JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 62.204.35.252

62.204.35.252 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	BlueVPS OU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62005
Domain Name	bluevps.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 62.204.35.252

Whois 62.204.35.252

IP Abuse Reports for 62.204.35.252:

This IP address has been reported a total of 37 times from 10 distinct sources. 62.204.35.252 was first reported on April 12th 2024, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2025-07-19 03:08:10 (11 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 backslash	2025-06-20 17:45:06 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇦🇺 MAGIC	2025-06-19 10:07:36 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2025-06-18 17:50:08 (1 year ago)	WAF: Old style account creation and modification in Joomla! 2- wsit	Email Spam Brute-Force
🇺🇸 TPI-Abuse	2025-05-06 04:47:51 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 62.204.35.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 62.204.35.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 00:47:43.439951 2025] [security2:error] [pid 586332:tid 586332] [client 62.204.35.252:34245] [client 62.204.35.252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Kendall 4733/Thumbs.db"] [unique_id "aBmUbxFaKsWYvLdzWy90BgAAABU"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Kendall%204733/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-05 10:00:20 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 62.204.35.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 62.204.35.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 05:00:08.937130 2025] [security2:error] [pid 32184:tid 32184] [client 62.204.35.252:32553] [client 62.204.35.252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Cinna 8028/Thumbs.db"] [unique_id "Z8ggqK26ea3J4p_8QtIZMAAAAAc"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Cinna%208028/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-17 19:00:57 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇷🇺 sms.ru	2024-09-28 06:55:04 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
Anonymous	2024-09-10 08:22:22 (1 year ago)	VPN Authentication Brute Force	Brute-Force
🇺🇸 Bryan Lemas	2024-06-14 09:21:38 (2 years ago)	"Attempts to brute force our VPN"	Brute-Force
🇺🇸 lostswordfish.com	2024-06-12 02:06:00 (2 years ago)		Brute-Force SSH
🇺🇸 lostswordfish.com	2024-06-11 02:05:55 (2 years ago)		Brute-Force SSH
🇺🇸 lostswordfish.com	2024-06-09 21:05:49 (2 years ago)		Brute-Force SSH
🇺🇸 lostswordfish.com	2024-06-08 21:05:46 (2 years ago)		Brute-Force SSH
🇺🇸 lostswordfish.com	2024-06-07 17:05:46 (2 years ago)		Brute-Force SSH

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 109.105.210.57

🇺🇿 62.164.148.87

🇺🇸 2600:1f18:3120:f501:9092:fcc8:e760:a862

🇺🇸 216.25.89.152

🇹🇼 198.235.24.80

🇫🇮 147.185.133.253

🇺🇸 147.185.132.250

🇺🇸 147.185.132.92

🇪🇸 82.223.97.204

🇺🇸 44.79.12.71

🇨🇳 14.103.120.70

🇯🇵 8.216.5.224

🇳🇱 213.177.179.12

🇲🇦 160.176.136.22

🇫🇮 147.185.133.178

🇺🇸 65.191.211.33

🇺🇸 65.49.139.223

🇩🇪 64.89.163.156

🇺🇸 20.127.185.37

🇧🇪 198.235.24.232