JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.3.219

140.235.3.219 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.3.219

Whois 140.235.3.219

IP Abuse Reports for 140.235.3.219:

This IP address has been reported a total of 11 times from 9 distinct sources. 140.235.3.219 was first reported on October 12th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-02-12 05:24:37 (3 months ago)	Fail2Ban banned 140.235.3.219 for security violations in jail wp-armour. Log: 2026/02/12 05:24:36 [e ... show more Fail2Ban banned 140.235.3.219 for security violations in jail wp-armour. Log: 2026/02/12 05:24:36 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 140.235.3.219 \| Target: wplogin" , client: 140.235.3.219, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 mind5t0rm	2026-02-08 11:01:25 (3 months ago)	(XMLRPC) WP XMLPRC Attack 140.235.3.219 (US/United States/-): 3 in the last 3600 secs; Ports: ; Dir ... show more (XMLRPC) WP XMLPRC Attack 140.235.3.219 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 140.235.3.219 - - [08/Feb/2026:18:01:17 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4" 140.235.3.219 - - [08/Feb/2026:18:01:18 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/8.6.0" 140.235.3.219 - - [08/Feb/2026:18:01:19 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/8.6.0" show less	Port Scan
Anonymous	2026-01-30 23:25:31 (4 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2026.01.30 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2026.01.30 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2026-01-26 09:22:49 (4 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 Yawning Angel	2025-12-23 19:57:36 (5 months ago)	SSL VPN Brute-force, multiple attempts	Hacking Brute-Force
Anonymous	2025-12-22 01:07:27 (5 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.22 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.22 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 inspectorgdgt	2025-12-18 01:06:06 (5 months ago)	Failed login invalid user bruteforce attempt	Brute-Force SSH
Anonymous	2025-12-11 21:24:58 (5 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.11 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.11 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-11-27 16:09:32 (6 months ago)	GlobalProtect login attempts with user sera.	VPN IP Brute-Force
🇺🇸 fbarela	2025-10-16 09:00:17 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-10-12 07:01:03 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 140.235.3.219 (140-235-3-219.cloudairone.com): ... show more (mod_security) mod_security (id:210350) triggered by 140.235.3.219 (140-235-3-219.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 03:00:57.755552 2025] [security2:error] [pid 14894:tid 14894] [client 140.235.3.219:36269] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|callalbany.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "callalbany.com"] [uri "/"] [unique_id "aOtSKaitwBJmmg7MLSraTAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.107

🇺🇸 69.169.101.243

🇲🇾 49.124.148.19

🇳🇱 217.60.195.25

🇬🇧 193.176.29.17

🇬🇧 193.163.125.182

🇧🇴 190.129.122.12

🇬🇧 188.240.59.17

🇺🇸 172.59.116.247

🇺🇸 104.168.198.241

🇭🇰 103.230.240.59

🇫🇷 91.231.89.169

🇷🇺 89.169.1.154

🇩🇪 69.5.169.50

🇺🇸 54.167.223.174

🇺🇸 34.86.159.182

🇬🇧 31.14.254.126

🇮🇳 168.144.118.214

🇩🇪 69.5.169.223

🇸🇬 47.245.85.250