JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.1.166

140.235.1.166 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 27%: ?

27%

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.1.166

Whois 140.235.1.166

IP Abuse Reports for 140.235.1.166:

This IP address has been reported a total of 14 times from 13 distinct sources. 140.235.1.166 was first reported on February 18th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NetGuard	2026-05-28 00:09:30 (1 week ago)	#honeypot #netguard247 #ciscoasa Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timest ... show more #honeypot #netguard247 #ciscoasa Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-05-28T00:09:30.03+00:00 Attacker IP: 140.235.1.166 \| Port: N/A \| Country: United States Honeypot: ciscoasa \| Attack: unknown Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
🇬🇧 Oakley	2026-05-26 22:28:52 (1 week ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇨🇭 backslash	2026-05-18 15:12:03 (2 weeks ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-16 23:32:06 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 140.235.1.166 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 140.235.1.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 19:31:57.507934 2026] [security2:error] [pid 16406:tid 16406] [client 140.235.1.166:29029] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Horizon II/Stargo Black/Thumbs.db"] [unique_id "agj-bXNVaP0qKyrPzpMCbQAAAAs"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Horizon%20II/Stargo%20Black/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-05-04 12:07:04 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/chevrolet-corvette-05-13-xb ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/chevrolet-corvette-05-13-xb-led-headlights1.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4636.96 Safari/537.36') show less	Web App Attack Exploited Host
🇩🇪 MusicLibrary	2026-03-24 02:21:37 (2 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇧🇪 voormedia	2026-03-23 16:45:31 (2 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇷🇸 Smel	2026-03-21 03:04:02 (2 months ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇩🇪 MusicLibrary	2026-03-18 00:58:59 (2 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia	2026-03-15 05:53:41 (2 months ago)	XML RPC Scan Activities: "2026-03-15T12:53:41.963+07:00" "/xmlrpc.php" "140.235.1.166" "Mozilla/5.0 ... show more XML RPC Scan Activities: "2026-03-15T12:53:41.963+07:00" "/xmlrpc.php" "140.235.1.166" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:142.0) Gecko/20100101 Firefox/142.0" show less	Web App Attack Brute-Force
🇺🇸 island-freaks.com	2026-03-14 22:04:50 (2 months ago)	Attack Type: WordPress Exploit Bot attempt on /xmlrpc.php \| DNS 140.235.1.166 \| Agent: Chrome/92.2 S ... show more Attack Type: WordPress Exploit Bot attempt on /xmlrpc.php \| DNS 140.235.1.166 \| Agent: Chrome/92.2 Safari/532.52 show less	Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇪🇸 el-brujo	2026-02-24 12:10:48 (3 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Chrome/ ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Chrome/92.2 Safari/532.52 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-02-24T12:10:48Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 Penny Packer	2026-02-23 22:21:31 (3 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 nowyouknow	2026-02-18 09:11:48 (3 months ago)	(From [email protected]) Hi Team, I was looking through theadjustment.com and noticed a f ... show more (From [email protected]) Hi Team, I was looking through theadjustment.com and noticed a few areas where you could easily double your conversions. My team is offering a new program this month: We will completely rebuild your website in under 48 hours. The best part? Zero upfront cost. Additionally, we are including a Live AI Support Bot for your business at no additional charge. It handles customer questions while you sleep. Would you be interested in seeing a draft of what we can do for theadjustment.com? Best, QIK 10x Growth show less	Phishing Web Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.237.144.67

🇮🇳 223.184.219.121

🇷🇺 213.59.151.247

🇺🇸 195.184.76.217

🇰🇿 194.0.188.152

🇲🇽 186.96.145.241

🇰🇿 178.90.95.99

🇰🇿 178.89.206.179

🇺🇿 144.124.192.59

🇵🇭 103.105.213.208

🇵🇰 103.82.123.17

🇦🇿 82.194.31.46

🇧🇬 79.124.62.230

🇰🇬 46.251.194.225

🇮🇷 5.121.154.190

🇮🇳 223.238.116.10

🇰🇷 220.118.190.204

🇺🇸 195.184.76.92

🇺🇿 188.113.216.115

🇺🇿 188.113.206.97