JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.1.164

140.235.1.164 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 0%: ?

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.1.164

Whois 140.235.1.164

IP Abuse Reports for 140.235.1.164:

This IP address has been reported a total of 26 times from 18 distinct sources. 140.235.1.164 was first reported on September 16th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-16 01:50:32 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 140.235.1.164 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 140.235.1.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 21:50:22.677957 2026] [security2:error] [pid 2263912:tid 2263912] [client 140.235.1.164:49065] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Chandler/Thumbs.db"] [unique_id "aeBAXsZ-KJ_hA-1yN02zkQAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Chandler/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-03-23 04:44:33 (2 months ago)	Fail2Ban: 140.235.1.164 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Chrome/98. ... show more Fail2Ban: 140.235.1.164 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Chrome/98.8 Safari/538.58 show less	Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia	2026-03-22 00:22:08 (2 months ago)	XML RPC Scan Activities: "2026-03-22T07:22:08.869+07:00" "/xmlrpc.php" "140.235.1.164" "Chrome/95.5 ... show more XML RPC Scan Activities: "2026-03-22T07:22:08.869+07:00" "/xmlrpc.php" "140.235.1.164" "Chrome/95.5 Safari/535.55" show less	Web App Attack Brute-Force
🇩🇪 HandyTreff.de	2026-03-19 23:52:01 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -39.318 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -39.318 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4578.1 show less	Web App Attack Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia	2026-03-18 05:02:58 (3 months ago)	XML RPC Scan Activities: "2026-03-18T12:02:58.739+07:00" "/xmlrpc.php" "140.235.1.164" "Mozilla/5.0 ... show more XML RPC Scan Activities: "2026-03-18T12:02:58.739+07:00" "/xmlrpc.php" "140.235.1.164" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:142.0) Gecko/20100101 Firefox/142.0" show less	Web App Attack Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2026-03-17 07:43:27 (3 months ago)	XML RPC Scan Activities: "2026-03-17T14:43:27.837+07:00" "/xmlrpc.php" "140.235.1.164" "Chrome/92.2 ... show more XML RPC Scan Activities: "2026-03-17T14:43:27.837+07:00" "/xmlrpc.php" "140.235.1.164" "Chrome/92.2 Safari/532.52" show less	Web App Attack Brute-Force
🇩🇪 MusicLibrary	2026-03-15 18:11:18 (3 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇭🇺 kranem	2026-03-13 21:00:19 (3 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 26548 (PUREVOLTAGE-INC - PureVoltage Host ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 26548 (PUREVOLTAGE-INC - PureVoltage Hosting Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: /xmlrpc.php Timestamp: 2026-03-13T20:12:48Z User-Agent: AppleWebKit/536.36 (KHTML, like Gecko111) show less	Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia	2026-03-13 11:50:40 (3 months ago)	XML RPC Scan Activities: "2026-03-13T18:50:40.028+07:00" "/xmlrpc.php" "140.235.1.164" "Chrome/91.1 ... show more XML RPC Scan Activities: "2026-03-13T18:50:40.028+07:00" "/xmlrpc.php" "140.235.1.164" "Chrome/91.1 Safari/531.51" show less	Web App Attack Brute-Force
🇨🇭 backslash	2026-02-27 02:12:03 (3 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 nodepile	2026-02-13 20:35:03 (4 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/angel-eyes-by-umnitza/bmw-a ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/angel-eyes-by-umnitza/bmw-angel-eyes/6-series/umnitza-ice-lite-bmw-led-upgrade-angel-eyes-for-e39-e60-e65.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2702.70 Safari/537.36') show less	Exploited Host Web App Attack
🇪🇸 10dencehispahard SL	2026-01-16 06:18:01 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇸🇬 ANTI SCANNER	2026-01-08 19:13:19 (5 months ago)	Scanner : /xmlrpc.php	Web Spam
🇱🇻 garmtech.com	2025-12-21 17:06:22 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇨🇿 lp	2025-12-04 17:50:17 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 140.235.1.164 2025-12-04T17:48:02+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 140.235.1.164 2025-12-04T17:48:02+01:00 vpn Access-Reject 'user2' station: 140.235.1.164 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.181

🇿🇦 169.0.233.175

🇺🇸 147.185.132.106

🇺🇸 138.197.39.208

🇳🇱 89.248.167.131

🇺🇸 44.166.95.86

🇺🇸 205.210.31.90

🇮🇳 203.145.143.163

🇮🇳 182.95.60.146

🇷🇴 141.98.83.240

🇺🇸 137.184.228.138

🇺🇸 100.29.192.76

🇳🇱 91.92.40.5

🇺🇸 62.204.35.140

🇭🇰 58.176.64.176

🇳🇱 45.148.10.230

🇺🇸 44.56.46.36

🇨🇳 223.151.183.148

🇩🇪 188.245.84.238

🇨🇳 180.167.128.203