JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.36.148.131

54.36.148.131 was found in our database!

This IP was reported 724 times. Confidence of Abuse is 0%: ?

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	hydrogen131-ext2.a.ahrefs.com
Domain Name	ovh.net
Country	🇫🇷 France
City	Roubaix, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 54.36.148.131 is an IP address from within our whitelist belonging to the subnet 54.36.148.0/23, which we identify as: "Ahrefs Crawler".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 54.36.148.131

Whois 54.36.148.131

IP Abuse Reports for 54.36.148.131:

This IP address has been reported a total of 724 times from 55 distinct sources. 54.36.148.131 was first reported on November 21st 2020, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hans Müller	2024-04-30 02:47:37 (2 years ago)	.	Bad Web Bot
Anonymous	2024-04-28 21:29:23 (2 years ago)	54.36.148.131 - - [28/Apr/2024:23:29:22 +0200] "GET /robots.txt HTTP/2.0" 200 106 "-" "Mozilla/5.0 ( ... show more 54.36.148.131 - - [28/Apr/2024:23:29:22 +0200] "GET /robots.txt HTTP/2.0" 200 106 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" show less	Bad Web Bot
🇩🇪 Hans Müller	2024-04-23 14:16:21 (2 years ago)	.	Bad Web Bot
🇩🇪 rh24	2024-04-09 07:35:50 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/Fr ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/France/hydrogen131-ext2.a.ahrefs.com) show less	Bad Web Bot
🇸🇬 Charles	2024-04-08 01:37:55 (2 years ago)	54.36.148.131 - - [08/Apr/2024:09:37:53 +0800] "GET /SpryAssets/SpryMenuBar.js HTTP/1.1" 200 6611 "- ... show more 54.36.148.131 - - [08/Apr/2024:09:37:53 +0800] "GET /SpryAssets/SpryMenuBar.js HTTP/1.1" 200 6611 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH
🇩🇪 rh24	2024-04-05 16:26:08 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/Fr ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/France/hydrogen131-ext2.a.ahrefs.com) show less	Bad Web Bot
🇩🇪 rh24	2024-04-01 15:54:28 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/Fr ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/France/hydrogen131-ext2.a.ahrefs.com) show less	Bad Web Bot
🇩🇪 Hans Müller	2024-04-01 05:27:49 (2 years ago)	.	Bad Web Bot
🇩🇪 rh24	2024-03-24 21:26:40 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/Fr ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/France/hydrogen131-ext2.a.ahrefs.com) show less	Bad Web Bot
🇪🇸 Secure&IT	2024-03-23 01:59:07 (2 years ago)	Attack detected	Port Scan
🇮🇪 Jim Keir	2024-03-18 01:53:40 (2 years ago)	2024-03-18 01:53:40 54.36.148.131 Blacklisted IP accessed //robots.txt/	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2024-03-08 01:18:10 (2 years ago)	[Fri Mar 08 08:18:05.445810 2024] [security2:error] [pid 107752:tid 134387951732288] [client 54.36.1 ... show more [Fri Mar 08 08:18:05.445810 2024] [security2:error] [pid 107752:tid 134387951732288] [client 54.36.148.131:30859] [client 54.36.148.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "187"] [id "913102"] [msg "Found User-Agent associated with web crawler/bot"] [data "Matched Data: AhrefsBot found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; ahrefsbot/7.0; +http://ahrefs.com/robot/) request_line = GET /robots.txt HTTP/2.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-crawler"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "ZepnTf1vzuIYqp8hWrhfPgAAqgY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] ... show less	Hacking Web App Attack
🇩🇪 rh24	2024-03-05 23:44:23 (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/Fr ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.36.148.131 (FR/France/hydrogen131-ext2.a.ahrefs.com) show less	Bad Web Bot
🇩🇪 Hans Müller	2024-03-05 01:26:54 (2 years ago)	.	Bad Web Bot
🇺🇸 TPI-Abuse	2024-02-20 12:20:08 (2 years ago)	(mod_security) mod_security (id:210381) triggered by 54.36.148.131 (hydrogen131-ext2.a.ahrefs.com): ... show more (mod_security) mod_security (id:210381) triggered by 54.36.148.131 (hydrogen131-ext2.a.ahrefs.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 20 07:20:00.541980 2024] [security2:error] [pid 27443] [client 54.36.148.131:48041] [client 54.36.148.131] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|pobanz.com\|F\|4"] [data "REQUEST_URI=/images/christmas17/03/QO+leG6WTnCdLY+83YO%Ag_thumb_2d11.jpg"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pobanz.com"] [uri "/images/christmas17/03/QO+leG6WTnCdLY+83YO%Ag_thumb_2d11.jpg"] [unique_id "ZdSY8KOOP27b7PGR41hGRAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 724 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 218.189.198.198

🇱🇧 185.142.40.70

🇺🇸 172.253.91.155

🇮🇩 103.181.254.19

🇷🇴 92.118.39.77

🇳🇱 91.92.40.151

🇮🇳 68.183.92.206

🇺🇸 35.222.117.243

🇨🇳 8.153.100.14

🇺🇸 2400:cb00:988:1000:83bb:772d:dca4:fb00

🇰🇷 221.155.47.189

🇺🇿 202.79.190.219

🇺🇦 195.62.36.37

🇺🇸 191.96.165.251

🇵🇾 181.123.136.11

🇨🇳 124.205.141.215

🇮🇩 103.117.31.73

🇺🇸 64.23.214.73

🇳🇱 45.148.10.151

🇮🇹 37.159.108.124