JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.37.22.148

Activity Trending Down

Abuse Confidence Score

20% Elevated

71 reports

22 reporters · latest 3 weeks ago

ISP: OVH SAS
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16276
Hostname(s): ip-54-37-22.eu
Domain Name: ovh.net
Country: 🇫🇷 France
City: Gravelines, Hauts-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

71 from 22 distinct reporters

First reported

December 4th 2020

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 2 🇩🇪 Germany 1 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1

Most common categories Bad Web Bot 2 Web App Attack 2 Port Scan 2 Hacking 1 SQL Injection 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-10-18 03:03:01 UTC · (3 weeks ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
Anonymous	2026-10-04 11:14:04 UTC · (1 month ago)	Blocked by ModSec and CSF	Port Scan
🇨🇭 4server	2026-10-03 03:06:27 UTC · (1 month ago)	[SatOct0305:06:20.5897482026][security2:error][pid1806365:tid1806379][client54.37.22.148:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf. ... show more [SatOct0305:06:20.5897482026][security2:error][pid1806365:tid1806379][client54.37.22.148:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"prodotti.comarcosa.com\"][uri\"/wp-content/uploads/2021/04/14591-590x700.jpg\"][unique_id\"asBxLPVgqsKDdQN5sduWRgAAAMw\"] show less	Hacking Web App Attack
🇩🇪 netclix.gr	2026-10-02 08:52:20 UTC · (1 month ago)	(bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.148 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.148 - - [02/Oct/2026:11:52:17 +0300] "GET /wp-content/uploads/2020/ ... show more (bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.148 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.148 - - [02/Oct/2026:11:52:17 +0300] "GET /wp-content/uploads/2020/11/IMG_20201127_131533-scaled-300x300.jpg HTTP/1.1" 200 30859 "-" "python-urllib3/1.26.18" show less	Port Scan
🇺🇦 URAN Publishing Service	2026-09-25 15:56:34 UTC · (1 month ago)	[25/Sep/2026:18:56:33 +0300] -- 54.37.22.148 Ban reason: User-Agent python-urllib	Bad Web Bot Web App Attack
🇳🇱 GabrielJST	2026-09-22 12:04:32 UTC · (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.22.148 (FR/France/ip-54-37-22.eu)	Bad Web Bot
🇨🇭 4server	2026-08-21 11:18:28 UTC · (2 months ago)	[FriAug2113:18:22.1123402026][security2:error][pid1514661:tid1514873][client54.37.22.148:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf. ... show more [FriAug2113:18:22.1123402026][security2:error][pid1514661:tid1514873][client54.37.22.148:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"xn--tirascarph-ieb.ch\"][uri\"/wp-content/uploads/2022/03/filo-sbalzo-puzzou-2.jpg\"][unique_id\"aogz_toLHkxrfmQLKX2vAwAAAU0\"] show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-08-18 09:43:52 UTC · (2 months ago)	[18/Aug/2026:12:43:51 +0300] -- 54.37.22.148 Ban reason: User-Agent python-urllib	Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-08-05 05:03:47 UTC · (3 months ago)	(bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.148 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.148 - - [05/Aug/2026:08:03:44 +0300] "GET /images/thumbnails/280/42 ... show more (bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.148 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.148 - - [05/Aug/2026:08:03:44 +0300] "GET /images/thumbnails/280/420/detailed/64/252283_blouza_espresso_3_1366x.jpg HTTP/1.1" 200 78808 "-" "python-urllib3/1.26.18" show less	Port Scan
Anonymous	2026-08-01 05:45:35 UTC · (3 months ago)	Blocked by ModSec and CSF	Port Scan
🇩🇪 netclix.gr	2026-07-31 15:16:17 UTC · (3 months ago)	(bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.148 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.148 - - [31/Jul/2026:18:16:04 +0300] "GET /images/thumbnails/400/40 ... show more (bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.148 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.148 - - [31/Jul/2026:18:16:04 +0300] "GET /images/thumbnails/400/400/detailed/5/BRAVURIS_5_t57b-v2_z5kz-6b_w76h-ea_8vst-u2_i7t2-nu.jpg HTTP/1.1" 200 63202 "-" "python-urllib3/1.26.18" show less	Port Scan
🇫🇷 Sklurk	2026-07-20 08:11:50 UTC · (3 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-11 14:58:32 UTC · (4 months ago)	Web App Attack	Web App Attack
🇳🇱 GabrielJST	2026-07-07 10:59:51 UTC · (4 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.22.148 (FR/France/ip-54-37-22.eu)	Bad Web Bot
🇩🇪 4server	2026-06-02 10:12:32 UTC · (5 months ago)	[TueJun0212:12:31.0610902026][security2:error][pid4160217:tid4160334][client54.37.22.148:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS ... show more [TueJun0212:12:31.0610902026][security2:error][pid4160217:tid4160334][client54.37.22.148:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.massimilianoparquet.ch\"][uri\"/wp-content/uploads/2020/05/20200429_144230-768x1024-1.jpg\"][unique_id\"ah6sj3y3f8c_MDQSGok8JQAAAIQ\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇬 194.79.103.229

🇨🇳 183.253.243.141

🇵🇰 110.39.14.207

🇺🇸 50.144.88.58

🇺🇦 31.40.16.32

🇲🇩 217.19.215.41

🇺🇸 66.132.186.236

🇮🇪 54.75.78.245

🇳🇱 204.76.203.214

🇦🇷 190.172.23.76

🇩🇪 134.209.244.236

🇳🇱 89.21.67.179

🇻🇳 27.64.24.206

🇸🇬 14.102.84.238

🇮🇳 203.129.218.98

🇨🇦 201.79.152.4

🇺🇸 194.180.233.239

🇷🇺 194.67.106.239

🇧🇷 191.52.225.38

🇵🇾 177.251.254.38