AbuseIPDB » 140.235.2.184
140.235.2.184
This IP was reported 9 times. Confidence of
Abuse
is 9% : ?
ISP
DirectBackup LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS26548
Domain Name
directbackup.co
Country
🇺🇸
United States of America
City
Seattle, Washington
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 140.235.2.184 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
140.235.2.184 was first reported on
August 21st 2025 , and the most recent report was
3 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
3 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
zynex
2026-05-15 16:02:33
(3 weeks ago)
URL Probing: /xmlrpc.php
Web App Attack
🇩🇪
4server
2026-05-02 07:28:46
(1 month ago)
[SatMay0209:28:36.6683532026][security2:error][pid469404:tid469488][client140.235.2.184:0]ModSecurit ...
show more
[SatMay0209:28:36.6683532026][security2:error][pid469404:tid469488][client140.235.2.184:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.gustotondo.ch\"][uri\"/xmlrpc.php\"][unique_id\"afWnpOZ2advSCir3rDwd6AAAANM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
ambor
2026-03-27 04:03:59
(2 months ago)
Honeypot triggered on tcpdata.com - Attempted to access /admin (admin_panel_probe). User-Agent: Mozi ...
show more
Honeypot triggered on tcpdata.com - Attempted to access /admin (admin_panel_probe). User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203
show less
Web App Attack
🇧🇷
hostseries
2026-02-23 13:47:10
(3 months ago)
Trigger: LF_DISTATTACK
Brute-Force
🇪🇸
Mugen
2026-02-17 20:51:02
(3 months ago)
Unauthorized VPN login attempts
Brute-Force
🇧🇪
voormedia
2026-01-10 00:41:14
(4 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇩🇪
stinpriza
2026-01-05 21:45:07
(5 months ago)
Web App Attack
Web App Attack
2026-01-03 11:26:07
(5 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2025-08-21 21:13:34
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 140.235.2.184 (140-235-2-184.cloudairone.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.2.184 (140-235-2-184.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 17:13:29.664381 2025] [security2:error] [pid 17068:tid 17068] [client 140.235.2.184:65143] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.televisonic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.televisonic.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "aKeL-ZpKA8acv59mMwcYrQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: