JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 62.197.152.166

62.197.152.166 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 20%: ?

20%

ISP	Cyberzon S.A (Andorra)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209854
Domain Name	cyberzonehub.com
Country	🇫🇷 France
City	Marseille, Provence-Alpes-Cote d'Azur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 62.197.152.166

Whois 62.197.152.166

IP Abuse Reports for 62.197.152.166:

This IP address has been reported a total of 34 times from 18 distinct sources. 62.197.152.166 was first reported on February 9th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-12 20:17:59 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 62.197.152.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 62.197.152.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 16:17:52.164834 2026] [security2:error] [pid 2235642:tid 2235642] [client 62.197.152.166:0] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|nyemdr.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "nyemdr.com"] [uri "/images/stories/themes.php"] [unique_id "adv98IdmSJMqsm6QbWfP2AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-12 05:49:23 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 15:41:57 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 62.197.152.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 62.197.152.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 11:41:51.566448 2026] [security2:error] [pid 3099320:tid 3099345] [client 62.197.152.166:43960] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.sattraffic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.sattraffic.com"] [uri "/images/stories/themes.php"] [unique_id "adkaP11S0Miks08ZSGoGmwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-04-10 13:47:06 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇳🇿 Antinson	2026-04-09 15:30:50 (1 month ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-09 08:02:55 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 62.197.152.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 62.197.152.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 04:02:47.774366 2026] [security2:error] [pid 335321:tid 335321] [client 62.197.152.166:38212] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|manatawnycreekfarm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "manatawnycreekfarm.com"] [uri "/images/stories/themes.php"] [unique_id "adddJ6NH4vm3pbB-IusI-QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-04-09 07:41:23 (1 month ago)	[Thu Apr 09 14:41:11.991815 2026] [security2:error] [pid 493170:tid 140481473238720] [client 62.197. ... show more [Thu Apr 09 14:41:11.991815 2026] [security2:error] [pid 493170:tid 140481473238720] [client 62.197.152.166:55464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "image/heif" at REQUEST_HEADERS:Accept. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "460"] [id "440009"] [msg " Image Heif"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: text/html found within REQUEST_HEADERS:Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-maksimum/555560530-suhu-maksimum-harian-di-jawa-timur-tanggal-3-november-2023 HTTP/2.0 Request URI RAW = /index.php/informa..."] [hostname "staklim-malang.info"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-harian/suhu-maksimum/55556 ... show less	Email Spam Hacking
Anonymous	2026-04-08 15:05:19 (1 month ago)	File with malware-related file name - HTTP (Request)	Hacking
Anonymous	2026-04-08 10:55:25 (1 month ago)	WordPress/Woo probe	Web App Attack
🇩🇪 updown.io	2026-04-08 07:23:02 (1 month ago)	{"level":"info","ts":1775632971.1191316,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1775632971.1191316,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"62.197.152.166","remote_port":"54772","client_ip":"62.197.152.166","proto":"HTTP/1.1","method":"GET","host":"status.donationkiosk.net","uri":"/bless.php","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"],"Insecure-Flag":["1"]}},"bytes_read":0,"user_id":"","duration":0.000048492,"size":0,"status":308,"resp_headers":{"Location":["https://status.donationkiosk.net/bless.php"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}} {"level":"info","ts":1775632971.2329917,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"62.197.152.166","remote_port":"43733","client_ip":"62.197.152.166","proto":"HTTP/1.1","method":"GET","host":"status.donationkiosk.net","uri":"/O-Simple.php","headers":{"Insecure-Flag":["1"],"User-Agent":["Mozilla ... show less	DDoS Attack Web App Attack
🇺🇸 Xarcotic	2026-04-07 08:45:17 (2 months ago)	SSH login on honeypot.	Brute-Force SSH
🇳🇱 wlt-blocker	2026-04-06 17:13:31 (2 months ago)	Unauthorized access to webpage admin	Web App Attack
🇳🇱 Site.eu	2026-04-06 14:29:41 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 4server	2026-04-06 14:00:29 (2 months ago)	[MonApr0616:00:23.0319082026][security2:error][pid3920688:tid3920717][client62.197.152.166:0]ModSecu ... show more [MonApr0616:00:23.0319082026][security2:error][pid3920688:tid3920717][client62.197.152.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"modules/mod_simplefileuploadv1\\\\\\\\.3\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"640\"][id\"390746\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:KnownVulnerableJoomlaSimpleFileUploadv1.3Accessblocked\"][hostname\"tipicalonline.com\"][uri\"/modules/mod_simplefileuploadv1.3/elements/udd.php\"][unique_id\"adO8d5rTB7gkWlgKSepTVgAAAMw\"] show less	Hacking Web App Attack
🇫🇷 dynamix	2026-04-06 04:29:16 (2 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.33

🇺🇸 185.94.34.168

🇧🇷 177.27.76.210

🇺🇸 47.251.170.23

🇺🇸 40.77.167.7

🇳🇱 20.71.254.235

🇨🇳 220.250.52.111

🇺🇸 207.46.13.130

🇺🇸 195.184.76.171

🇷🇺 176.109.97.11

🇩🇪 167.94.145.16

🇺🇸 152.32.183.236

🇮🇪 128.251.36.118

🇨🇳 125.215.52.45

🇻🇳 103.167.89.163

🇧🇬 79.124.58.162

🇺🇸 66.240.236.116

🇳🇱 45.148.10.141

🇻🇳 14.235.68.84

🇫🇷 5.135.106.93