JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.1.12

140.235.1.12 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 16%: ?

16%

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.1.12

Whois 140.235.1.12

IP Abuse Reports for 140.235.1.12:

This IP address has been reported a total of 14 times from 10 distinct sources. 140.235.1.12 was first reported on September 8th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Roper123	2026-05-23 17:36:48 (2 weeks ago)	Web app exploits	Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 21:57:11 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 140.235.1.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 140.235.1.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 17:57:03.224488 2026] [security2:error] [pid 26773:tid 26852] [client 140.235.1.12:11443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwcmachining.com"] [uri "/wp-config.php.old"] [unique_id "ag9_rz-8jVUfDF2aZ51REAAAAkM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 14:50:48 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 140.235.1.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 140.235.1.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 10:50:36.489497 2026] [security2:error] [pid 16621:tid 16621] [client 140.235.1.12:20751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolcustomweddingproducts.com"] [uri "/wp-config.bak"] [unique_id "ag3KPKqLMGyyzu8Kbv_KIwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-05-17 03:30:02 (3 weeks ago)	ModSecurity rule 949110 triggered on dedicated. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-03-14 12:40:25 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 140.235.1.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 140.235.1.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 08:40:01.019827 2026] [security2:error] [pid 20418:tid 20418] [client 140.235.1.12:27843] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hansen II/Hansen II/Pampa Rouge/originals/Thumbs.db"] [unique_id "abVXIX4Nqfzx7DEgQfZBmQAAABc"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hansen%20II/Hansen%20II/Pampa%20Rouge/originals/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-17 14:03:55 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.17 is noted in report timestamp show less	Hacking Brute-Force
🇨🇭 backslash	2026-01-02 11:35:12 (5 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇱🇻 garmtech.com	2026-01-02 10:01:10 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇦🇺 MAGIC	2025-11-18 02:29:55 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 octageeks.com	2025-11-14 05:08:49 (6 months ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇨🇭 backslash	2025-11-11 16:40:21 (7 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 fbarela	2025-11-08 14:00:26 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-10-23 21:46:04 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 140.235.1.12 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 140.235.1.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 17:45:54.759270 2025] [security2:error] [pid 31019:tid 31019] [client 140.235.1.12:58447] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barigby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barigby.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPqiErS08VsPG2yqC4rVBgAAAAE"], referer: https://barigby.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-09-08 19:46:07 (9 months ago)	(From [email protected]) Ahoy, Picture this: Your next client thank-you or employee mo ... show more (From [email protected]) Ahoy, Picture this: Your next client thank-you or employee morale booster isn't just another boring email or gift card—it's a real message in a bottle, washed up from the shores of creativity! At https://BottleMeAMessage.com, we're bottling up joy, apologies, invites, and even business promos in adorable glass vessels that scream "I'm not your average swag!"Why settle for flat flyers when you can send invitations that float into hearts (starting at just $1.59 each)? Or DIY kits for your team-building shenanigans ($0.85 a pop—arrr, what a steal!)? Imagine your logo on a bottle saying, "Thanks for bottling up with us!" – it's comical, memorable, and guaranteed to spark office chatter (or pirate impressions).We've got personalized gifts from $24.99, perfect for holidays, occasions, or just because your business needs a splash of fun. No genies required—just quick shipping and endless customization to match your brand's vibe.Don't let this opportunity drift away! Check out h show less	Phishing Web Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.82

🇹🇼 116.59.8.106

🇺🇸 70.37.89.177

🇩🇪 2401:b140:2::92:201

🇺🇸 208.87.242.185

🇮🇳 202.159.221.146

🇧🇪 198.235.24.206

🇬🇧 194.50.235.146

🇦🇷 190.113.165.161

🇺🇸 162.216.149.241

🇺🇸 142.248.80.209

🇮🇩 110.139.55.253

🇺🇸 85.208.96.197

🇩🇪 69.5.169.242

🇨🇳 47.106.218.161

🇧🇷 45.174.220.205

🇺🇸 45.33.55.247

🇬🇧 31.14.254.79

🇷🇴 2.57.121.25

🇮🇩 210.57.216.130