AbuseIPDB » 54.36.148.13

54.36.148.13 was found in our database!

This IP was reported 719 times. Confidence of Abuse is 0%: ?

ISP	OVH SAS
Usage Type	Search Engine Spider
Hostname(s)	hydrogen013-ext2.a.ahrefs.com
Domain Name	ovh.com
Country	France
City	Roubaix, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Important Note: 54.36.148.13 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 54.36.148.13

Whois 54.36.148.13

IP Abuse Reports for 54.36.148.13:

This IP address has been reported a total of 719 times from 65 distinct sources. 54.36.148.13 was first reported on November 23rd 2020, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-09-17 00:55:40 (22 hours ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Mendip_Defender	2024-09-16 16:04:24 (1 day ago)	54.36.148.13 - - [16/Sep/2024:17:04:32 +0100] "GET /guidingextra.html HTTP/1.0" 200 761 "-" "Mozilla ... show more54.36.148.13 - - [16/Sep/2024:17:04:32 +0100] "GET /guidingextra.html HTTP/1.0" 200 761 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Bad Web Bot
Anonymous	2024-09-15 00:15:39 (2 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
INTEQ	2024-09-13 14:51:18 (4 days ago)	Web attack from 54.36.148.13	Web App Attack
Mendip_Defender	2024-09-13 02:20:08 (4 days ago)	54.36.148.13 - - [13/Sep/2024:03:20:15 +0100] "GET /robots.txt HTTP/1.0" 200 928 "-" "Mozilla/5.0 (c ... show more54.36.148.13 - - [13/Sep/2024:03:20:15 +0100] "GET /robots.txt HTTP/1.0" 200 928 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Bad Web Bot
TPI-Abuse	2024-09-12 23:29:31 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 54.36.148.13 (hydrogen013-ext2.a.ahrefs.com): 1 ... show more(mod_security) mod_security (id:210730) triggered by 54.36.148.13 (hydrogen013-ext2.a.ahrefs.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 12 19:29:26.097473 2024] [security2:error] [pid 29339:tid 29339] [client 54.36.148.13:31465] [client 54.36.148.13] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kulacenterky.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kulacenterky.com"] [uri "/2015/11/weekly-schedule-oct-1-dec-31-2015/[email protected]"] [unique_id "ZuN5VsH35Txv5qKe7l63AwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
syokadmin	2024-09-11 21:16:53 (6 days ago)	(mod_security) mod_security (id:77225080) triggered by 54.36.148.13 (FR/France/hydrogen013-ext2.a.ah ... show more(mod_security) mod_security (id:77225080) triggered by 54.36.148.13 (FR/France/hydrogen013-ext2.a.ahrefs.com): 1 in the last 3600 secs show less	Brute-Force
Anonymous	2024-09-10 08:15:50 (1 week ago)	Excessive crawling/scraping	Hacking Brute-Force
TPI-Abuse	2024-09-10 03:19:12 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 54.36.148.13 (hydrogen013-ext2.a.ahrefs.com): 1 ... show more(mod_security) mod_security (id:210730) triggered by 54.36.148.13 (hydrogen013-ext2.a.ahrefs.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 23:19:07.809934 2024] [security2:error] [pid 20145:tid 20145] [client 54.36.148.13:34035] [client 54.36.148.13] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/nexium.com"] [unique_id "Zt-6q0t0dvL-DFV55bcykgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
spyra.rocks	2024-09-06 11:52:27 (1 week ago)	NGINX	Bad Web Bot
Mendip_Defender	2024-09-06 01:10:40 (1 week ago)	54.36.148.13 - - [06/Sep/2024:02:10:44 +0100] "GET /galleries/2008/2008-08-08_-_Ixion_at_Cadwell_Day ... show more54.36.148.13 - - [06/Sep/2024:02:10:44 +0100] "GET /galleries/2008/2008-08-08_-_Ixion_at_Cadwell_Day_2/IC2_08-08-2008_0131.jpg HTTP/2.0" 200 108139 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Bad Web Bot
nv	2024-09-03 17:25:30 (2 weeks ago)	54.36.148.13 - - [03/Sep/2024:19:25:30 +0200] "GET / HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; ... show more54.36.148.13 - - [03/Sep/2024:19:25:30 +0200] "GET / HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" show less	Bad Web Bot
Mendip_Defender	2024-09-03 10:03:36 (2 weeks ago)	54.36.148.13 - - [03/Sep/2024:11:03:40 +0100] "GET /_data/i/galleries/2012/2012-12-02_-_MidwestMCC_Y ... show more54.36.148.13 - - [03/Sep/2024:11:03:40 +0100] "GET /_data/i/galleries/2012/2012-12-02_-_MidwestMCC_Youths_Round_6_-_Home_Farm_Lower_South_Wraxall/MWY_02-12-2012_0094-th.jpg HTTP/2.0" 200 20468 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Bad Web Bot
Anonymous	2024-09-03 01:32:18 (2 weeks ago)	Excessive crawling/scraping	Hacking Brute-Force
WebTejo	2024-09-02 08:33:05 (2 weeks ago)	Detected multiple authentication failures and invalid user attempts in plesk-apache-badbot jail from ... show moreDetected multiple authentication failures and invalid user attempts in plesk-apache-badbot jail from IP address 54.36.148.13 on Node [DE] Bee Node. show less	Web App Attack