JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.234.140.136

104.234.140.136 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 50%: ?

50%

ISP	Latitude.sh
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	latitude.sh
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.234.140.136

Whois 104.234.140.136

IP Abuse Reports for 104.234.140.136:

This IP address has been reported a total of 124 times from 45 distinct sources. 104.234.140.136 was first reported on June 15th 2023, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-17 03:11:55 (16 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-16 02:55:56 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-14 02:05:25 (3 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (11/60 min)'; Requests=11	Port Scan
🇨🇭 4server	2026-06-13 16:37:09 (4 days ago)	[SatJun1318:37:02.3064962026][security2:error][pid2047370:tid2047385][client104.234.140.136:0]ModSec ... show more [SatJun1318:37:02.3064962026][security2:error][pid2047370:tid2047385][client104.234.140.136:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx/index\\\\\\\\.php\$\"against\"REQUEST_FILENAME\"required.[file\"/etc/apache2/conf.d/modsec_rules/51_asl_wordpress_extra.conf\"][line\"33\"][id\"333149\"][rev\"21\"][msg\"Atomicorp.comWAFRules:PossiblePHPwebshelldetectedandblocked\"][severity\"CRITICAL\"][hostname\"fondazionemontgrand.ch\"][uri\"/wp-content/uploads/admin.php\"][unique_id\"ai2HLqq_aF3PTM6Wk3e4hgAAAUg\"]\,referer:http://fondazionemontgrand.ch/wp-content/uploads/admin.php show less	Hacking Web App Attack
🇬🇧 consul.to	2026-06-03 19:52:59 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 17:50:50 (4 weeks ago)	(mod_security) mod_security (id:240335) triggered by 104.234.140.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 104.234.140.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 13:50:44.535741 2026] [security2:error] [pid 17636:tid 17636] [client 104.234.140.136:46287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.234.140.136 (+1 hits since last alert)\|www.airtechconsulting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.airtechconsulting.com"] [uri "/xmlrpc.php"] [unique_id "agyi9OfSgpRkTbqltppazAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-19 15:41:20 (4 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇱 Site.eu	2026-05-13 12:49:04 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-05-12 14:54:22 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.234.140.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 104.234.140.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 10:54:18.336410 2026] [security2:error] [pid 7773:tid 7773] [client 104.234.140.136:56575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.moonlightmotel.com"] [uri "/wp-content/wp-config.php"] [unique_id "agM_GqYxFZUXf-DiN0lbKQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 penguin-solutions.at	2026-05-12 12:43:36 (1 month ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-05-12 09:20:19 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Live Home Cams	2026-05-11 23:49:20 (1 month ago)	WebApp brute force attack detected. Multiple file scanning attempts from 104.234.140.136. Detected b ... show more WebApp brute force attack detected. Multiple file scanning attempts from 104.234.140.136. Detected by fail2ban. show less	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-05-11 08:06:35 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.234.140.136 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 104.234.140.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 04:06:30.991485 2026] [security2:error] [pid 2130:tid 2148] [client 104.234.140.136:60895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.worldecom.org"] [uri "/wp-config.php"] [unique_id "agGOBiHfGEiCHqYJZ30PzgAAARA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-05-11 06:33:37 (1 month ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-05-10 20:45:22 (1 month ago)	Multiple, malicious web requests detected	Port Scan Hacking

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.82.247.216

🇮🇳 125.20.247.194

🇨🇳 111.9.22.102

🇭🇰 103.212.187.230

🇫🇷 91.231.89.81

🇳🇱 45.9.2.246

🇺🇸 34.162.43.120

🇧🇷 20.226.2.115

🇹🇼 198.235.24.106

🇧🇷 187.109.172.158

🇵🇭 165.154.59.90

🇫🇷 164.68.109.102

🇺🇸 156.239.41.50

🇺🇸 142.248.80.209

🇳🇱 91.92.40.4

🇺🇸 68.183.111.245

🇵🇱 57.128.225.99

🇧🇷 45.205.1.246

🇺🇸 20.12.240.74

🇧🇷 192.178.95.16