JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

66.249.75.104

Neutral Activity Whitelisted Subnet

Abuse confidence score ?

0% Low Risk

20 reports

13 reporters · latest 2 weeks ago

66.249.75.104 is an IP address from within our whitelist belonging to the subnet 66.249.75.96/27, which we identify as "Googlebot".

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS15169
Hostname(s)	crawl-66-249-75-104.googlebot.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 66.249.75.104

This IP address has been reported a total of 20 times from 13 distinct sources. 66.249.75.104 was first reported on April 3rd 2026, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: Germany with 3 reports; France with 2 reports; Poland with 2 reports. The most common categories in these recent reports were: Web App Attack 6 times; Bad Web Bot 5 times; Hacking 1 time; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-09 03:04:34 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.definitelynotahoneypot.top \| URI: /backup.sql \| UA: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.173 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 Trashware	2026-08-25 03:39:53 (4 weeks ago)	Nosy troll bot	Hacking Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-18 09:19:36 (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.teddypot.website \| URI: /backup.sql \| UA: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.137 Mobile Safari/537.36 (compatible; GoogleOther) \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-08-08 00:39:59 (1 month ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 66.249.75.104 - - [08/Aug/2026:03:39:58 +0300] "GE ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 66.249.75.104 - - [08/Aug/2026:03:39:58 +0300] "GET /solr/ HTTP/1.1" 404 6237 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.7871.186 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" show less	Web App Attack
🇫🇷 mail.avx.gr	2026-08-05 21:20:45 (1 month ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 66.249.75.104 - - [06/Aug/2026:00:20:44 +0300] "GE ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 66.249.75.104 - - [06/Aug/2026:00:20:44 +0300] "GET /solr/ HTTP/1.1" 404 6237 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.7871.186 Mobile Safari/537.36 (compatible; GoogleOther)" show less	Web App Attack
🇩🇪 ghostwarriors	2026-07-31 05:50:18 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-07-31 05:35:02 (1 month ago)	2026/07/31 07:35:01 [error] 42202#158827: 67808 limiting requests, excess: 0.987 by zone "crawler", ... show more 2026/07/31 07:35:01 [error] 42202#158827: 67808 limiting requests, excess: 0.987 by zone "crawler", client: 66.249.75.104, server: ipariapro.hu, request: "GET / HTTP/1.1", host: "ipariapro.hu" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 12:18:03 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 66.249.75.104 (crawl-66-249-75-104.googlebot.co ... show more (mod_security) mod_security (id:210730) triggered by 66.249.75.104 (crawl-66-249-75-104.googlebot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 08:17:56.334943 2026] [security2:error] [pid 28354:tid 28354] [client 66.249.75.104:48922] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|21north.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "21north.com"] [uri "/base/install/index.php.bak"] [unique_id "akeodOovgrDjw4jZA4paYAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2026-06-25 13:15:11 (2 months ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇩🇪 bescared	2026-06-22 16:37:08 (3 months ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-20 14:30:46 (3 months ago)	66.249.75.104 - - [20/Jun/2026:16:30:37 +0200] "GET /assets/libraries/jquery.autocomplete.min.js?v=2 ... show more 66.249.75.104 - - [20/Jun/2026:16:30:37 +0200] "GET /assets/libraries/jquery.autocomplete.min.js?v=20220929045944 HTTP/1.1" 404 448 "http://www.malizganipchavula.com/index.html" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.75.104 - - [20/Jun/2026:16:30:37 +0200] "GET /assets/libraries/jquery.autocomplete.min.js?v=20220929045944 HTTP/1.1" 404 252 "http://www.malizganipchavula.com/index.html" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.7778.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.75.104 - - [20/Jun/2026:16:30:38 +0200] "GET /assets/js/vendor/chosen.jquery.js?v=20240718033249 HTTP/1.1" 404 448 "http://www.malizganipchavula.com/index.html" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/5 ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 21:58:52 (3 months ago)	(mod_security) mod_security (id:213060) triggered by 66.249.75.104 (crawl-66-249-75-104.googlebot.co ... show more (mod_security) mod_security (id:213060) triggered by 66.249.75.104 (crawl-66-249-75-104.googlebot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 17:58:49.031371 2026] [security2:error] [pid 9801:tid 9801] [client 66.249.75.104:46518] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href\|html\|mlns)\|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM\|PUBLIC)\|\\\\bdata:text\\\\/html))" at ARGS:_bd_prev_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector\|\|mediatvplus.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "mediatvplus.com"] [uri "/pages.php"] [unique_id "ajRqGfkdIjHADTPk10W_IAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2026-06-15 14:08:17 (3 months ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇩🇪 bescared	2026-06-07 13:35:19 (3 months ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack
🇯🇵 Kinsei Engineering Inc.	2026-05-21 15:58:14 (4 months ago)	UFW:High-frequency access to non-released ports used by software with known vulnerabilities.	Port Scan

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.230.71.138

🇫🇷 207.180.224.231

🇧🇷 179.48.3.108

🇺🇸 162.216.149.72

🇮🇩 125.161.91.25

🇭🇰 123.58.213.128

🇻🇳 101.99.13.241

🇧🇬 91.191.209.46

🇸🇮 84.41.86.97

🇩🇪 46.101.115.134

🇲🇾 45.194.27.150

🇧🇷 45.187.161.223

🇩🇪 45.136.19.162

🇺🇸 3.131.220.121

🇺🇸 172.214.209.153

🇺🇸 162.216.150.192

🇭🇰 152.32.252.161

🇵🇭 150.228.157.228

🇫🇮 147.185.133.209

🇸🇬 145.223.148.77