JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.3.159

140.235.3.159 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 3%: ?

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.3.159

Whois 140.235.3.159

IP Abuse Reports for 140.235.3.159:

This IP address has been reported a total of 13 times from 10 distinct sources. 140.235.3.159 was first reported on April 23rd 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-09-17 06:41:10 (1 hour ago)	140.235.3.159 - - [17/Sep/2026:08:41:09 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 7796 "https ... show more 140.235.3.159 - - [17/Sep/2026:08:41:09 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 7796 "https://www.primobio.it/capelli-gonfissimi-ecco-il-rimedio-naturale-che-fa-per-te/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Mugen	2026-02-18 04:13:37 (6 months ago)	Unauthorized VPN login attempts	Brute-Force
🇱🇻 garmtech.com	2026-01-26 20:06:49 (7 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:11 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 BPS-StatisticsIndonesia	2025-12-26 14:54:07 (8 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 xpto	2025-12-24 23:49:32 (8 months ago)	Blocked for probing for web application vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-09-13 19:09:17 (1 year ago)	(mod_security) mod_security (id:210350) triggered by 140.235.3.159 (140-235-3-159.cloudairone.com): ... show more (mod_security) mod_security (id:210350) triggered by 140.235.3.159 (140-235-3-159.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 15:09:13.831847 2025] [security2:error] [pid 7655:tid 7655] [client 140.235.3.159:61519] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arlan-associates.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arlan-associates.com"] [uri "/"] [unique_id "aMXBWbyVEC-mwYLbMH_ICgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-09 17:43:50 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 140.235.3.159 (140-235-3-159.cloudairone.com): ... show more (mod_security) mod_security (id:210831) triggered by 140.235.3.159 (140-235-3-159.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 13:43:44.285020 2025] [security2:error] [pid 5230:tid 5230] [client 140.235.3.159:20357] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thechoiceint.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thechoiceint.com"] [uri "/webalizer/usage_202507.html"] [unique_id "aG6qUBPefZ0TS63Hu7pUWgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-05-03 00:09:41 (1 year ago)	(From [email protected]) Dear Madam, Is your team frequently on the road for busines ... show more (From [email protected]) Dear Madam, Is your team frequently on the road for business? A lot of businesses still pay unnecessarily high amounts on roaming fees. We offer a smart solution with global eSIM plans — fully digital, ready in minutes, and with savings of up to 85%. Ideal for remote teams. Find out more: https://e-simworldwide.com Kind regards, e-SIM Worldwide show less	Phishing Web Spam
🇨🇭 backslash	2025-04-29 15:35:07 (1 year ago)	block ruleset 1E8A9918B1655D0828F2EEF05553DD2681055C9A	Web Spam
🇺🇸 nowyouknow	2025-04-27 15:28:07 (1 year ago)	(From [email protected]) Dear Business Owner, Are you regularly traveling for business? M ... show more (From [email protected]) Dear Business Owner, Are you regularly traveling for business? Many companies still spend a lot on roaming fees. We offer a cost-effective solution with international eSIM plans — no physical SIM card needed, ready in minutes, and with savings of up to 85%. Perfect for digital nomads. Discover how it works: https://e-simworldwide.com Kind regards, e-SIM Worldwide show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-04-24 13:47:56 (1 year ago)	(From [email protected]) Dear Madam, Do you happen to be regularly working abroad for bu ... show more (From [email protected]) Dear Madam, Do you happen to be regularly working abroad for business? Many independent professionals still pay unnecessarily high amounts on roaming fees. We offer a cost-effective solution with international eSIM plans — fully digital, instantly activated, and cutting your roaming costs drastically. Perfect for digital nomads. Discover how it works: https://e-simworldwide.com Kind regards, e-SIM Worldwide show less	Phishing Web Spam
🇺🇸 oncord	2025-04-23 12:19:53 (1 year ago)	Form spam	Web Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇪 213.42.31.237

🇳🇱 185.226.197.50

🇰🇷 182.31.209.50

🇵🇷 173.215.224.87

🇿🇦 160.119.49.113

🇨🇳 116.179.33.14

🇳🇱 91.92.42.78

🇩🇪 63.181.131.118

🇩🇪 43.228.157.183

🇷🇴 2.57.122.150

🇧🇪 198.235.24.245

🇧🇴 190.186.29.213

🇮🇹 185.197.8.95

🇺🇸 173.214.163.142

🇫🇮 171.22.114.108

🇧🇷 170.150.97.186

🇳🇱 160.119.71.92

🇹🇭 119.42.89.19

🇨🇦 104.207.60.129

🇻🇳 103.167.91.224