 week ago)	CrowdSec: crowdsecurity/http-probing (US/AS396982)	Web App Attack Hacking
🇩🇪 updown.io	2026-06-11 23:27:24 (1 week ago)	{"level":"info","ts":1781220444.0490804,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781220444.0490804,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"104.154.225.39","remote_port":"52390","client_ip":"104.154.225.39","proto":"HTTP/1.1","method":"GET","host":"update.ponmlkjmlknmlkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/env.backup","headers":{"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/4.0 (compatible; MSIE 6.0; j2me) ReqwirelessWeb/3.5"]}},"bytes_read":0,"user_id":"","duration":0.000051829,"size":0,"status":308,"resp_headers":{"Location":["https://update.ponmlkjmlknmlkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/env.backup"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}} {"level":"info","ts":1781220444.04949,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"104.154.225.39","remote_port":"52374","client_ip":"104.154.225.39","proto":"HTTP/1.1","method":"GET"," ... show less	DDoS Attack Web App Attack
🇩🇪 SCHAPPY	2026-06-11 21:09:14 (1 week ago)	Malicious activity from IP detected: crowdsecurity/http-sensitive-files.	Web App Attack Hacking
🇩🇪 rh24	2026-06-11 20:19:16 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.154.225.39 (US/U ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.154.225.39 (US/United States/39.225.154.104.bc.googleusercontent.com) show less	Bad Web Bot
Anonymous	2026-06-11 17:38:00 (1 week ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇳🇱 MacLotsen	2026-06-11 16:41:13 (1 week ago)	104.154.225.39 - - [11/Jun/2026:18:41:12 +0200] "GET /api/.env HTTP/1.1" 301 362 "-" "Mozilla/5.0 (c ... show more 104.154.225.39 - - [11/Jun/2026:18:41:12 +0200] "GET /api/.env HTTP/1.1" 301 362 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)" ... show less	Web App Attack Brute-Force
🇩🇪 grassau.com	2026-06-11 12:05:09 (1 week ago)	Port Scan detected from 104.154.225.39 (US/United States/Iowa/Council Bluffs/39.225.154.104.bc.goo ... show more Port Scan detected from 104.154.225.39 (US/United States/Iowa/Council Bluffs/39.225.154.104.bc.googleusercontent.com). show less	Port Scan
🇳🇱 MM-bot	2026-06-11 06:05:48 (1 week ago)	URL-probe: HTTP/1.1 GET request on /env (2026-06-11 08:05:48 UTC+2)	Web App Attack Hacking
🇺🇸 infra-monitor	2026-06-10 23:00:06 (1 week ago)	Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe	Port Scan Web App Attack
🇳🇱 wlt-blocker	2026-06-10 22:19:43 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-10 21:59:43 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking
Anonymous	2026-06-10 16:54:25 (1 week ago)	Bot / scanning and/or hacking attempts: GET /v2/.env HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env. ... show more Bot / scanning and/or hacking attempts: GET /v2/.env HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.env.production HTTP/1.1, GET /src/.env.production HTTP/1.1, GET /frontend/.env.dev HTTP/1.1, GET /frontend/.env.backup HTTP/1.1, GET /prod/.env HTTP/1.1, GET /frontend/.env.staging HTTP/1.1, GET /api/.env.backup HTTP/1.1, GET /services/backend/.env HTTP/1.1, GET /v3/.env HTTP/1.1, GET /app/backend/.env HTTP/1.1, GET /frontend/.env.prod HTTP/1.1, GET /backend/.env.old HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-06-10 16:39:12 (1 week ago)	Bot / seems abusive / Apache connections: 70	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-06-10 06:34:37 (1 week ago)	Aggressive web scan	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.190.153.90

🇬🇧 195.206.182.216

🇧🇷 189.12.222.240

🇸🇬 124.156.207.197

🇫🇷 91.238.181.92

🇬🇧 81.19.219.236

🇺🇸 20.169.105.81

🇺🇸 216.25.89.85

🇮🇳 203.192.227.240

🇳🇱 193.176.31.213

🇩🇪 193.124.20.249

🇺🇸 172.237.136.213

🇭🇰 154.221.20.92

🇨🇳 120.48.135.32

🇷🇺 109.174.104.74

🇮🇩 103.154.77.48

🇳🇱 88.151.33.203

🇵🇱 79.163.160.208

🇺🇸 77.110.126.55

🇺🇸 66.132.224.235