JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.199.58.216

Activity Trending Down

Abuse Confidence Score

45% Elevated

20 reports

13 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 216.58.199.104.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇪 Belgium
City: Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 13 distinct reporters

First reported

August 11th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 8 🇳🇱 Netherlands 3 🇩🇪 Germany 2

Most common categories Web App Attack 15 Bad Web Bot 9 Brute-Force 8 Hacking 3 SSH 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-11-04 23:01:53 UTC · (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-03.	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-11-03 23:32:32 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:32:25.991091 2026] [security2:error] [pid 19061:ti ... show more (mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:32:25.991091 2026] [security2:error] [pid 19061:tid 19061] [client 104.199.58.216:51188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeannieksmith.com"] [uri "/.git/config"] [unique_id "aupvCQ8olV5jhrL8fDmiNwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-11-03 22:59:30 UTC · (1 week ago)	Auto-ban: >3000 req/min op 2026-11-03	Web App Attack SSH Hacking
🇩🇪 jeannelboutique	2026-11-03 22:17:03 UTC · (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 104.199.58.216 (BE/Belgium/216.58.199.104.bc.googleusercontent.com)	SQL Injection
🇫🇷 COMAITE	2026-11-03 20:41:34 UTC · (1 week ago)	Suspicious URL access.	Web App Attack
🇳🇱 e.fierstra	2026-11-03 17:44:38 UTC · (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 15:55:32 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:55:28.613464 2026] [security2:error] [pid 32280:ti ... show more (mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:55:28.613464 2026] [security2:error] [pid 32280:tid 32280] [client 104.199.58.216:51640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeanboomergrenier.com"] [uri "/.git/config"] [unique_id "auoD8BNQlmdLj2hSP82IjAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 14:53:01 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:52:57.359527 2026] [security2:error] [pid 14108:ti ... show more (mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:52:57.359527 2026] [security2:error] [pid 14108:tid 14118] [client 104.199.58.216:60558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jean-paullederer.com"] [uri "/.git/config"] [unique_id "aun1SetxXqU7gFQN1cZyrAAAAQg"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-11-03 14:41:59 UTC · (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 14:36:17 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:36:13.732614 2026] [security2:error] [pid 7719:tid ... show more (mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:36:13.732614 2026] [security2:error] [pid 7719:tid 7719] [client 104.199.58.216:60724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jean-louisdarville.com"] [uri "/.git/config"] [unique_id "aunxXeOfCqbQmUaOBsdYpAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-11-03 06:10:32 UTC · (1 week ago)	~ suspicious activity ~	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 02:54:40 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:54:36.572893 2026] [security2:error] [pid 7903:tid ... show more (mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:54:36.572893 2026] [security2:error] [pid 7903:tid 7903] [client 104.199.58.216:55178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justicehoward.com"] [uri "/.git/config"] [unique_id "aulM7NqyH8Spy7LlP0-gaQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 00:16:54 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:16:48.082641 2026] [security2:error] [pid 15236:ti ... show more (mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:16:48.082641 2026] [security2:error] [pid 15236:tid 15236] [client 104.199.58.216:60518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justiart.com"] [uri "/.git/config"] [unique_id "aukn8G2uKGLyFLb2XFVFDgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-11-02 22:04:22 UTC · (1 week ago)	104.199.58.216 - - [02/Nov/2026:17:04:21 -0500] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ...	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-02 11:00:43 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:00:39.171546 2026] [security2:error] [pid 21050:ti ... show more (mod_security) mod_security (id:210492) triggered by 104.199.58.216 (216.58.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:00:39.171546 2026] [security2:error] [pid 21050:tid 21050] [client 104.199.58.216:43236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juhoanttila.com"] [uri "/.git/config"] [unique_id "auhtV8LZJf-DJTKwWwFRfAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 212.73.148.3

🇳🇱 206.245.152.180

🇬🇧 188.240.59.45

🇨🇳 182.242.169.11

🇸🇮 176.65.134.73

🇩🇪 162.158.111.183

🇨🇦 85.217.149.55

🇹🇼 59.127.179.227

🇹🇼 59.126.224.134

🇰🇷 59.26.132.170

🇯🇵 47.245.26.63

🇺🇸 40.80.201.85

🇪🇬 196.219.63.22

🇩🇪 194.88.98.101

🇺🇸 192.101.66.238

🇨🇱 190.110.111.101

🇨🇳 182.119.224.111

🇮🇩 182.8.122.153

🇩🇪 102.220.163.241

🇷🇴 92.118.39.71