AbuseIPDB » 62.3.0.234
62.3.0.234
This IP was reported 10 times. Confidence of
Abuse
is 31% : ?
ISP
Elisteka UAB
Usage Type
Data Center/Web Hosting/Transit
ASN
AS35830
Domain Name
finegroupservers.com
Country
🇱🇹
Lithuania
City
Klaipeda, Klaipeda County
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 62.3.0.234 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
62.3.0.234 was first reported on
September 22nd 2024 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
Shadymint
2026-06-15 10:16:53
(1 day ago)
cms login attempt
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 23:58:44
(2 days ago)
WordPress login attempt
Brute-Force
🇺🇸
kosada.com
2026-06-09 13:43:58
(1 week ago)
Web password guessing
Brute-Force
🇺🇸
Jason Howell
2026-06-09 05:51:07
(1 week ago)
62.3.0.234 - - [09/Jun/2026:00:24:01 -0500] "GET /wp-login.php HTTP/1.1" 200 5920 "https://www.googl ...
show more
62.3.0.234 - - [09/Jun/2026:00:24:01 -0500] "GET /wp-login.php HTTP/1.1" 200 5920 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
62.3.0.234 - - [09/Jun/2026:00:24:02 -0500] "POST /wp-login.php HTTP/1.1" 200 6282 "https://tatpl-traffic.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
62.3.0.234 - - [09/Jun/2026:00:24:02 -0500] "GET /wp-admin/ HTTP/1.1" 302 4204 "https://tatpl-traffic.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
62.3.0.234 - - [09/Jun/2026:00:24:03 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.tatpl-traffic.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 8081 "https://tatpl-traffic.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
62.3.0.234 - - [09/Jun/2026:00:51:07 -0
...
show less
Web App Attack
🇺🇸
kosada.com
2026-05-26 10:21:41
(3 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-12 16:24:21
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 62.3.0.234 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 62.3.0.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 12:24:06.138109 2026] [security2:error] [pid 17552:tid 17552] [client 62.3.0.234:50949] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hazeltrane.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hazeltrane.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agNUJgKFOn1Mquu31wwZFwAAABc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-09-04 21:25:07
(9 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 62.3.0.234
2025-09-04T22:04:27+02:00 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 62.3.0.234
2025-09-04T22:04:27+02:00 vpn Access-Reject 'computer' station: 62.3.0.234 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-08-14 10:52:20
(10 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 62.3.0.234
2025-08-14T11:55:17+02:00 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 62.3.0.234
2025-08-14T11:55:17+02:00 vpn Access-Reject 'fgreber' station: 62.3.0.234 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-05-10 10:49:22
(1 year ago)
(mod_security) mod_security (id:210410) triggered by 62.3.0.234 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210410) triggered by 62.3.0.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 10 06:49:11.933658 2025] [security2:error] [pid 1400622:tid 1400622] [client 62.3.0.234:34985] [client 62.3.0.234] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:page outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||smogsandiego.com|F|3"] [data "ARGS:page=limit-login-attempts1/**/UNIOUNIONN/**/SELESELECTCT/**/UsEr,PaSsWoRd/**/FROFROMM/**/UsErS/**/WHEWHERERE/**/iD LIKE 1\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "smogsandiego.com"] [uri "/wp-admin/admin.php"] [unique_id "aB8vJ-SeB8FEA8Re65eOVQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-22 06:55:07
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: