JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.234.140.8

104.234.140.8 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 34%: ?

34%

ISP	Latitude.sh
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	latitude.sh
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.234.140.8

Whois 104.234.140.8

IP Abuse Reports for 104.234.140.8:

This IP address has been reported a total of 146 times from 64 distinct sources. 104.234.140.8 was first reported on June 23rd 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-12 20:15:25 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 solution.it	2026-06-10 14:27:08 (4 days ago)	[Wed Jun 10 16:27:07.668452 2026] [php7:error] [pid 2655521:tid 2655521] [client 104.234.140.8:30555 ... show more [Wed Jun 10 16:27:07.668452 2026] [php7:error] [pid 2655521:tid 2655521] [client 104.234.140.8:30555] script '/var/www/html/wp-signin.php' not found or unable to stat show less	Web App Attack
Anonymous	2026-05-31 09:07:29 (2 weeks ago)	http scanning for .env files ...	Hacking Web App Attack
🇺🇸 mnsf	2026-05-28 23:05:42 (2 weeks ago)	Scanning/Probing (16)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 16:08:05 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.234.140.8 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.234.140.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 12:07:57.195623 2026] [security2:error] [pid 1050:tid 1050] [client 104.234.140.8:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.upskirtcrazy.com"] [uri "/.env"] [unique_id "ahcW3SifROYX8WfnEwDcmgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-05-25 00:06:02 (3 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇬🇧 consul.to	2026-05-24 00:57:00 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-04-14 06:31:04 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇳 ThreatBook.io	2026-04-12 23:59:13 (2 months ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/104.234.140.8 2026-04-12 12: ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/104.234.140.8 2026-04-12 12:03:48 /help/ci/chatops/README.md?../../../etc/passwd 2026-04-12 09:53:41 /Login_files?../../../../../../../../etc/passwd 2026-04-12 12:03:48 /help/ci?../../../etc/passwd 2026-04-12 12:03:48 /caizhoujie/mediaserver/merge_requests?../../../../../../../../etc/passwd 2026-04-12 12:03:48 /explore/groups?../../../etc/passwd 2026-04-12 12:03:48 /help/administration/monitoring/performance?../../../../../../etc/passwd 2026-04-12 12:03:48 /caizhoujie/mediaserver/-/forks?../../../../../../etc/passwd 2026-04-12 12:03:48 /caizhoujie?/etc/passwd 2026-04-12 12:03:48 /caizhoujie/mediaserver/-/forks?../../../etc/passwd 2026-04-12 12:03:48 /help/ci?/etc/passwd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-09 23:49:38 (2 months ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/104.234.140.8 2026-04-09 17: ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/104.234.140.8 2026-04-09 17:44:45 /.env.swp 2026-04-09 14:59:39 /help/user/project/issues/..;//etc/passwd 2026-04-09 14:59:37 /help/ci/review_apps///////../../../etc/passwd 2026-04-09 05:15:44 /nagiosna/auth/forgot_password/api/download/file?url=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt&uri=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt&target=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt&link=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt&file=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt&img=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt&image=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt 2026-04-09 14:59:38 /help/subscriptions/../../etc/passwd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-03 01:03:19 (2 months ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/104.234.140.8 2026-04-02 06: ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/104.234.140.8 2026-04-02 06:52:04 /login/actuator/env/../env 2026-04-02 07:05:45 /login/manage/env 2026-04-02 06:57:27 /login/management/env 2026-04-02 06:57:26 /login/actuator;.json/env show less	Web App Attack
🇺🇸 myagent.site	2026-03-17 20:44:29 (2 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇨🇳 ThreatBook.io	2026-02-11 23:42:44 (4 months ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/104.234.140.8 2026- ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/104.234.140.8 2026-02-11 17:52:56 /Message/fi_message_receiver.aspx?replyid=1%20and%201=CONVERT(VARCHAR(32),HASHBYTES('MD5','123'),2)--+ 2026-02-11 23:49:27 /Message/fi_message_receiver.aspx?replyid=1%20and%201%3DCONVERT(VARCHAR(32)%2CHASHBYTES('MD5'%2C'123')%2C2)--%20 2026-02-11 17:52:36 /handle_config.php?log=;id; show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-27 01:09:50 (4 months ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/104.234.140.8 2026- ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/104.234.140.8 2026-01-26 04:16:55 /api/v2/heapdump 2026-01-26 04:58:51 /api/actuato%72/heapdum%70 2026-01-26 03:32:56 / 2026-01-26 04:16:54 /api/..;/actuator/heapdump 2026-01-26 04:58:50 /..;/..;/..;/..;/heapdump 2026-01-26 03:18:32 /;/actuator/heapdump 2026-01-26 03:18:33 /heapdum%70;%2f../ 2026-01-26 03:32:57 /..;/..;/..;/..;/heapdump 2026-01-26 04:58:50 /..;/heapdump 2026-01-26 04:17:13 /heapdump.json show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-12 01:04:06 (5 months ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/104.234.140.8 2026- ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/104.234.140.8 2026-01-11 06:46:44 /shell/ 2026-01-11 06:46:37 /import/json/ 2026-01-11 06:46:47 /api/proxy/ 2026-01-11 06:46:25 /aws/metadata/ 2026-01-11 06:46:42 /blob/proxy/ show less	Web App Attack

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 113.121.43.115

🇳🇱 45.148.10.183

🇱🇰 220.247.224.226

🇮🇶 185.158.22.150

🇭🇰 154.221.20.215

🇲🇾 49.124.151.42

🇳🇱 45.142.193.191

🇨🇳 43.247.102.81

🇮🇩 34.101.194.139

🇳🇱 2a0b:8bc0:2:a893::1

🇲🇾 195.86.192.66

🇲🇽 189.203.190.153

🇨🇳 183.66.166.30

🇧🇷 177.92.162.243

🇿🇦 165.73.139.160

🇨🇳 140.143.159.80

🇨🇳 121.204.171.142

🇵🇰 110.36.70.47

🇨🇦 85.217.149.35

🇺🇸 71.6.233.2