JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.2.80

140.235.2.80 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.2.80

Whois 140.235.2.80

IP Abuse Reports for 140.235.2.80:

This IP address has been reported a total of 12 times from 7 distinct sources. 140.235.2.80 was first reported on May 2nd 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-01-05 00:04:27 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇬🇧 relianoid.com	2025-12-18 13:07:22 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇱🇻 garmtech.com	2025-12-18 04:42:44 (5 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇺🇸 oncord	2025-12-16 22:16:37 (5 months ago)	Form spam	Web Spam
🇳🇱 pixelXp	2025-12-16 20:28:00 (5 months ago)	Score:112.14, Reason:10 (Web Spam), Via: www.pixelxp.nl/contact.html, Message: hey br / br / w ... show more Score:112.14, Reason:10 (Web Spam), Via: www.pixelxp.nl/contact.html, Message: hey br / br / we are a financial services and advisory firm mandated by our investors to seek business opportunities and projects for possible funding and debt capital financing br / br / please note that our investors are from the gulf region they intend to invest in viable business ventures or projects that you are currently executing or plan to embark upon as a means of expanding your their global portfolio br / br / we are eager to have more discussions on this subject in any way you believe suitable br / br / please get in touch with me at my direct email jaralla nassar@dejaconsulting online br / br / looking forward to working with you br / br / regards br / mr nassar jaralla al-marri br / financial advisor br / dejla consulting llc br / please reply to jaralla nassar@dejaconsulting online br / br / let's turn your ideas into reality show less	Web Spam
🇱🇻 garmtech.com	2025-12-04 03:47:27 (6 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-47.140.235.2.80.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-47.140.235.2.80.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇹 Evag Touf	2025-11-21 21:10:53 (6 months ago)	(mod_security) mod_security triggered on hostname [redacted] 140.235.2.80 (US/United States/-)	SQL Injection
🇦🇺 oncord	2025-11-19 13:58:49 (6 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-11-13 08:06:02 (6 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-10-23 14:19:31 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 140.235.2.80 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 140.235.2.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 10:19:25.250705 2025] [security2:error] [pid 9832:tid 9832] [client 140.235.2.80:23289] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPo5bUjIsNia0rWaI-e-HgAAABM"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 [email protected]	2025-10-17 00:03:50 (7 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2025-10-17T00:03:50Z	Brute-Force
🇺🇸 TPI-Abuse	2025-05-02 13:16:00 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 140.235.2.80 (zlfhqqwawxuv.ajyalbeauty.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 140.235.2.80 (zlfhqqwawxuv.ajyalbeauty.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 02 09:15:55.840361 2025] [security2:error] [pid 2457401:tid 2457805] [client 140.235.2.80:54343] [client 140.235.2.80] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aldexgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aldexgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aBTFi8lXEKQMfc_5VMl3dwAAARA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.250.11.56

🇩🇪 167.94.146.33

🇨🇳 121.28.170.66

🇺🇸 66.132.195.15

🇨🇳 14.103.34.252

🇩🇪 213.209.159.226

🇺🇸 172.208.24.40

🇸🇬 172.71.81.86

🇧🇷 168.181.244.208

🇺🇸 142.93.4.183

🇺🇸 130.131.15.86

🇩🇪 130.12.182.66

🇮🇳 117.247.190.25

🇨🇳 115.191.32.57

🇫🇷 104.23.225.113

🇩🇪 91.217.249.193

🇫🇷 85.217.140.35

🇩🇪 69.5.169.198

🇺🇸 64.62.197.198

🇻🇳 27.71.84.159