JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.37.22.13

54.37.22.13 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 36%: ?

36%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ip-54-37-22.eu
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.37.22.13

Whois 54.37.22.13

IP Abuse Reports for 54.37.22.13:

This IP address has been reported a total of 119 times from 26 distinct sources. 54.37.22.13 was first reported on August 21st 2021, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-22 07:55:58 (13 hours ago)	Web App Attack	Web App Attack
🇦🇺 MAGIC	2026-06-18 03:05:51 (4 days ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-06-17 14:20:33 (5 days ago)	Blocked by ModSec and CSF	Port Scan
🇮🇩 sockominfo	2026-06-13 15:00:55 (1 week ago)	Suspicious user agent detected python-urllib3/1.26.18. Threat Score: 3.6/10 (LOW). Confidence: 30%. ... show more Suspicious user agent detected python-urllib3/1.26.18. Threat Score: 3.6/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-13 14:00:52 (1 week ago)	Suspicious user agent detected python-urllib3/1.26.18. Threat Score: 3.7/10 (LOW). Confidence: 30%. ... show more Suspicious user agent detected python-urllib3/1.26.18. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-13 13:00:52 (1 week ago)	Suspicious user agent detected python-urllib3/1.26.18. Threat Score: 3.8/10 (LOW). Confidence: 30%. ... show more Suspicious user agent detected python-urllib3/1.26.18. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 39%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-13 12:00:09 (1 week ago)	Suspicious user agent detected python-urllib3/1.26.18. Threat Score: 0/10 (INFORMATIONAL). Reported ... show more Suspicious user agent detected python-urllib3/1.26.18. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇳🇱 GabrielJST	2026-06-11 22:29:07 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.22.13 (FR/Fran ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.22.13 (FR/France/ip-54-37-22.eu) show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-06 07:11:11 (2 weeks ago)	Web App Attack	Web App Attack
🇨🇭 4server	2026-05-23 20:46:00 (4 weeks ago)	[SatMay2322:45:56.3743712026][security2:error][pid4090391:tid4090725][client54.37.22.13:0]ModSecurit ... show more [SatMay2322:45:56.3743712026][security2:error][pid4090391:tid4090725][client54.37.22.13:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"www.vetreriaperletti.ch\"][uri\"/wp-content/uploads/2025/07/logo-vetreria-perletti.png\"][unique_id\"ahISBIvYDhHXA58HobVvvwAAAM0\"] show less	Hacking Web App Attack
🇨🇭 4server	2026-05-16 16:56:24 (1 month ago)	[SatMay1618:56:20.6467922026][security2:error][pid2931337:tid2931415][client54.37.22.13:0]ModSecurit ... show more [SatMay1618:56:20.6467922026][security2:error][pid2931337:tid2931415][client54.37.22.13:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"www.r102.ch\"][uri\"/wp-content/uploads/2018/01/cover-Eugenio-Picchiani-e1515694083398.jpg\"][unique_id\"agihtN3bXBXcB5PAHcFMAgAAAIw\"] show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-05-16 10:50:16 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 4server	2026-05-13 04:17:06 (1 month ago)	[WedMay1306:17:02.5133792026][security2:error][pid1074820:tid1074836][client54.37.22.13:0]ModSecurit ... show more [WedMay1306:17:02.5133792026][security2:error][pid1074820:tid1074836][client54.37.22.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.simireinigung.ch\"][uri\"/wp-content/uploads/2023/05/Simi-Reinigung-PNG-logo-v2.png\"][unique_id\"agP7Pu6xni66LvKeSqGw_wAAAAU\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Sklurk	2026-05-13 00:57:03 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 4server	2026-05-12 13:52:04 (1 month ago)	[TueMay1215:52:02.5053342026][security2:error][pid118539:tid118600][client54.37.22.13:0]ModSecurity: ... show more [TueMay1215:52:02.5053342026][security2:error][pid118539:tid118600][client54.37.22.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.simireinigung.ch\"][uri\"/wp-content/uploads/2023/05/Simi-Reinigung-PNG-logo-v1.png\"][unique_id\"agMwgm6AdXWxWcwjhiB0BwAAAFg\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 216.26.254.50

🇳🇱 213.177.179.12

🇰🇪 197.248.8.33

🇹🇼 111.70.32.51

🇮🇳 49.204.235.212

🇵🇱 34.118.31.78

🇮🇹 4.232.80.255

🇹🇼 1.162.239.42

🇱🇧 213.204.91.189

🇳🇱 85.11.167.11

🇮🇪 54.170.248.221

🇸🇬 43.173.179.117

🇬🇧 35.203.211.226

🇧🇷 20.197.180.144

🇨🇦 20.63.8.12

🇺🇸 18.223.152.195

🇨🇳 8.138.246.252

🇨🇳 8.130.48.134

🇺🇸 2604:a880:400:d1:0:4:9e7e:3001

🇭🇺 2001:4c4e:13cd:a600:317d:17d9:f69:43be