JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.199.164.40

104.199.164.40 was found in our database!

This IP was reported 196 times. Confidence of Abuse is 80%: ?

80%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	40.164.199.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.199.164.40

Whois 104.199.164.40

IP Abuse Reports for 104.199.164.40:

This IP address has been reported a total of 196 times from 61 distinct sources. 104.199.164.40 was first reported on February 20th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-21 10:33:53 (1 day ago)	Unauthorized connection to PostgreSQL port 5432	Port Scan
🇧🇾 lns.bz	2026-10-21 09:23:29 (1 day ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 micropedro	2026-10-20 23:36:24 (1 day ago)	3 incidents: malicious activity. First: 2026-10-02 11:28, Last: 2026-10-20 19:36 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-10-02 11:28, Last: 2026-10-20 19:36 UTC. Triggers: unknown. show less	Port Scan
🇦🇺 2000cn.com.au	2026-10-19 16:37:33 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇧🇾 lns.bz	2026-10-17 02:51:14 (5 days ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-10-16 15:48:31 (5 days ago)	104.199.164.40 - - [16/Oct/2026:17:48:25 +0200] "GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1" 404 ... show more 104.199.164.40 - - [16/Oct/2026:17:48:25 +0200] "GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1" 404 277 "-" "Go Web Pentest Tool" 104.199.164.40 - - [16/Oct/2026:17:48:26 +0200] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 277 "-" "Go Web Pentest Tool" 104.199.164.40 - - [16/Oct/2026:17:48:26 +0200] "GET /phpMyAdmin-latest-english/index.php?lang=en HTTP/1.1" 404 277 "-" "Go Web Pentest Tool" 104.199.164.40 - - [16/Oct/2026:17:48:26 +0200] "GET /phpMyAdmin-5.2.1-english/index.php?lang=en HTTP/1.1" 404 277 "-" "Go Web Pentest Tool" 104.199.164.40 - - [16/Oct/2026:17:48:27 +0200] "GET /MyAdmin/index.php?lang=en HTTP/1.1" 404 277 "-" "Go Web Pentest Tool" 104.199.164.40 - - [16/Oct/2026:17:48:27 +0200] "GET /phpMyAdmin-4/index.php?lang=en HTTP/1.1" 404 277 "-" "Go Web Pentest Tool" 104.199.164.40 - - [16/Oct/2026:17:48:28 +0200] "GET /phpmyadmin5/index.php?lang=en HTTP/1.1" 404 277 "-" "Go Web Pentest Tool" 104.199.164.40 - - [16/Oct/2026:17:48:29 +0200] "GET /phpMyAdmin-5.1.1/inde ... show less	Bad Web Bot
🇫🇷 Petre 21_ip	2026-10-16 12:50:50 (5 days ago)	2026-10-16T14:50:49.983354+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-10-16T14:50:49.983354+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=104.199.164.40 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x20 TTL=54 ID=7411 DF PROTO=TCP SPT=42716 DPT=5432 WINDOW=65320 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 lns.bz	2026-10-13 18:50:54 (1 week ago)	Too many 404 requests [BY]	Web App Attack
🇹🇼 kk_it_man	2026-10-13 10:13:02 (1 week ago)	ET SCAN Suspicious inbound to PostgreSQL port 5432	Port Scan
🇫🇷 security.rdmc.fr	2026-10-11 07:32:02 (1 week ago)	Port Scan Attack proto:TCP src:38452 dst:5432	Port Scan
Anonymous	2026-10-09 16:34:31 (1 week ago)	Aggressive web scan	Web App Attack
🇧🇷 dermatovirtual	2026-10-06 09:23:51 (2 weeks ago)	Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ... show more Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 70 unauthorized requests recorded between 2026-10-05 09:20:06 UTC and 2026-10-05 09:21:08 UTC (rate: ~67,7 req/min). Edge perimeter firewall drop active. Log sample: [2026-10-05 09:21:05 UTC] IP: 104.199.164.40 - W3C IIS (Port 80): GET /db/phpmyadmin4/index.php -> HTTP 500 [CLIENT: 104.199.164.40] [2026-10-05 09:21:06 UTC] IP: 104.199.164.40 - W3C IIS (Port 80): GET /phpMyAdmin3/index.php -> HTTP 500 [CLIENT: 104.199.164.40] [2026-10-05 09:21:06 UTC] IP: 104.199.164.40 - W3C IIS (Port 80): GET /db/phpMyAdmin3/index.php -> HTTP 500 [CLIENT: 104.199.164.40] show less	Bad Web Bot Web App Attack
🇧🇷 dermatovirtual	2026-10-05 09:23:34 (2 weeks ago)	Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ... show more Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 70 unauthorized requests recorded between 2026-10-05 09:20:06 UTC and 2026-10-05 09:21:08 UTC (rate: ~67,7 req/min). Edge perimeter firewall drop active. Log sample: [2026-10-05 09:21:05 UTC] IP: 104.199.164.40 - W3C IIS (Port 80): GET /db/phpmyadmin4/index.php -> HTTP 500 [CLIENT: 104.199.164.40] [2026-10-05 09:21:06 UTC] IP: 104.199.164.40 - W3C IIS (Port 80): GET /phpMyAdmin3/index.php -> HTTP 500 [CLIENT: 104.199.164.40] [2026-10-05 09:21:06 UTC] IP: 104.199.164.40 - W3C IIS (Port 80): GET /db/phpMyAdmin3/index.php -> HTTP 500 [CLIENT: 104.199.164.40] show less	Bad Web Bot Web App Attack
🇳🇱 Cloud86 B.V.	2026-10-03 21:16:01 (2 weeks ago)	categories: Brute-Force	Brute-Force
🇧🇷 noconex	2026-09-30 19:04:08 (3 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) dete ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) detectado de 104.199.164.40 show less	Port Scan Brute-Force SSH

Showing 1 to 15 of 196 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇪 188.169.10.45

🇺🇸 172.191.94.172

🇨🇳 121.31.210.125

🇮🇹 83.224.168.213

🇹🇭 34.15.168.215

🇺🇸 20.163.168.234

🇺🇸 18.97.9.99

🇧🇩 203.190.34.195

🇬🇧 193.163.125.150

🇺🇦 193.107.177.181

🇲🇽 187.190.35.163

🇳🇱 185.242.226.19

🇴🇲 162.158.28.230

🇦🇫 149.54.81.98

🇨🇳 125.86.31.99

🇨🇳 117.14.51.58

🇺🇦 109.86.231.26

🇮🇳 103.54.29.28

🇺🇸 66.132.195.27

🇮🇪 34.243.150.111