104.199.111.106

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
23 reports
21 reporters ยท latest 1 day ago
ISP Google LLC
Usage Type Data Center/Web Hosting/Transit
ASN AS396982
Hostname(s) 106.111.199.104.bc.googleusercontent.com
Domain Name google.com
Country ๐Ÿ‡ง๐Ÿ‡ช Belgium
City Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.199.111.106

This IP address has been reported a total of 23 times from 21 distinct sources. 104.199.111.106 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 6 reports; Germany with 4 reports; Canada with 2 reports. The most common categories in these recent reports were: Port Scan 16 times; Hacking 8 times; Exploited Host 2 times; IoT Targeted 1 time; Brute-Force 1 time.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช EnthecSolutions
Detected by Enthec Solutions. | Attempts: 32 in 24h | Target port: 445
Exploited Host Hacking
๐Ÿ‡ฉ๐Ÿ‡ช guldkage
Unauthorized connection attempt detected from IP address 104.199.111.106 to port 445 (ger-02) [SMB]
Exploited Host
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[11:11] Port scanning. Port(s) scanned: TCP/389
Port Scan
๐Ÿ‡ช๐Ÿ‡ธ el-brujo
09/24/2026-12:49:44.014921 104.199.111.106 Protocol: 6 SURICATA TLS invalid record type
Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Kejult
Honeypot Finding: SMB activity on TCP/445; 32 Dionaea events.
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ฉ FallingGong2833
tcp/445
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ withfallback.com
Attempt to connect to Java debugger (JDWP)
Port Scan
๐Ÿ‡จ๐Ÿ‡ฆ alexbfr
Fail2Ban report from custom-honeypot; automated SMB honeypot detection.
Hacking
๐Ÿ‡บ๐Ÿ‡ธ cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port 445 - dr
Port Scan Hacking
๐Ÿ‡น๐Ÿ‡ท Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (636/tcp) [non-standard port]
Port Scan Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ knock
Knock-Knock honeypot brute-force: SMB (1 total hits)
Brute-Force
๐Ÿ‡ต๐Ÿ‡ฑ bart@
Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: SMB traffic on port 445
IoT Targeted
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 445 with data transfer. Data preview:
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[05:05] Port scanning. Port(s) scanned: TCP/389
Port Scan

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.15
๐Ÿ‡ป๐Ÿ‡ณ 103.48.194.118
๐Ÿ‡ฌ๐Ÿ‡ง 35.246.116.209
๐Ÿ‡ฆ๐Ÿ‡น 150.251.225.42
๐Ÿ‡จ๐Ÿ‡ณ 116.204.98.161
๐Ÿ‡ฎ๐Ÿ‡ฉ 103.154.179.151
๐Ÿ‡น๐Ÿ‡ผ 123.192.184.76
๐Ÿ‡ธ๐Ÿ‡ช 79.136.8.69
๐Ÿ‡บ๐Ÿ‡ธ 34.55.86.71
๐Ÿ‡ณ๐Ÿ‡ฑ 34.34.108.164
๐Ÿ‡จ๐Ÿ‡ณ 116.20.237.240
๐Ÿ‡ธ๐Ÿ‡ฌ 45.78.206.111
๐Ÿ‡ญ๐Ÿ‡ฐ 42.200.60.186
๐Ÿ‡บ๐Ÿ‡ธ 34.139.93.231
๐Ÿ‡ท๐Ÿ‡บ 31.173.21.11
๐Ÿ‡ฉ๐Ÿ‡ช 2.28.235.95
๐Ÿ‡บ๐Ÿ‡ธ 209.87.169.166
๐Ÿ‡จ๐Ÿ‡ฑ 190.151.113.6
๐Ÿ‡ฌ๐Ÿ‡ง 188.166.159.7