JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.0.149

140.235.0.149 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.0.149

Whois 140.235.0.149

IP Abuse Reports for 140.235.0.149:

This IP address has been reported a total of 11 times from 9 distinct sources. 140.235.0.149 was first reported on July 18th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-05-14 18:16:13 (1 month ago)	(mod_security) mod_security (id:900210) triggered by 140.235.0.149 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:900210) triggered by 140.235.0.149 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-04-06 22:05:21 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 140.235.0.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 140.235.0.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 18:05:13.797322 2026] [security2:error] [pid 456938:tid 456938] [client 140.235.0.149:25781] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|zodiacwin.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "zodiacwin.com"] [uri "/"] [unique_id "adQuGZ_V6fm-vQlFCEsaiwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 09:51:59 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 140.235.0.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 140.235.0.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 05:51:51.529939 2026] [security2:error] [pid 13903:tid 13903] [client 140.235.0.149:14603] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|babylontravelone.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "babylontravelone.com"] [uri "/"] [unique_id "ac-Nt6tjfirr8k5CFwkZrQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-03-31 05:36:24 (2 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇫🇷 tilellit.pro	2026-02-09 23:58:31 (4 months ago)	Fail2Ban banned 140.235.0.149 for security violations in jail wp-armour. Log: 2026/02/09 23:58:31 [e ... show more Fail2Ban banned 140.235.0.149 for security violations in jail wp-armour. Log: 2026/02/09 23:58:31 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 140.235.0.149 \| Target: wplogin" , client: 140.235.0.149, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 [email protected]	2025-11-24 01:02:15 (6 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2025-11-24T01:02:15Z	Brute-Force
🇺🇸 [email protected]	2025-11-24 00:03:15 (6 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2025-11-24T00:03:15Z	Brute-Force
🇬🇧 Steve	2025-11-22 19:15:09 (6 months ago)	Abuse of XMLRPC	Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-17 16:50:57 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 Burayot	2025-07-30 01:25:46 (10 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 140.235.0.149 (US/United States/140 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 140.235.0.149 (US/United States/140-235-0-149.cloudairone.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 nowyouknow	2025-07-18 14:07:56 (11 months ago)	(From [email protected]) We have hacked your website https://minorchiropractic.com and ex ... show more (From [email protected]) We have hacked your website https://minorchiropractic.com and extracted your databases. How did this happen? Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server. What does this mean? We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your site https://minorchiropractic.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat techniques that we u show less	Phishing Web Spam

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.32.209.233

🇳🇱 89.21.67.184

🇪🇸 83.52.251.46

🇺🇸 52.167.144.201

🇮🇳 49.47.11.130

🇧🇪 34.78.66.66

🇮🇩 2402:8780:1028:1986:b038:3f3c:20e6:2d44

🇺🇸 195.184.76.165

🇬🇧 195.140.214.30

🇺🇸 158.94.187.219

🇩🇪 82.115.21.249

🇹🇷 81.213.111.221

🇺🇸 64.62.156.68

🇸🇬 43.98.201.146

🇨🇳 36.142.86.232

🇺🇸 20.124.84.235

🇩🇪 8.209.101.146

🇬🇧 185.247.137.195

🇯🇵 164.52.24.185

🇮🇩 163.7.12.183