JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.0.65

140.235.0.65 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 13%: ?

13%

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.0.65

Whois 140.235.0.65

IP Abuse Reports for 140.235.0.65:

This IP address has been reported a total of 11 times from 9 distinct sources. 140.235.0.65 was first reported on July 28th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-04 13:44:54 (16 hours ago)	Fail2Ban banned 140.235.0.65 for security violations in jail wp-armour. Log: 2026/06/04 13:44:54 [er ... show more Fail2Ban banned 140.235.0.65 for security violations in jail wp-armour. Log: 2026/06/04 13:44:54 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 140.235.0.65 \| Target: wplogin" , client: 140.235.0.65, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-05-19 17:49:08 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 140.235.0.65 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 140.235.0.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 13:49:01.442838 2026] [security2:error] [pid 30377:tid 30377] [client 140.235.0.65:61115] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ssion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ssion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agyije7twcRMYfBdeKdLdQAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tilellit.pro	2026-05-19 07:42:43 (2 weeks ago)	Fail2Ban banned 140.235.0.65 for security violations in jail wp-armour. Log: 2026/05/19 07:42:42 [er ... show more Fail2Ban banned 140.235.0.65 for security violations in jail wp-armour. Log: 2026/05/19 07:42:42 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 140.235.0.65 \| Target: wplogin" , client: 140.235.0.65, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇩🇪 london2038.com	2026-03-18 21:28:24 (2 months ago)	Detected by WP fail2ban 2026-03-18T22:28:18.937336+01:00 wordpress: Authentication attempt from 140. ... show more Detected by WP fail2ban 2026-03-18T22:28:18.937336+01:00 wordpress: Authentication attempt from 140.235.0.65 show less	Brute-Force Web App Attack
🇩🇪 HandyTreff.de	2026-03-13 00:49:47 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.984 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.984 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.205.13 show less	Web App Attack Bad Web Bot
Anonymous	2026-01-21 13:51:00 (4 months ago)	Brute force on VPN	Brute-Force Bad Web Bot
🇨🇭 backslash	2026-01-06 02:30:22 (4 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇫🇷 masterguru	2025-12-23 11:06:10 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.0.65 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.0.65 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2025-12-21 14:17:05 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇨🇭 backslash	2025-11-12 01:05:50 (6 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 ipblock.com	2025-07-28 17:12:00 (10 months ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.37

🇺🇸 104.236.83.40

🇺🇸 91.230.168.251

🇰🇷 121.136.93.86

🇵🇱 57.128.214.238

🇬🇧 35.203.211.209

🇬🇧 35.203.211.175

🇺🇸 31.170.166.116

🇻🇳 14.248.82.58

🇨🇳 8.154.0.104

🇸🇪 195.178.191.5

🇬🇧 185.166.43.93

🇵🇾 181.85.210.239

🇨🇳 101.96.195.62

🇱🇹 81.30.98.142

🇮🇳 68.233.116.124

🇺🇸 52.20.198.190

🇺🇸 20.64.104.155

🇻🇳 14.177.234.24

🇩🇪 213.209.159.142