34.104.148.123

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
57 reports
48 reporters · latest 2 days ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
123.148.104.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇯🇵 Japan
City
Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
57 from 48 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 20 🇩🇪 Germany 14 🇫🇷 France 6
Most common categories Web App Attack 40 Brute-Force 21 Bad Web Bot 14 Port Scan 7 Hacking 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 NetGuard
Web App Attack
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking, Brute-Force, Exploited Host. Last observed 2026-10-29 UTC.
Hacking Brute-Force Exploited Host
🇪🇸 raiolanetworks.com
Honeypot detection: SIP/VoIP fraud. 4 events observed. Reported automatically from a honeypot sensor.
Fraud VoIP Brute-Force
🇺🇸 ShadowWhisperer
SIP port scan / probe. OPTIONS probe ua=
Port Scan Fraud VoIP
Anonymous
Port Scan
🇫🇷 uthul
T-Pot honeypot: 2 hits on ports [5060] (automated)
Port Scan Hacking
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇩🇪 Gwyneth Llewelyn
34.104.148.123 - - [06/Oct/2026:20:30:48 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 1064 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
Bad Web Bot
🇦🇹 René Hickersberger
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
Bad Web Bot
Anonymous
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇩🇪 macrob
Web App Attack
🇪🇸 robotstxt
Web App Attack
🇺🇸 rsa
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file% OST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_
DDoS Attack Exploited Host Web App Attack
🇺🇸 WellSpring
env leak on wellsign.org/@fs/root/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 223.233.68.10
🇳🇱 193.47.62.69
🇧🇷 177.45.72.14
🇺🇸 129.121.102.102
🇧🇷 129.121.48.164
🇳🇱 81.19.216.103
🇧🇷 45.163.1.131
🇩🇴 38.196.63.15
🇳🇱 35.204.30.70
🇮🇳 34.93.95.170
🇳🇱 34.91.109.67
🇮🇳 8.234.105.235
🇮🇷 194.180.11.186
🇳🇱 185.136.15.80
🇰🇷 183.106.237.242
🇺🇸 157.55.39.205
🇳🇬 154.113.217.75
🇧🇷 138.204.37.111
🇺🇸 64.105.86.106
🇺🇸 51.81.92.176