JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.37.118.87

54.37.118.87 was found in our database!

This IP was reported 273 times. Confidence of Abuse is 0%: ?

ISP	Ahrefs Pte Ltd Dmytro
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	proxy-fr000-san87.ahrefs.net
Domain Name	ahrefs.com
Country	🇫🇷 France
City	Lille, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 54.37.118.87 is an IP address from within our whitelist belonging to the subnet 54.37.118.64/27, which we identify as: "Ahrefs Crawler".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 54.37.118.87

Whois 54.37.118.87

IP Abuse Reports for 54.37.118.87:

This IP address has been reported a total of 273 times from 44 distinct sources. 54.37.118.87 was first reported on August 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-06-26 15:44:12 (1 day ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇩🇪 netclix.gr	2026-06-26 10:16:57 (1 day ago)	(PERMBLOCK) 54.37.118.87 (FR/France/proxy-fr000-san87.ahrefs.net) has had more than 2 temp blocks in ... show more (PERMBLOCK) 54.37.118.87 (FR/France/proxy-fr000-san87.ahrefs.net) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇬🇷 setupgr	2026-06-25 17:12:50 (2 days ago)	(mod_security) mod_security (id:11000010) triggered by 54.37.118.87 (GB/United Kingdom/England/Londo ... show more (mod_security) mod_security (id:11000010) triggered by 54.37.118.87 (GB/United Kingdom/England/London/-/[AS16276 OVH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 20:12:47.352765 2026] [security2:error] [pid 358185:tid 629270] [remote 54.37.118.87:36652] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: AhrefsBot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/%CE%B5%CF%80%CE%B1%CE%B3%CE%B3%CE%B5%CE%BB%CE%BC%CE%B1%CF%84%CE%B9%CE%BA%CE%BF%CE%AF_%CF%87%CF%8E%CF%81%CE%BF%CE%B9/%CE%B3%CF%81%CE%B1%CF%86%CE%B5%CE%AF%CE%BF-398/"] [unique_id "aj1hjzpPCootS5mrGd6OoQABlSA"] show less	Port Scan
🇬🇧 Mendip_Defender	2026-06-25 15:45:23 (2 days ago)	54.37.118.87 - - [25/Jun/2026:16:45:16 +0100] "GET / HTTP/1.1" 200 426 "-" "Mozilla/5.0 (compatible; ... show more 54.37.118.87 - - [25/Jun/2026:16:45:16 +0100] "GET / HTTP/1.1" 200 426 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Bad Web Bot
🇩🇪 netclix.gr	2026-06-25 15:43:31 (2 days ago)	(bot_qv) Bot Scraping QuickView 54.37.118.87 (FR/France/proxy-fr000-san87.ahrefs.net): 1 in the last ... show more (bot_qv) Bot Scraping QuickView 54.37.118.87 (FR/France/proxy-fr000-san87.ahrefs.net): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.118.87 - - [25/Jun/2026:18:43:30 +0300] "GET /index.php?dispatch=products.quick_view&product_id=68&prev_url=index.php%3Fproduct_id%3D63%26prev_url%3Dindex.php%253Fsl%253Del%26n_items%3D70%252C74%252C79%252C78%252C85%252C82%252C84%252C83%252C75%252C63%252C86%252C73%252C72%252C66%252C65%252C68%252C69%252C67%252C81%252C80%26sl%3Del%26dispatch%3Dcategories.view%26category_id%3D3&n_items=70%2C74%2C79%2C78%2C85%2C82%2C84%2C83%2C75%2C63%2C86%2C73%2C72%2C66%2C65%2C68%2C69%2C67%2C81%2C80 HTTP/2.0" 302 0 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" show less	Port Scan
🇮🇪 Jim Keir	2026-06-25 15:13:13 (2 days ago)	2026-06-25 15:13:13 54.37.118.87 Bad bot, blocking Mozilla/5.0	Bad Web Bot
🇬🇷 setupgr	2026-06-25 11:08:37 (2 days ago)	(mod_security) mod_security (id:11000010) triggered by 54.37.118.87 (GB/United Kingdom/England/Londo ... show more (mod_security) mod_security (id:11000010) triggered by 54.37.118.87 (GB/United Kingdom/England/London/-/[AS16276 OVH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 14:08:34.750380 2026] [security2:error] [pid 357905:tid 357950] [remote 54.37.118.87:64898] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: AhrefsBot - in ftiaxtomonosou.gr"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/%CE%AD%CF%80%CE%B9%CF%80%CE%BB%CE%B1/%CE%AD%CF%80%CE%B9%CF%80%CE%BB%CE%BF-%CF%80%CE%B1%CE%BD%CF%84%CE%B6%CE%BF%CF%8D%CF%81%CE%B9/"] [unique_id "aj0MMg-pgf0Bh-qkv8-tlwAAhQ0"] show less	Port Scan
🇩🇪 netclix.gr	2026-06-24 22:45:52 (2 days ago)	(bot_qv) Bot Scraping QuickView 54.37.118.87 (FR/France/proxy-fr000-san87.ahrefs.net): 1 in the last ... show more (bot_qv) Bot Scraping QuickView 54.37.118.87 (FR/France/proxy-fr000-san87.ahrefs.net): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.118.87 - - [25/Jun/2026:01:45:44 +0300] "GET /index.php?dispatch=products.quick_view&product_id=57&prev_url=index.php%3Fdispatch%3Dproducts.view%26product_id%3D56&n_plain=Y&n_items=51%2C60%2C50%2C57 HTTP/2.0" 302 0 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" show less	Port Scan
🇩🇪 Hazzard	2026-06-21 06:12:23 (6 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)	Bad Web Bot
🇩🇪 iNetWorker	2026-06-20 09:36:13 (1 week ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 ghostwarriors	2026-06-18 11:50:14 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2026-06-18 08:14:50 (1 week ago)	54.37.118.87 - - [18/Jun/2026:09:14:44 +0100] "GET /robots.txt HTTP/1.1" 200 4301 "-" "Mozilla/5.0 ( ... show more 54.37.118.87 - - [18/Jun/2026:09:14:44 +0100] "GET /robots.txt HTTP/1.1" 200 4301 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-06-14 15:50:26 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-06-14 01:57:01 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.118.87 (FR/Fra ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.118.87 (FR/France/proxy-fr000-san87.ahrefs.net) show less	Bad Web Bot
🇬🇧 Mendip_Defender	2026-06-14 01:20:55 (1 week ago)	54.37.118.87 - - [14/Jun/2026:02:20:50 +0100] "GET /sitemap.xml HTTP/1.1" 200 4134 "-" "Mozilla/5.0 ... show more 54.37.118.87 - - [14/Jun/2026:02:20:50 +0100] "GET /sitemap.xml HTTP/1.1" 200 4134 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" ... show less	Bad Web Bot

Showing 1 to 15 of 273 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.23

🇲🇾 211.25.241.153

🇺🇸 209.222.101.194

🇬🇧 188.240.59.5

🇺🇸 147.185.132.29

🇺🇸 66.132.195.76

🇺🇸 66.132.172.225

🇹🇼 198.235.24.88

🇵🇪 190.223.60.209

🇧🇷 190.52.73.239

🇺🇸 159.89.184.232

🇨🇳 111.17.162.242

🇩🇪 69.5.169.132

🇺🇸 65.111.13.120

🇮🇳 4.240.96.30

🇬🇧 193.163.125.124

🇪🇨 190.154.54.66

🇦🇲 176.32.193.16

🇸🇪 171.25.158.57

🇫🇷 167.86.80.37