JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.235.3.212

140.235.3.212 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 0%: ?

ISP	DirectBackup LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	directbackup.co
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.235.3.212

Whois 140.235.3.212

IP Abuse Reports for 140.235.3.212:

This IP address has been reported a total of 4 times from 4 distinct sources. 140.235.3.212 was first reported on July 9th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2025-11-20 09:54:47 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -30.427 (Bad < -10 / Very Bad < -20) ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -30.427 (Bad < -10 / Very Bad < -20) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.820.17 show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2025-11-19 13:15:25 (6 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇩🇪 stinpriza	2025-08-20 00:36:38 (9 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-07-09 17:43:54 (10 months ago)	(mod_security) mod_security (id:210831) triggered by 140.235.3.212 (140-235-3-212.cloudairone.com): ... show more (mod_security) mod_security (id:210831) triggered by 140.235.3.212 (140-235-3-212.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 13:43:44.797529 2025] [security2:error] [pid 5395:tid 5395] [client 140.235.3.212:62911] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thechoiceint.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thechoiceint.com"] [uri "/webalizer/usage_202507.html"] [unique_id "aG6qUESfPWui6tGBB_w86AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 217.216.59.228

🇦🇷 186.158.182.21

🇸🇬 2404:6800:4003:c1a::120

🇺🇸 172.104.19.160

🇺🇸 162.216.150.111

🇸🇪 158.174.210.161

🇺🇸 91.230.168.170

🇸🇬 43.173.175.161

🇰🇷 43.155.188.157

🇺🇸 172.253.8.158

🇳🇬 105.116.7.8

🇮🇳 103.132.243.250

🇷🇴 80.94.95.43

🇺🇸 47.251.105.167

🇨🇳 45.126.120.53

🇺🇸 40.77.167.35

🇬🇧 194.32.120.148

🇺🇸 162.240.39.144

🇺🇸 162.216.149.187

🇨🇳 114.67.232.93