JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.234.140.121

104.234.140.121 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 41%: ?

41%

ISP	Latitude.sh
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	latitude.sh
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.234.140.121

Whois 104.234.140.121

IP Abuse Reports for 104.234.140.121:

This IP address has been reported a total of 118 times from 47 distinct sources. 104.234.140.121 was first reported on April 9th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-22 14:06:23 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 raph	2026-06-18 11:52:57 (6 days ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-17 10:50:19 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-16 03:14:55 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-14 02:05:08 (1 week ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (14/60 min)'; Requests=14	Port Scan
🇳🇱 Site.eu	2026-05-19 15:41:21 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 dynamix	2026-05-12 10:37:48 (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 ghostwarriors	2026-05-12 09:20:20 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Live Home Cams	2026-05-11 23:50:31 (1 month ago)	WebApp brute force attack detected. Multiple file scanning attempts from 104.234.140.121. Detected b ... show more WebApp brute force attack detected. Multiple file scanning attempts from 104.234.140.121. Detected by fail2ban. show less	Web App Attack Brute-Force
🇪🇸 robotstxt	2026-05-11 13:17:01 (1 month ago)	104.234.140.121 - - [11/May/2026:13:08:10 +0000] "GET /wp-admin.php HTTP/2.0" 404 15119 "http://www. ... show more 104.234.140.121 - - [11/May/2026:13:08:10 +0000] "GET /wp-admin.php HTTP/2.0" 404 15119 "http://www.wpsysadmin.com/wp-admin.php" rt="1.176" "Go-http-client/2.0" "-" h="www.wpsysadmin.com" sn="www.wpsysadmin.com" ru="/wp-admin.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wpsysadmin82.sock" us="404" uct="0.000" urt="1.175" 104.234.140.121 - - [11/May/2026:13:08:10 +0000] "GET /wp-admin.php HTTP/2.0" 404 15119 "http://www.wpsysadmin.com/wp-admin.php" "Go-http-client/2.0" "-" 104.234.140.121 - - [11/May/2026:13:13:22 +0000] "GET /cgi-bin/cgi-bin/config.php HTTP/2.0" 404 15119 "http://www.wpsysadmin.com/cgi-bin/cgi-bin/config.php" rt="0.156" "Go-http-client/2.0" "-" h="www.wpsysadmin.com" sn="www.wpsysadmin.com" ru="/cgi-bin/cgi-bin/config.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wpsysadmin82.sock" us="404" uct="0.000" urt="0.156" 104.234.140.121 - - [11/May/2026:13:13:22 +0000] "GET /cgi-bin/cgi-bin/config.php HTTP/2.0" 404 15119 "http://www.wpsysadmin.com/cgi-bin/cgi-bin/con ... show less	Bad Web Bot
🇩🇪 4server	2026-05-11 11:21:31 (1 month ago)	[MonMay1113:21:25.2490622026][security2:error][pid2489304:tid2489327][client104.234.140.121:0]ModSec ... show more [MonMay1113:21:25.2490622026][security2:error][pid2489304:tid2489327][client104.234.140.121:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx/index\\\\\\\\.php\$\"against\"REQUEST_FILENAME\"required.[file\"/etc/apache2/conf.d/modsec_rules/51_asl_wordpress_extra.conf\"][line\"33\"][id\"333149\"][rev\"21\"][msg\"Atomicorp.comWAFRules:PossiblePHPwebshelldetectedandblocked\"][severity\"CRITICAL\"][hostname\"www.wp.aaaa6877.org\"][uri\"/wp-content/uploads/elementor/system_core.php\"][unique_id\"agG7tdLauWBX8nefj1m6VAAAAAo\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 09:50:52 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.234.140.121 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 104.234.140.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 05:50:48.852343 2026] [security2:error] [pid 29942:tid 29942] [client 104.234.140.121:37603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.worthhomes4rent.com"] [uri "/wp-config.php"] [unique_id "agGmePqk1YwbbYpgOcTlNgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-10 14:00:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.234.140.121 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 104.234.140.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 09:59:55.387128 2026] [security2:error] [pid 14206:tid 14206] [client 104.234.140.121:48301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twogocamping.com"] [uri "/wp-config.php"] [unique_id "agCPWy4KDYov2FvkSNLY9gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-10 02:37:19 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇪🇸 masterguru	2026-05-08 04:30:28 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.233.88.40

🇺🇸 98.102.148.242

🇸🇬 94.231.206.249

🇵🇹 85.240.193.104

🇩🇪 45.135.194.113

🇬🇧 45.82.76.108

🇩🇪 2.26.252.153

🇺🇸 104.234.53.27

🇬🇭 102.22.14.116

🇺🇸 66.132.224.24

🇸🇬 47.128.113.197

🇺🇸 44.249.73.17

🇨🇳 36.104.144.114

🇦🇷 209.99.239.229

🇺🇸 170.106.148.137

🇹🇷 95.130.170.146

🇰🇿 92.47.46.174

🇫🇷 88.142.46.185

🇱🇻 81.30.98.44

🇱🇹 77.90.185.78