104.199.84.13
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Google LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS396982
- Hostname(s)
- 13.84.199.104.bc.googleusercontent.com
- Domain Name
- google.com
- Country
- 🇧🇪 Belgium
- City
- Brussels, Brussels Capital
No reports in the last 60 days
104.199.84.13 has been reported 21 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
21 from
19 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 joharikop |
Malformed HTTP request or known bad user agent detected by fail2ban on nginx reverse proxy
|
Bad Web Bot | |
| 🇯🇵 VXG-NET |
port=80, indicator_type=hacktool
|
Hacking | |
| Anonymous |
|
Web App Attack | |
| 🇺🇸 nyt |
Empty UA + error
|
Web App Attack | |
| 🇺🇸 donarev419 |
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 67.215.244.172:80
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple
|
Port Scan Hacking | |
| 🇺🇸 Rip |
403 Errors: Access Forbidden
|
Brute-Force | |
| 🇳🇴 noteng.no |
|
Hacking Web App Attack | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: proto8 (1 total hits)
|
Brute-Force | |
| 🇺🇸 conrad10781 |
nginx-direct-ip
|
Port Scan | |
| Anonymous |
bad ssl requests
|
Port Scan Hacking Web App Attack | |
| 🇵🇱 genokrad |
Direct ip access to website TCP 80/443 [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH].
|
Port Scan Web App Attack | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tactical-rmm-lockdown-high.
|
Hacking | |
| 🇺🇸 azminawwar |
[104.199.84.13] triggered by honeypot on port [80], Timestamp [2026-08-17T05:11:30Z]METHOD=OPTIONS PATH=/ HTTP=HTTP/1.1 UA="Mozilla/5.0 (compatible)" HOST="95.182.92.103" REF="-"
|
Port Scan Hacking | |
| 🇺🇸 gu-alvareza |
Java.Debug.Wire.Protocol.Insecure.Configuration
|
Hacking | |
| 🇺🇸 nyt |
Empty UA + error, Unusual 444 status, potential scanning activity
|
Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown