JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.1.81

140.235.1.81 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 16%: ?

16%

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.1.81

Whois 140.235.1.81

IP Abuse Reports for 140.235.1.81:

This IP address has been reported a total of 12 times from 7 distinct sources. 140.235.1.81 was first reported on November 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-14 01:46:20 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 140.235.1.81 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 140.235.1.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:46:10.583494 2026] [security2:error] [pid 30045:tid 30045] [client 140.235.1.81:54665] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|stmaarten-boatcharters.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stmaarten-boatcharters.com"] [uri "/_adminer.php"] [unique_id "ai4H4lgSBiPYSbsYqTtCHAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-13 18:28:13 (2 days ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection
🇺🇸 TPI-Abuse	2026-06-13 18:26:41 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 140.235.1.81 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 140.235.1.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 14:26:27.962613 2026] [security2:error] [pid 5828:tid 5828] [client 140.235.1.81:44137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|register-yacht-uk.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "register-yacht-uk.com"] [uri "/adminer.php"] [unique_id "ai2g0zqWToVYo7GhdXmw5AAAAAc"], referer: https://register-yacht-uk.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tilellit.pro	2026-02-12 04:57:18 (4 months ago)	Fail2Ban banned 140.235.1.81 for security violations in jail wp-armour. Log: 2026/02/12 04:57:17 [er ... show more Fail2Ban banned 140.235.1.81 for security violations in jail wp-armour. Log: 2026/02/12 04:57:17 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 140.235.1.81 \| Target: wplogin" , client: 140.235.1.81, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
Anonymous	2026-01-21 22:21:53 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-27 12:51:03 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.27 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:01:56 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.1.81 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.1.81 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇱🇻 garmtech.com	2025-12-22 14:02:46 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 inspectorgdgt	2025-12-18 01:06:06 (5 months ago)	Failed login invalid user bruteforce attempt	Brute-Force SSH
Anonymous	2025-12-11 21:03:37 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.11 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.11 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2025-11-26 20:49:18 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 fbarela	2025-11-01 18:00:03 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.12

🇺🇸 205.210.31.6

🇺🇸 198.199.122.86

🇨🇳 182.204.179.243

🇮🇳 182.95.186.66

🇨🇳 101.126.81.18

🇷🇴 92.118.39.62

🇮🇳 59.98.148.5

🇰🇿 2.135.146.53

🇮🇳 206.183.111.36

🇺🇸 173.255.223.62

🇺🇸 162.216.150.246

🇺🇸 91.230.168.231

🇳🇱 91.92.40.204

🇬🇧 89.34.96.151

🇷🇴 80.94.92.206

🇺🇸 216.25.89.107

🇲🇽 189.147.19.238

🇺🇸 186.233.184.67

🇧🇷 177.155.133.175