JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.1.76

140.235.1.76 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.1.76

Whois 140.235.1.76

IP Abuse Reports for 140.235.1.76:

This IP address has been reported a total of 11 times from 7 distinct sources. 140.235.1.76 was first reported on September 9th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-16 02:19:27 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 140.235.1.76 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 140.235.1.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 22:19:16.846391 2026] [security2:error] [pid 2297315:tid 2297315] [client 140.235.1.76:47811] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Ashton II Recliner/Havana Brown/Thumbs.db"] [unique_id "aeBHJN1A9OxnKV1Bd-0-vgAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Ashton%20II%20Recliner/Havana%20Brown/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 11:49:05 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 140.235.1.76 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 140.235.1.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 07:48:58.883734 2026] [security2:error] [pid 31521:tid 31521] [client 140.235.1.76:63813] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Himolla-ZeroStress-Recliner/Images/Chester/Thumbs.db"] [unique_id "abVLKsuUMaFYSqVQxPpZlAAAAAE"], referer: https://vitalitywebb.com/backstore/Himolla-ZeroStress-Recliner/Images/Chester/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 18:02:59 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 140.235.1.76 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 140.235.1.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 13:02:48.573736 2026] [security2:error] [pid 11145:tid 11145] [client 140.235.1.76:62319] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|trlservice.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "trlservice.com"] [uri "/"] [unique_id "aWvOyPvXL4WrJIPhulGCBAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-01-02 11:50:18 (5 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇬🇧 relianoid.com	2025-12-29 18:23:18 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇫🇷 masterguru	2025-12-23 11:02:18 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.1.76 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.1.76 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇺🇸 TPI-Abuse	2025-12-15 02:40:21 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 140.235.1.76 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 140.235.1.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 21:40:13.795451 2025] [security2:error] [pid 1601:tid 1601] [client 140.235.1.76:10697] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.powerastronomy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerastronomy.com"] [uri "/Runequest/doku.php"] [unique_id "aT91DbDyEUmxpkdVFqZCAQAAABM"], referer: http://www.powerastronomy.com/Runequest/doku.php?id=cat888_bet&do=register show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-11 01:18:07 (5 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.11 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.11 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-12-01 19:28:38 (6 months ago)	GlobalProtect login attempts with user bzzwil.	VPN IP Brute-Force
🇨🇭 backslash	2025-11-11 16:40:21 (6 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇨🇿 lp	2025-09-09 12:27:07 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 140.235.1.76 2025-09-09T13:55:13+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 140.235.1.76 2025-09-09T13:55:13+02:00 vpn Access-Reject 'vpnuser' station: 140.235.1.76 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 58.115.60.4

🇩🇪 192.109.200.220

🇬🇧 188.240.59.24

🇳🇱 176.65.149.180

🇮🇳 103.171.12.42

🇻🇳 103.6.234.155

🇺🇸 96.78.175.36

🇧🇷 45.164.115.86

🇬🇧 35.203.211.164

🇬🇧 31.14.254.26

🇬🇧 5.226.140.11

🇺🇸 205.210.31.86

🇺🇸 192.178.115.211

🇧🇷 191.53.12.84

🇹🇷 149.34.210.141

🇺🇸 142.251.214.174

🇺🇸 107.172.109.210

🇱🇹 81.30.98.49

🇺🇸 65.51.233.182

🇺🇸 35.173.38.202