This IP address has been reported a total of
153
times from
19 distinct
sources.
104.207.34.123 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ...
show moreHoneypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud
show less
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.34.123
2026-05-10 1 ...
show moreThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.34.123
2026-05-10 14:23:26 /config/DataSetConfig%23.xml
show less
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.34.123
2026-05-06 0 ...
show moreThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.34.123
2026-05-06 01:34:51 /geoserver/rest.html
show less
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.34.123
2026-04-19 0 ...
show moreThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/104.207.34.123
2026-04-19 09:45:00 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.34.123
2026-04-0 ...
show moreThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.207.34.123
2026-04-09 06:13:56 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(*),concat(md5(1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)
show less
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.207.34.123
2 ...
show moreThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.207.34.123
2026-01-18 04:50:42 /
2026-01-18 04:50:42 /?debug=command&expression=%23f=%23_memberAccess.getClass%28%29.getDeclaredField%28%27allowStaticMethodAccess%27%29,%23f.setAccessible%28true%29,%23f.set%28%23_memberAccess,true%29,%[email protected]@getRequest%28%29,%[email protected]@getResponse%28%29.getWriter%28%29,%23a=%28new%20java.lang.ProcessBuilder%28new%20java.lang.String[]{%27netstat%27}%29%29.start%28%29,%23b=%23a.getInputStream%28%29,%23c=new%20java.io.InputStreamReader%28%23b%29,%23d=new%20java.io.BufferedReader%28%23c%29,%23e=new%20char[4000],%23d.read%28%23e%29,%23resp.println%28%23e%29,%23resp.close%28%29
show less
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.207.34.123
2 ...
show moreThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.207.34.123
2025-12-23 03:55:36 /druid/index.html
show less
Web App Attack
Anonymous
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.28 is noted in report ti ...
show moreAttempted brute force login to web vpn 12 time(s); last attempt for 2025.11.28 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
SuspiciousC2 Activity detected by FMBAD System 2025-11-27 00:55:16
Hacking
Bad Web Bot
Web App Attack
Anonymous
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.16 is noted in report ti ...
show moreAttempted brute force login to web vpn 12 time(s); last attempt for 2025.11.16 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
Anonymous
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.13 is noted in report tim ...
show moreAttempted brute force login to web vpn 2 time(s); last attempt for 2025.11.13 is noted in report timestamp
show less
Attempted brute force login to web vpn 14 time(s); last attempt for 2025.11.01 is noted in report ti ...
show moreAttempted brute force login to web vpn 14 time(s); last attempt for 2025.11.01 is noted in report timestamp
show less
Hacking
Brute-Force
Showing 1 to
15
of 153 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩