JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.234.140.78

104.234.140.78 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 45%: ?

45%

ISP	Latitude.sh
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	latitude.sh
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.234.140.78

Whois 104.234.140.78

IP Abuse Reports for 104.234.140.78:

This IP address has been reported a total of 141 times from 63 distinct sources. 104.234.140.78 was first reported on May 10th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-05 03:54:16 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 consul.to	2026-05-29 17:09:53 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 4server	2026-05-16 14:15:59 (3 weeks ago)	[SatMay1616:15:53.2433712026][security2:error][pid2407119:tid2407179][client104.234.140.78:0]ModSecu ... show more [SatMay1616:15:53.2433712026][security2:error][pid2407119:tid2407179][client104.234.140.78:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"dgtime.ch\"][uri\"/wp-content/wp-config-backup.php\"][unique_id\"agh8GUG7AFrqq6x9RdihWwAAAEo\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 2000cn.com.au	2026-05-16 08:04:18 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Web App Attack Hacking
🇳🇱 Site.eu	2026-05-15 10:26:00 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇨🇳 ThreatBook.io	2026-05-11 22:57:49 (3 weeks ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/104.234.140.78 2026-05-11 1 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/104.234.140.78 2026-05-11 12:31:02 /explore/projects/starred/management/env 2026-05-11 12:31:01 /caizhoujie/mediaserver/issues/..;/api/env 2026-05-11 12:31:03 /explore/projects/starred/monitor;%2f../env 2026-05-11 12:31:02 /explore/groups/..%3ba/gateway/actuator/env 2026-05-11 12:31:04 /help/administration/monitoring/..%3ba/gateway/actuator/env 2026-05-11 12:31:03 /explore/projects/api;%2f../actuator/env 2026-05-11 12:31:04 /help/administration/auth/..;/api/actuator/env 2026-05-11 12:31:00 /caizhoujie/mediaserver/management;%2f../env 2026-05-11 12:31:03 /explore/projects/trending/..;/api/env 2026-05-11 12:31:02 /explore/admin/actuator/env show less	Web App Attack
🇫🇷 masterguru	2026-05-06 18:33:57 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193) show less	Bad Web Bot
🇫🇷 masterguru	2026-05-06 14:18:22 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇫🇷 masterguru	2026-05-06 11:31:37 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇮🇪 Jim Keir	2026-05-05 16:25:53 (1 month ago)	2026-05-05 16:25:52 104.234.140.78 File scanning, blocking 104.234.140.78 for 5 minutes	Web App Attack
🇬🇧 consul.to	2026-05-04 15:32:17 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 filstal.org	2026-05-04 00:35:32 (1 month ago)	CrowdSec-Report: crowdsecurity/http-probing	Hacking Web App Attack
🇨🇿 ddw	2026-05-03 13:09:47 (1 month ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-02 17:14:05 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-05-02 15:29:01 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.234.140.78 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.234.140.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 11:28:56.999657 2026] [security2:error] [pid 20938:tid 20938] [client 104.234.140.78:38611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.daisydoesoap.com"] [uri "/wp-content/wp-config.php"] [unique_id "afYYODMTvi6H7gQBOJqj9wAAAA8"], referer: http://daisydoesoap.com/wp-content/wp-config.php show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:332::14d

🇫🇷 217.113.196.193

🇫🇷 207.180.221.143

🇮🇩 202.155.19.202

🇨🇳 202.105.98.252

🇧🇷 189.113.47.155

🇬🇪 185.228.135.197

🇨🇴 129.222.203.206

🇩🇿 105.102.232.143

🇺🇸 104.4.114.232

🇳🇱 45.148.10.183

🇳🇱 45.142.193.12

🇨🇳 39.165.114.36

🇩🇪 35.246.172.40

🇺🇸 35.237.19.94

🇫🇮 35.228.158.21

🇯🇵 35.221.85.18

🇧🇷 35.198.58.162

🇺🇸 34.181.154.188

🇦🇺 34.151.120.112