JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.199.16.54

104.199.16.54 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	54.16.199.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.199.16.54

Whois 104.199.16.54

IP Abuse Reports for 104.199.16.54:

This IP address has been reported a total of 73 times from 52 distinct sources. 104.199.16.54 was first reported on September 16th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇺 cybertailor	2026-09-19 08:05:37 (1 day ago)	104.199.16.54 - - [19/Sep/2026:13:05:34 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; ... show more 104.199.16.54 - - [19/Sep/2026:13:05:34 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 104.199.16.54 - - [19/Sep/2026:13:05:35 +0500] "GET /ssl/localhost.key HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 104.199.16.54 - - [19/Sep/2026:13:05:35 +0500] "GET /ssl/localhost.key HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 104.199.16.54 - - [19/Sep/2026:13:05:35 +0500] "GET /host.key HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" ... show less	Port Scan
🇮🇳 Shubham Kumar	2026-09-18 09:40:12 (2 days ago)	Repeated scrape-guard abuse (flag #0)	Web App Attack
🇫🇷 cybertailor	2026-09-18 07:54:17 (2 days ago)	104.199.16.54 - - [18/Sep/2026:12:54:14 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; ... show more 104.199.16.54 - - [18/Sep/2026:12:54:14 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 104.199.16.54 - - [18/Sep/2026:12:54:15 +0500] "GET /src/.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 104.199.16.54 - - [18/Sep/2026:12:54:15 +0500] "GET /.env.local HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 104.199.16.54 - - [18/Sep/2026:12:54:15 +0500] "GET /config/.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 104.199.16.54 - - [18/Sep/2026:12:54:15 +0500] "GET /z9x8c7v6b5-debug-trigger-accounting.sysrq.in HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" ... show less	Port Scan
🇳🇱 Alt255	2026-09-18 07:47:51 (2 days ago)	[ti-24al] Web exploit scanning: 40 suspicious requests detected by fail2ban jail apache-scanner. Exa ... show more [ti-24al] Web exploit scanning: 40 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.199.16.54 - - [18/Sep/2026:09:47:39 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 104.199.16.54 - - [18/Sep/2026:09:47:40 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 104.199.16.54 - - [18/Sep/2026:09:47:40 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/2.0" 403 533 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 104.199.16.54 - - [18/Sep/2026:09:47:40 +0200] "GET /@fs/../.env?raw?? HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.199.16.54 ... show less	Bad Web Bot Web App Attack
🇩🇪 bazter.pro	2026-09-18 03:26:24 (2 days ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-18 03:22:43 (2 days ago)	20 attempts against mh-misbehave-ban on mist	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-09-17 22:14:33 (2 days ago)		Brute-Force Web App Attack
🇬🇧 Marten Mark	2026-09-17 21:12:31 (2 days ago)	104.199.16.54 - - [17/Sep/2026:21:12:27 +0000] "GET /.vscode/launch.json HTTP/2.0" 404 1453 "-" "Moz ... show more 104.199.16.54 - - [17/Sep/2026:21:12:27 +0000] "GET /.vscode/launch.json HTTP/2.0" 404 1453 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)" 104.199.16.54 - - [17/Sep/2026:21:12:27 +0000] "GET /.ssh/config HTTP/2.0" 404 1453 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 104.199.16.54 - - [17/Sep/2026:21:12:27 +0000] "GET /.ssh/config HTTP/2.0" 404 1453 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 104.199.16.54 - - [17/Sep/2026:21:12:27 +0000] "GET /.ssh/known_hosts HTTP/2.0" 404 1453 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 104.199.16.54 - - [17/Sep/2026:21:12:27 +0000] "GET /.ssh/known_hosts HTTP/2.0" 404 1453 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +http ... show less	Port Scan Web App Attack
🇮🇹 VHosting	2026-09-17 19:55:04 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇬🇧 Marten Mark	2026-09-17 17:49:01 (2 days ago)	104.199.16.54 - - [17/Sep/2026:17:48:59 +0000] "GET /z9x8c7v6b5-debug-trigger-blog.cfi.co HTTP/2.0" ... show more 104.199.16.54 - - [17/Sep/2026:17:48:59 +0000] "GET /z9x8c7v6b5-debug-trigger-blog.cfi.co HTTP/2.0" 404 5335 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 104.199.16.54 - - [17/Sep/2026:17:48:59 +0000] "GET /secrets.env HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 104.199.16.54 - - [17/Sep/2026:17:48:59 +0000] "GET /secrets.env HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 104.199.16.54 - - [17/Sep/2026:17:48:59 +0000] "GET /docker-compose.yml HTTP/2.0" 404 5335 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 104.199.16.54 - - [17/Sep/2026:17:48:59 +0000] "GET /docker-compose.yml HTTP/2.0" 404 5335 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 104.199.16.54 - - [17/Sep/2026:17:48:59 +0000] "GET /.vite/manifest.json HTTP/2.0" 40 ... show less	Port Scan Web App Attack
🇩🇪 Skyrider	2026-09-17 14:47:15 (3 days ago)	crowdsecurity/http-probing	Web App Attack
🇩🇪 macrob	2026-09-17 12:38:11 (3 days ago)	2026/09/17 12:38:10 [error] 3266578#3266578: 8094426 access forbidden by rule, client: 104.199.16.5 ... show more 2026/09/17 12:38:10 [error] 3266578#3266578: 8094426 access forbidden by rule, client: 104.199.16.54, server: fn.binixo.es, request: "GET /.profile HTTP/2.0", host: "api-v2.fastcredit.net.ua" 2026/09/17 12:38:10 [error] 3266578#3266578: 8094427 access forbidden by rule, client: 104.199.16.54, server: fn.binixo.es, request: "GET /.bashrc HTTP/2.0", host: "api-v2.fastcredit.net.ua" 2026/09/17 12:38:10 [error] 3266578#3266578: 8094435 access forbidden by rule, client: 104.199.16.54, server: fn.binixo.es, request: "GET /.zshrc HTTP/2.0", host: "api-v2.fastcredit.net.ua" ... show less	Web App Attack
Anonymous	2026-09-17 10:44:20 (3 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇩🇪 Marc	2026-09-17 09:21:12 (3 days ago)	104.199.16.54 - - [17/Sep/2026:11:21:12 +0200] "GET /z9x8c7v6b5-debug-trigger-adm.tortenatelier-schw ... show more 104.199.16.54 - - [17/Sep/2026:11:21:12 +0200] "GET /z9x8c7v6b5-debug-trigger-adm.tortenatelier-schwanbeck.de HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 104.199.16.54 - - [17/Sep/2026:11:21:12 +0200] "GET /.ssh/id_rsa HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 104.199.16.54 - - [17/Sep/2026:11:21:12 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" show less	Brute-Force
Anonymous	2026-09-17 09:20:03 (3 days ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Web App Attack Hacking SQL Injection

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.114

🇬🇧 195.96.139.113

🇬🇧 195.96.139.112

🇦🇱 95.107.235.111

🇬🇧 89.37.172.143

🇱🇹 62.60.130.201

🇨🇳 61.184.128.210

🇺🇸 45.8.19.243

🇫🇮 34.88.100.69

🇩🇪 4.184.246.230

🇨🇳 1.85.241.209

🇰🇷 222.118.59.16

🇹🇭 202.29.51.12

🇿🇦 197.86.206.5

🇬🇧 195.96.139.111

🇬🇧 195.96.139.110

🇬🇧 195.96.139.108

🇬🇧 195.96.139.106

🇬🇧 195.96.139.11

🇰🇼 188.71.210.17