JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.199.161.139

104.199.161.139 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 91%: ?

91%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	139.161.199.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.199.161.139

Whois 104.199.161.139

IP Abuse Reports for 104.199.161.139:

This IP address has been reported a total of 32 times from 23 distinct sources. 104.199.161.139 was first reported on June 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-11 17:21:53 (1 week ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-11 15:22:44 (1 week ago)	(caddyscan) Scanner path probe from 104.199.161.139 (TW/Taiwan/139.161.199.104.bc.googleusercontent. ... show more (caddyscan) Scanner path probe from 104.199.161.139 (TW/Taiwan/139.161.199.104.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 104.199.161.139 - - [11/Jun/2026:15:22:39 +0000] "GET /app/.env.prod HTTP/1.1" [REDACTED] 200 2627 104.199.161.139 - - [11/Jun/2026:15:22:39 +0000] "GET /api/.env.backup HTTP/1.1" [REDACTED] 200 2627 104.199.161.139 - - [11/Jun/2026:15:22:39 +0000] "GET /app/.env.bak HTTP/1.1" [REDACTED] 200 2627 104.199.161.139 - - [11/Jun/2026:15:22:39 +0000] "GET /.env.local.bak HTTP/1.1" [REDACTED] 200 2627 104.199.161.139 - - [11/Jun/2026:15:22:39 +0000] "GET /.env.old HTTP/1.1" show less	Port Scan
🇩🇪 paissangroup	2026-06-11 12:55:08 (1 week ago)	Multiple WAF Violations	Web App Attack
🇬🇧 consul.to	2026-06-11 09:18:38 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 4server	2026-06-11 08:22:50 (1 week ago)	[ThuJun1110:22:43.8980722026][security2:error][pid1733183:tid1733235][client104.199.161.139:0]ModSec ... show more [ThuJun1110:22:43.8980722026][security2:error][pid1733183:tid1733235][client104.199.161.139:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.schneider-tools.ch.136-243-54-122.cpanel.site\"][uri\"/.env.test\"][unique_id\"aipwUw5hiqKZgQq_RMkt6AAAAEw\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-10 23:39:05 (1 week ago)	categories: DDoS Attack	DDoS Attack
🇳🇱 e.fierstra	2026-06-10 23:26:33 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-06-10 18:37:31 (1 week ago)	LF_APACHE_403: 104.199.161.139 (TW/Taiwan/139.161.199.104.bc.googleusercontent.com), more than 10 Ap ... show more LF_APACHE_403: 104.199.161.139 (TW/Taiwan/139.161.199.104.bc.googleusercontent.com), more than 10 Apache 403 hits in the last 3600 secs show less	Web App Attack
🇳🇱 Site.eu	2026-06-10 17:04:09 (1 week ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-10 16:34:47 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 104.199.161.139 (TW/Taiwan/139.161.199. ... show more (mod_security) mod_security triggered on hostname [redacted] 104.199.161.139 (TW/Taiwan/139.161.199.104.bc.googleusercontent.com) show less	SQL Injection
🇳🇱 debestelapp	2026-06-10 08:15:07 (1 week ago)		Web App Attack
🇺🇸 WellSpring	2026-06-10 02:05:55 (1 week ago)	env leak on 727.today/server/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇫🇷 masterguru	2026-06-10 01:18:45 (1 week ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇩🇪 updown.io	2026-06-09 23:58:12 (1 week ago)	{"level":"info","ts":1781049491.4625585,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781049491.4625585,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"104.199.161.139","remote_port":"47646","client_ip":"104.199.161.139","proto":"HTTP/1.1","method":"GET","host":"hgfedupdate.update.uxwvutsrqpojihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/.env.qa","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Linux; U; Android 1.5; de-de; HTC Magic Build/PLAT-RC33) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1 FirePHP/0.3"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000082117,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://hgfedupdate.update.uxwvutsrqpojihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/.env.qa"],"Content-Type":[]}} {"level":"info","ts":1781049491.462986,"logger":"http.log.access.log1","msg":"handled reques ... show less	DDoS Attack Web App Attack
🇳🇱 Site.eu	2026-06-09 14:31:26 (1 week ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.211

🇱🇰 220.247.224.226

🇨🇳 123.13.90.208

🇮🇩 103.154.231.122

🇫🇷 91.231.89.44

🇺🇸 66.132.172.117

🇩🇪 46.225.140.37

🇦🇹 45.137.172.116

🇺🇸 34.182.155.4

🇬🇧 195.140.214.24

🇧🇷 170.150.4.133

🇺🇸 162.240.179.173

🇫🇮 147.185.133.9

🇺🇸 40.124.175.166

🇬🇧 37.10.113.217

🇰🇷 1.227.228.131

🇨🇳 220.243.133.81

🇩🇪 167.94.145.23

🇺🇸 148.153.159.184

🇮🇩 103.153.190.105