JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.199.239.105

Recent Activity

Abuse confidence score ?

100% Critical

79 reports

62 reporters · latest 18 hours ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	105.239.199.104.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.199.239.105

Export CSV

This IP address has been reported a total of 79 times from 62 distinct sources. 104.199.239.105 was first reported on October 12th 2026, and the most recent report was 18 hours ago. In the last 60 days, the top reporter locations were: Germany with 16 reports; United States of America with 13 reports; Belgium with 8 reports. The most common categories in these recent reports were: Web App Attack 66 times; Bad Web Bot 29 times; Brute-Force 29 times; Port Scan 12 times; Hacking 8 times; Other 19 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-10-13 22:14:28 (18 hours ago)		Brute-Force Web App Attack
🇬🇧 sc user	2026-10-13 21:36:49 (19 hours ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇧🇪 Saec	2026-10-13 00:17:06 (1 day ago)	Honeypot caught: /cgi-bin/php via campaigns.saec.me. UA: Mozilla/5.0 (compatible; YouBot/1.0; +https ... show more Honeypot caught: /cgi-bin/php via campaigns.saec.me. UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot). show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇫🇷 SpaceHost-Server	2026-10-12 22:14:25 (1 day ago)		Brute-Force Web App Attack
🇧🇪 Saec	2026-10-12 22:05:01 (1 day ago)	Honeypot caught: /.env.production via billing.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, li ... show more Honeypot caught: /.env.production via billing.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot). show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇺🇸 grassyloki	2026-10-12 20:22:07 (1 day ago)	Issued ~12 rapid requests to an external HTTPS endpoint enumerating secret/config files (.env, .git, ... show more Issued ~12 rapid requests to an external HTTPS endpoint enumerating secret/config files (.env, .git, .svn, .dockercfg, .values.yaml) plus RCE path-traversal (/proc/self/environ) and a PHP allow_url_include php://input injection; all requests returned 404. Target: HTTPS 443. GET /.git/HEAD, /.env.sendgrid, /.env.example, /.dockercfg, /.svn/entries, /values.yaml, /.envrc, /utils/.env; GET /userfiles?path=../../../../proc/self/environ and /....//....//....//..... Seen: 2026-10-12 16:22 EDT - 2026-10-12 16:22:16 GET /.git/HEAD -> 404 - 2026-10-12 16:22:15 GET /userfiles?path=../../../../proc/self/environ -> 404 - 2026-10-12 16:22:13 GET /.dockercfg -> 404 - 2026-10-12 16:22:12 GET /.env.sendgrid -> 404 - 2026-10-12 16:22:22 POST /form/ with allow_url_include=1 auto_prepend_file=php://input -> 404 show less	Web App Attack
Anonymous	2026-10-12 20:19:51 (1 day ago)	CrowdSec detection: crowdsecurity/http-sensitive-files	Web App Attack
🇧🇪 Saec	2026-10-12 19:36:46 (1 day ago)	Honeypot caught: /.env via apps.saec.me. UA: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +htt ... show more Honeypot caught: /.env via apps.saec.me. UA: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler). show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇨🇭 zynex	2026-10-12 17:51:10 (1 day ago)	CrowdSec crowdsecurity/http-cve-2021-41773	Web App Attack
🇧🇪 Saec	2026-10-12 17:48:46 (1 day ago)	Honeypot caught: //.env via api.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; comp ... show more Honeypot caught: //.env via api.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm). show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇩🇪 Gwyneth Llewelyn	2026-10-12 17:24:30 (1 day ago)	2026/10/12 18:24:28 [error] 4060693#4060693: 2563574 access forbidden by rule, client: 104.199.239. ... show more 2026/10/12 18:24:28 [error] 4060693#4060693: 2563574 access forbidden by rule, client: 104.199.239.105, server: api.betatechnologies.info, request: "GET /media../.env HTTP/2.0", host: "api.betatechnologies.info" 2026/10/12 18:24:28 [error] 4060693#4060693: 2563574 access forbidden by rule, client: 104.199.239.105, server: api.betatechnologies.info, request: "GET /files../.env HTTP/2.0", host: "api.betatechnologies.info" 2026/10/12 18:24:28 [error] 4060693#4060693: 2563574 access forbidden by rule, client: 104.199.239.105, server: api.betatechnologies.info, request: "GET /static../.env HTTP/2.0", host: "api.betatechnologies.info" show less	Brute-Force Web App Attack
🇳🇱 melroy89	2026-10-12 16:52:43 (2 days ago)	104.199.239.105 - - [12/Oct/2026:18:52:00 +0200] "POST /api/graphql HTTP/1.1" 403 9 "https://admine ... show more 104.199.239.105 - - [12/Oct/2026:18:52:00 +0200] "POST /api/graphql HTTP/1.1" 403 9 "https://adminer.finatec.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "adminer.finatec.nl" 0.000 104.199.239.105 - - [12/Oct/2026:18:52:00 +0200] "GET /userfiles?path=../../.env HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" "adminer.finatec.nl" 0.000 104.199.239.105 - - [12/Oct/2026:18:52:00 +0200] "POST /v1/graphql HTTP/1.1" 403 9 "https://adminer.finatec.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "adminer.finatec.nl" 0.000 104.199.239.105 - - [12/Oct/2026:18:52:00 +0200] "GET /userfiles?path=../../../../.env HTTP/1.1" 403 9 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "adminer.finatec.nl" 0.000 104.199.239.105 - - [12/Oct/2026:18:52:00 +0200] "GET /userfi ... show less	Web App Attack
🇧🇪 Saec	2026-10-12 16:46:00 (2 days ago)	Cloudflare WAF blocked 150 requests in 1h from TW. Top paths probed: /.env, /@fs/.env, /.env.local. ... show more Cloudflare WAF blocked 150 requests in 1h from TW. Top paths probed: /.env, /@fs/.env, /.env.local. Pattern: bot/scanner abuse. Auto-reported by Jarvis CF monitor. show less	Brute-Force Web App Attack
🇧🇪 Saec	2026-10-12 16:24:47 (2 days ago)	Honeypot caught: /.env.old via account.saec.me. UA: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x ... show more Honeypot caught: /.env.old via account.saec.me. UA: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/). show less	Port Scan Brute-Force Bad Web Bot Web App Attack IoT Targeted
🇭🇰 zhengka	2026-10-12 16:06:49 (2 days ago)	ZhengKa WAF detected scan_probe. Rule: security_trap. Method: GET. URI: /.env?raw??. Incident: 2ECDF ... show more ZhengKa WAF detected scan_probe. Rule: security_trap. Method: GET. URI: /.env?raw??. Incident: 2ECDF63474FA6122. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot show less	Port Scan Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.107.134.27

🇷🇺 62.182.132.94

🇺🇸 35.223.42.153

🇧🇪 35.205.191.178

🇨🇳 1.27.76.77

🇸🇬 172.217.44.210

🇫🇷 163.172.66.206

🇺🇸 66.132.195.201

🇺🇸 34.123.129.115

🇮🇳 171.76.108.66

🇧🇩 103.183.62.12

🇮🇷 94.182.168.135

🇨🇳 58.220.10.131

🇯🇵 2602:f71d:400::10

🇮🇳 188.208.141.252

🇻🇳 171.251.238.124

🇭🇰 149.88.76.100

🇰🇷 121.188.217.3

🇨🇦 24.202.224.203

🇯🇵 8.216.16.121