JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.2.84

140.235.2.84 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 5%: ?

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.2.84

Whois 140.235.2.84

IP Abuse Reports for 140.235.2.84:

This IP address has been reported a total of 8 times from 8 distinct sources. 140.235.2.84 was first reported on July 30th 2025, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-03 23:46:27 (20 minutes ago)	(mod_security) mod_security (id:220150) triggered by 140.235.2.84 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:220150) triggered by 140.235.2.84 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:44:19.419811 2026] [security2:error] [pid 28394:tid 28394] [client 140.235.2.84:55153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\\\\\/)?select)" at ARGS:fid. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|powerkiteforum.com\|F\|2"] [data ")//and//(1896575216=1896575216//union//all//select//null,null,'enalnaoonxmtynnigatcwxkicnivwgjl'--/*/3g0aal"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "apoGUxCs23Z8bgRxa4VNBgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ANTI SCANNER	2026-05-15 00:32:45 (3 months ago)	Scanner : /xmlrpc.php	Web Spam
Anonymous	2026-01-29 20:54:05 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.29 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.29 is noted in report timestamp show less	Hacking Brute-Force
🇪🇸 el-brujo	2025-12-18 05:59:28 (8 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: PUREVOLTAGE-INC Country: US Method: GET Timestamp: 2025-12-18T05:59:28Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇨🇭 Zeprax	2025-12-17 19:34:03 (8 months ago)	DDoS Attack Layer 7	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-12-09 20:27:28 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇿 lp	2025-11-28 19:23:27 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 140.235.2.84 2025-11-28T19:16:31+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 140.235.2.84 2025-11-28T19:16:31+01:00 vpn Access-Reject 'dima' station: 140.235.2.84 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇮🇩 Burayot	2025-07-30 04:59:49 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 140.235.2.84 (US/United States/140- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 140.235.2.84 (US/United States/140-235-2-84.cloudairone.com): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.71.82.58

172.18.130.72

🇺🇸 162.216.149.91

🇺🇸 146.190.41.214

🇳🇱 93.123.109.6

🇺🇸 47.47.181.146

🇨🇦 34.95.28.12

🇺🇸 20.115.99.68

🇺🇸 12.182.125.210

🇺🇸 2a03:2880:f802::

🇨🇦 207.102.243.78

192.168.75.227

🇨🇳 175.167.160.194

🇺🇸 165.154.206.157

🇺🇸 162.216.149.87

🇺🇸 159.223.173.125

🇮🇳 128.185.194.162

🇮🇳 117.195.68.51

100.93.195.142

100.79.213.162