104.199.5.142

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
33% Elevated
27 reports
21 reporters Β· latest 1 month ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
142.5.199.104.bc.googleusercontent.com
Domain Name
google.com
Country
πŸ‡§πŸ‡ͺ Belgium
City
Brussels, Brussels Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 21 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡ΊπŸ‡Έ United States of America 8 πŸ‡©πŸ‡ͺ Germany 4 πŸ‡«πŸ‡· France 3
Most common categories Port Scan 19 Hacking 10 Brute-Force 4 Exploited Host 2 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡©πŸ‡ͺ guldkage
Unauthorized connection attempt detected from IP address 104.199.5.142 to port 445 (ger-02) [SMB]
Exploited Host
πŸ‡³πŸ‡± donarev419
Connection to port 389 with data transfer. Data preview: οΏ½
Port Scan Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[10:46] Port scanning. Port(s) scanned: TCP/636
Port Scan
πŸ‡΅πŸ‡± nfsec.pl
Detected: TCP scan on port: 445 with flags: SYN
Port Scan
πŸ‡¦πŸ‡Ή begou.dev
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/389
Port Scan
πŸ‡³πŸ‡± knock
Knock-Knock honeypot brute-force: SMB (2 total hits)
Brute-Force
πŸ‡«πŸ‡· thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-09-20T08:39:30Z.
Port Scan
πŸ‡ΊπŸ‡Έ donarev419
Connection to port 389 with data transfer. Data preview: 0:
Port Scan Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[07:32] Port scanning. Port(s) scanned: TCP/389
Port Scan
πŸ‡¨πŸ‡­ cybsecaoccol
multiple malicious connection attempts on tcp port 445 - sch
DDoS Attack Port Scan Hacking Brute-Force
πŸ‡ΉπŸ‡Ό kk_it_man
honey catch
Port Scan
πŸ‡©πŸ‡ͺ mist x
Honeypot SMB Probe: Port 445 SMB scan and exploit handshake probe.
Port Scan Hacking
πŸ‡ΊπŸ‡Έ uhhhhhhyeahnotanythingthatislikemyotheraccountsanywhereelse
T-Pot honeypot: 32 credential/exploit attempts (Dionaea) in the last hour
Brute-Force SSH
πŸ‡©πŸ‡ͺ EnthecSolutions
Detected by Enthec Solutions. | Attempts: 32 in 24h | Target port: 445
Exploited Host Hacking
πŸ‡ΊπŸ‡Έ drewf.ink
[05:33] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): PC NETWORK PROGRAM 1.0, MICROSOFT NETWORKS 1.03, MICROSOFT NETWORKS 3.0, LANMAN1.0, LM1.2X002, Samba, NT LANMAN 1.0, NT LM 0.12) - no SMB2 support signaled
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡ΊπŸ‡Έ 161.123.74.152
πŸ‡©πŸ‡ͺ 159.89.96.177
πŸ‡΅πŸ‡­ 136.158.100.181
πŸ‡³πŸ‡± 45.148.10.141
πŸ‡²πŸ‡½ 189.203.131.185
πŸ‡ΈπŸ‡ͺ 185.64.73.81
πŸ‡΅πŸ‡± 172.64.200.69
πŸ‡΅πŸ‡± 172.64.200.49
πŸ‡§πŸ‡· 170.80.15.126
πŸ‡³πŸ‡± 165.232.84.130
πŸ‡ΊπŸ‡Έ 71.6.155.70
πŸ‡»πŸ‡³ 27.65.113.172
πŸ‡²πŸ‡¦ 196.75.44.196
πŸ‡¬πŸ‡§ 195.96.139.185
πŸ‡°πŸ‡· 183.109.124.136
πŸ‡ΈπŸ‡³ 154.125.228.145
πŸ‡ΊπŸ‡Έ 152.39.211.19
πŸ‡ΊπŸ‡Έ 152.39.203.101
πŸ‡ΉπŸ‡­ 147.50.240.132
πŸ‡²πŸ‡Ύ 121.120.148.7
feedback