JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.199.132.157

104.199.132.157 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 71%: ?

71%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	157.132.199.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.199.132.157

Whois 104.199.132.157

IP Abuse Reports for 104.199.132.157:

This IP address has been reported a total of 20 times from 12 distinct sources. 104.199.132.157 was first reported on August 25th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-26 10:42:13 (4 hours ago)	[server.techsupportltd.gr] httpd-config-scan: sites=www.yalotechnikiamarousiou.gr; logs=/var/log/htt ... show more [server.techsupportltd.gr] httpd-config-scan: sites=www.yalotechnikiamarousiou.gr; logs=/var/log/httpd/domains/yalotech.gr.log; samples=/.git/config show less	Hacking Web App Attack
🇺🇸 jfz-abuse	2026-08-26 10:41:18 (4 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-26 10:33:16 (4 hours ago)	[26/Aug/2026:13:33:15 +0300] -- 104.199.132.157 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.g ... show more [26/Aug/2026:13:33:15 +0300] -- 104.199.132.157 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 10:29:23 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:29:17.842898 2026] [security2:error] [pid 6849:tid 6849] [client 104.199.132.157:40612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staugustineflyfishing.net"] [uri "/.git/config"] [unique_id "ao6__btsCyi_jQ_InZCLUQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-26 10:01:58 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 09:49:06 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:49:02.134712 2026] [security2:error] [pid 1034:tid 1034] [client 104.199.132.157:13364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hydrogenplus.net"] [uri "/.git/config"] [unique_id "ao62js1mQohRnjmXABPIogAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 09:23:21 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:23:15.741765 2026] [security2:error] [pid 23053:tid 23053] [client 104.199.132.157:21714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brownbarn.com"] [uri "/.git/config"] [unique_id "ao6wg2TZ3wWEdHeWP4H0ewAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-08-26 01:11:06 (13 hours ago)	tcp ports: 80,443 (140 or more attempts)	Port Scan
🇩🇪 macrob	2026-08-25 17:35:20 (21 hours ago)	2026/08/25 17:35:18 [error] 1299155#1299155: 519885333 access forbidden by rule, client: 104.199.13 ... show more 2026/08/25 17:35:18 [error] 1299155#1299155: 519885333 access forbidden by rule, client: 104.199.132.157, server: 100fs.org, request: "GET /.env HTTP/1.1", host: "100fs.org" 2026/08/25 17:35:18 [error] 1299155#1299155: 519885349 access forbidden by rule, client: 104.199.132.157, server: 100fs.org, request: "GET /.git/config HTTP/1.1", host: "100fs.org" 2026/08/25 17:35:19 [error] 1299158#1299158: 519885370 access forbidden by rule, client: 104.199.132.157, server: 100fs.org, request: "GET /.env.bak HTTP/1.1", host: "100fs.org" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 17:09:18 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 13:09:13.240046 2026] [security2:error] [pid 29851:tid 29851] [client 104.199.132.157:26688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerkiteforum.com"] [uri "/.git/config"] [unique_id "ao3MOQpDlERnM4jijoKlHwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-08-25 17:08:56 (21 hours ago)	cloudlinux2 fail2ban: 2026-08-25 19:05:00,461 fail2ban.filter [1464]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-25 19:05:00,461 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 35.192.250.139 - 2026-08-25 19:05:00cloudlinux2 fail2ban: 2026-08-25 19:04:59,751 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 35.192.250.139 - 2026-08-25 19:04:59cloudlinux2 fail2ban: 2026-08-25 19:05:36,361 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.4.161 - 2026-08-25 19:05:36cloudlinux2 fail2ban: 2026-08-25 19:05:38,479 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.6.157 - 2026-08-25 19:05:38cloudlinux2 fail2ban: 2026-08-25 19:05:39,970 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.9.27 - 2026-08-25 19:05:39cloudlinux2 fail2ban: 2026-08-25 19:05:37,124 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.23.38 - 2026-08-25 19:05:36cloudlinux2 fail2ban: 2026-08-25 19:05:35,212 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 217.181.77.163 - 2026-08-25 19:05:34cloud show less	Web App Attack
Anonymous	2026-08-25 17:01:01 (21 hours ago)	...	Web App Attack
🇺🇸 0tsystems	2026-08-25 16:55:40 (21 hours ago)	Automated scan detected on 0t.systems: /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 16:51:25 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleuserc ... show more (mod_security) mod_security (id:210492) triggered by 104.199.132.157 (157.132.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:51:18.078598 2026] [security2:error] [pid 18466:tid 18466] [client 104.199.132.157:43362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nickmontfort.com"] [uri "/.git/config"] [unique_id "ao3IBjr1krM1ZXrC2BTMYQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-08-25 16:19:02 (22 hours ago)	Try to access /.git/config	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 158.174.210.161

🇳🇱 45.148.10.157

🇨🇳 219.140.109.106

🇱🇹 213.176.26.22

🇺🇸 192.243.105.20

🇷🇺 178.186.241.255

🇳🇱 153.75.85.203

🇺🇸 98.83.94.113

🇺🇸 20.127.166.53

🇭🇰 223.19.255.198

🇺🇸 172.68.174.174

🇻🇪 82.86.133.106

🇺🇸 66.132.186.173

🇸🇬 15.235.192.186

🇬🇧 2a06:4882:7000::7d

🇰🇷 220.127.148.6

🇧🇷 177.125.173.96

🇺🇸 167.234.120.234

🇱🇹 62.60.130.242

🇭🇰 172.71.210.211