JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.171.149

140.235.171.149 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 8%: ?

ISP	SharePolicy LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	sharepolicy.net
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.171.149

Whois 140.235.171.149

IP Abuse Reports for 140.235.171.149:

This IP address has been reported a total of 12 times from 10 distinct sources. 140.235.171.149 was first reported on October 23rd 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-05-28 12:29:43 (3 weeks ago)	Fail2Ban banned 140.235.171.149 for security violations in jail wp-armour. Log: 2026/05/28 12:29:43 ... show more Fail2Ban banned 140.235.171.149 for security violations in jail wp-armour. Log: 2026/05/28 12:29:43 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 140.235.171.149 \| Target: wplogin" , client: 140.235.171.149, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇪🇸 sshtmp	2026-05-20 03:31:20 (1 month ago)	[AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 1 \| First: 2026-05-20T05:31:20+0 ... show more [AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 1 \| First: 2026-05-20T05:31:20+02:00 \| Last: 2026-05-20T05:31:20+02:00 Samples: POST /xmlrpc.php [200] show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 02:19:38 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 140.235.171.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 140.235.171.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 22:19:32.057206 2026] [security2:error] [pid 2297874:tid 2297874] [client 140.235.171.149:32217] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Longhorn II/Havana Brown/Thumbs.db"] [unique_id "aeBHNB67FIgcNi0TieGLRQAAAAw"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Longhorn%20II/Havana%20Brown/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ANTI SCANNER	2026-03-26 01:02:55 (2 months ago)	Scanner : /wp-login.php	Web Spam
🇨🇭 backslash	2026-03-11 08:42:08 (3 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇫🇷 tilellit.pro	2026-02-12 09:14:23 (4 months ago)	Fail2Ban banned 140.235.171.149 for security violations in jail wp-armour. Log: 2026/02/12 09:14:23 ... show more Fail2Ban banned 140.235.171.149 for security violations in jail wp-armour. Log: 2026/02/12 09:14:23 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 140.235.171.149 \| Target: wplogin" , client: 140.235.171.149, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇨🇭 backslash	2026-01-02 12:00:25 (5 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇫🇷 masterguru	2025-12-23 11:04:46 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.171.149 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.171.149 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 HandyTreff.de	2025-12-20 20:20:19 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -22.094 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -22.094 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2111.4 show less	Bad Web Bot Web App Attack
Anonymous	2025-12-18 08:07:14 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.18 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 fbarela	2025-11-21 11:00:25 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇱🇻 garmtech.com	2025-10-23 16:38:37 (7 months ago)	IM360 WAF: Attempt to upload malware	Hacking

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.77.201.34

🇪🇸 5.182.83.231

🇺🇸 2a04:c300:400::19b

🇺🇸 209.85.222.170

🇸🇬 194.5.82.131

🇸🇬 194.5.82.125

🇳🇱 185.223.235.44

🇨🇳 182.244.0.150

🇲🇾 180.73.200.163

🇺🇸 173.239.211.10

🇺🇸 172.203.134.70

🇺🇸 170.203.16.48

🇮🇳 167.71.239.213

🇸🇬 161.118.237.181

🇵🇰 153.117.13.143

🇸🇬 152.32.218.149

🇺🇸 146.19.44.195

🇧🇷 143.202.104.13

🇻🇳 103.172.236.241

🇳🇱 94.198.190.87