AbuseIPDB » 140.235.2.157
140.235.2.157
This IP was reported 9 times. Confidence of
Abuse
is 11% : ?
ISP
DirectBackup LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS26548
Domain Name
directbackup.co
Country
🇺🇸
United States of America
City
Seattle, Washington
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 140.235.2.157 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
140.235.2.157 was first reported on
October 23rd 2025 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
island-freaks.com
2026-04-22 09:52:12
(1 month ago)
Attack Type: WordPress Exploit Bot attempt on /wp-json/wp/v2/users | DNS 140.235.2.157 | Agent: Mozi ...
show more
Attack Type: WordPress Exploit Bot attempt on /wp-json/wp/v2/users | DNS 140.235.2.157 | Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
show less
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
nyt
2026-04-22 06:38:14
(1 month ago)
WP User Enumeration
Web App Attack
2026-04-22 04:57:57
(1 month ago)
140.235.2.157 - - [22/Apr/2026:06:57:52 +0200] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.goog ...
show more
140.235.2.157 - - [22/Apr/2026:06:57:52 +0200] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
mind5t0rm
2026-02-04 12:15:55
(4 months ago)
(XMLRPC) WP XMLPRC Attack 140.235.2.157 (US/United States/-): 3 in the last 3600 secs; Ports: *; Dir ...
show more
(XMLRPC) WP XMLPRC Attack 140.235.2.157 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 140.235.2.157 - - [04/Feb/2026:19:15:46 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4"
140.235.2.157 - - [04/Feb/2026:19:15:47 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/7.88.1"
140.235.2.157 - - [04/Feb/2026:19:15:48 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/8.6.0"
show less
Port Scan
🇸🇬
mypatricks
2025-12-07 07:15:27
(5 months ago)
140.235.2.157 | Port: 12758 | DNS: 140.235.2.157 2025-12-07T15:15:58+08:00 America/Los_Angeles | IPs ...
show more
140.235.2.157 | Port: 12758 | DNS: 140.235.2.157 2025-12-07T15:15:58+08:00 America/Los_Angeles | IPs Spam list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /cart/?fce02093b14ec79c8c242dd68650a517=1765091733&f880f368019f6=enabled | Ref: https://xxxxxx/cart/?b089f676d8a276921552727f03e1ec01=1763881950b | Country: US/United States/-08:00 IP City: SeaTac 9aa23b01bd63756b-SEA/Seattle, WA, United States Robots 3
show less
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack
🇱🇻
garmtech.com
2025-12-05 08:46:41
(6 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇺🇸
fbarela
2025-12-02 01:01:22
(6 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇱🇻
garmtech.com
2025-11-24 10:53:56
(6 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇱🇻
garmtech.com
2025-10-23 10:03:52
(7 months ago)
IM360 WAF: Attempt to upload malware
Hacking
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: