JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.199.140.70

104.199.140.70 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	70.140.199.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.199.140.70

Whois 104.199.140.70

IP Abuse Reports for 104.199.140.70:

This IP address has been reported a total of 38 times from 29 distinct sources. 104.199.140.70 was first reported on August 27th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 middelkoopcc	2026-08-28 13:17:00 (5 days ago)	2026-08-28 15:15:13 GET /@fs/src/.env?raw?? [404] && 2026-08-28 15:15:13 GET /@fs/.env?raw?? [404] & ... show more 2026-08-28 15:15:13 GET /@fs/src/.env?raw?? [404] && 2026-08-28 15:15:13 GET /@fs/.env?raw?? [404] && 2026-08-28 15:15:13 GET /@fs/app/.env?raw?? [404] && 117 more within 20 minutes show less	Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-28 11:28:48 (5 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 masterguru	2026-08-28 08:10:39 (5 days ago)	Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇹🇷 hostopya.com	2026-08-28 07:44:40 (5 days ago)	[plesk-apache] 6 failed attempt(s). Log: [Fri Aug 28 10:44:20.170646 2026] [authz_core:error] [pid 2 ... show more [plesk-apache] 6 failed attempt(s). Log: [Fri Aug 28 10:44:20.170646 2026] [authz_core:error] [pid 203052] [client 104.199.140.70:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/database.yml\|[Fri Aug 28 10:44:20.183605 2026] [authz_core:error] [pid 203053] [client 104.199.140.70:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/secrets.yml\|[Fri Aug 28 10:44:33.366035 2026] [authz_core:error] [pid 203051] [client 104.199.140.70:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.htpasswd\|[Fri Aug 28 10:44:39.799340 2026] [authz_core:error] [pid 257029] [client 104.199.140.70:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/anthropic.json\|[Fri Aug 28 10:44:39.818992 2026] [authz_core:error] [pid 203487] [client 104.199.140.70:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/openai.json show less	Brute-Force Web App Attack
🇭🇺 miszterx.hu	2026-08-28 06:56:39 (5 days ago)	XORP (haproxy): 50x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ... show more XORP (haproxy): 50x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu) show less	Web App Attack
🇿🇦 conure.sh	2026-08-28 06:35:51 (5 days ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 6s	Web App Attack
🇩🇪 raph	2026-08-28 05:45:44 (5 days ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-08-28 05:37:47 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from TW. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from TW. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /frontend/.env.local UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:143.19) Gecko/20100101 Firefox/143.19; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 [email protected]	2026-08-28 05:29:25 (5 days ago)	PrestaShop Security Module: suspicious probe path detected (/.env)	Web App Attack
🇺🇸 TAY	2026-08-28 04:42:04 (5 days ago)	104.199.140.70 - - [28/Aug/2026:12:41:52 +0800] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 2589 "-" "M ... show more 104.199.140.70 - - [28/Aug/2026:12:41:52 +0800] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 2589 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 104.199.140.70 - - [28/Aug/2026:12:41:53 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) Chrome/134.0.7467.83 Safari/537.36" 104.199.140.70 - - [28/Aug/2026:12:42:04 +0800] "GET /@fs/var/www/html/wp-config.php?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 104.199.140.70 - - [28/Aug/2026:12:42:04 +0800] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/136.0.6032.21 ... show less	Brute-Force
🇬🇧 consul.to	2026-08-28 04:02:57 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 03:51:41 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 104.199.140.70 (70.140.199.104.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 104.199.140.70 (70.140.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 23:51:36.785115 2026] [security2:error] [pid 17321:tid 17321] [client 104.199.140.70:56448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thenowhere-men.com"] [uri "/@fs/app/.env"] [unique_id "apEFyL7ah_pcHQ_yG2NjbAAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-08-28 03:35:07 (5 days ago)		Web App Attack
🇫🇷 masterguru	2026-08-28 02:39:00 (5 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.199.140.70 (TW/Taiwan/70.140.199.104.bc.go ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.199.140.70 (TW/Taiwan/70.140.199.104.bc.googleusercontent.com): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 ArturShelby	2026-08-28 02:33:38 (5 days ago)	Critical file access: /.env.production	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:e8e5:b001

🇻🇪 186.89.53.236

🇮🇳 172.253.226.54

🇬🇧 172.69.224.4

🇭🇰 161.81.121.217

🇮🇩 103.165.206.238

🇩🇪 91.92.240.229

🇧🇬 79.124.58.18

🇺🇸 66.249.75.109

🇺🇸 66.132.172.236

🇳🇱 45.148.10.152

🇺🇸 34.182.216.98

🇧🇷 190.113.60.214

🇨🇳 180.184.176.148

🇻🇳 171.244.185.149

🇨🇳 153.0.43.146

🇨🇳 150.255.90.241

🇨🇳 106.54.62.156

🇰🇷 101.36.114.252

🇦🇺 52.63.70.102