JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

54.37.22.167

Neutral Activity

Abuse Confidence Score

0% Low Risk

65 reports

19 reporters · latest 1 month ago

ISP: OVH SAS
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16276
Hostname(s): ip-54-37-22.eu
Domain Name: ovh.net
Country: 🇫🇷 France
City: Gravelines, Hauts-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

65 from 19 distinct reporters

First reported

January 16th 2021

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 1

Most common categories Hacking 1 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-10-03 08:36:42 UTC · (1 month ago)	[SatOct0310:36:37.3150612026][security2:error][pid1959910:tid1960039][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf. ... show more [SatOct0310:36:37.3150612026][security2:error][pid1959910:tid1960039][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"prodotti.comarcosa.com\"][uri\"/wp-content/uploads/2018/01/12003.jpg\"][unique_id\"asC-la0StP0_fEOxTza8xAAAAIw\"] show less	Hacking Web App Attack
🇨🇭 4server	2026-09-06 03:07:02 UTC · (2 months ago)	[SunSep0605:06:57.1160212026][security2:error][pid3047569:tid3047802][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf. ... show more [SunSep0605:06:57.1160212026][security2:error][pid3047569:tid3047802][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"whatsdecor.ch\"][uri\"/wp-content/uploads/2017/10/12700.png\"][unique_id\"apzY0e0yJPX5EmPrqfoCkgAAAVg\"] show less	Hacking Web App Attack
🇳🇱 GabrielJST	2026-08-24 11:29:34 UTC · (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.22.167 (FR/France/ip-54-37-22.eu)	Bad Web Bot
🇨🇭 4server	2026-08-20 09:24:51 UTC · (2 months ago)	[ThuAug2011:24:46.5092492026][security2:error][pid4014313:tid4014651][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf. ... show more [ThuAug2011:24:46.5092492026][security2:error][pid4014313:tid4014651][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"www.spc-ticino.ch\"][uri\"/images/i_internet.jpg\"][unique_id\"aobH3hXPRf4aoy-55yuI7QAAAJQ\"] show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-08-18 09:44:29 UTC · (2 months ago)	[18/Aug/2026:12:44:28 +0300] -- 54.37.22.167 Ban reason: User-Agent python-urllib	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-08-16 12:46:23 UTC · (2 months ago)	[16/Aug/2026:15:46:23 +0300] -- 54.37.22.167 Ban reason: User-Agent python-urllib	Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-16 10:00:29 UTC · (2 months ago)	[SunAug1612:00:25.4058802026][security2:error][pid4116421:tid4116441][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS ... show more [SunAug1612:00:25.4058802026][security2:error][pid4116421:tid4116441][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"alessandrolucchini.ch\"][uri\"/wp-content/uploads/2019/01/csm_Piazza_Bellinzona_dc8503bfa5-750x350.jpg\"][unique_id\"aoGKOSBFezUJ8ZYNu7UJGgAAAFE\"] show less	Port Scan Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-08-09 10:48:09 UTC · (3 months ago)	[09/Aug/2026:13:48:08 +0300] -- 54.37.22.167 Ban reason: User-Agent python-urllib	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-08-08 05:53:43 UTC · (3 months ago)	[08/Aug/2026:08:53:42 +0300] -- 54.37.22.167 Ban reason: User-Agent python-urllib	Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-08-05 03:44:52 UTC · (3 months ago)	(PERMBLOCK) 54.37.22.167 (FR/France/ip-54-37-22.eu) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:	Port Scan
🇩🇪 netclix.gr	2026-08-04 13:50:47 UTC · (3 months ago)	(bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.167 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.167 - - [04/Aug/2026:16:50:42 +0300] "GET /images/727952684_1320471 ... show more (bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.167 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.167 - - [04/Aug/2026:16:50:42 +0300] "GET /images/727952684_1320471470245390_5646697047585027156_n.jpg HTTP/1.1" 200 134299 "-" "python-urllib3/1.26.18" show less	Port Scan
🇩🇪 netclix.gr	2026-07-31 09:26:55 UTC · (3 months ago)	(bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.167 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.167 - - [31/Jul/2026:12:26:50 +0300] "GET /images/thumbnails/400/40 ... show more (bot_kill_mega) Aggressive Bot Blocked: python 54.37.22.167 (FR/France/ip-54-37-22.eu): 1 in the last 4600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.22.167 - - [31/Jul/2026:12:26:50 +0300] "GET /images/thumbnails/400/400/detailed/5/BRAVURIS_5_t57b-v2_7gq2-9f.jpg HTTP/1.1" 200 63202 "-" "python-urllib3/1.26.18" show less	Port Scan
🇬🇧 AvonleaConsulting	2026-07-22 22:59:47 UTC · (3 months ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
🇬🇧 AvonleaConsulting	2026-07-22 17:55:15 UTC · (3 months ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-28 11:35:02 UTC · (4 months ago)	[SunJun2813:34:57.9322872026][security2:error][pid1587407:tid1587525][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS ... show more [SunJun2813:34:57.9322872026][security2:error][pid1587407:tid1587525][client54.37.22.167:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.allegraravizza.it\"][uri\"/wp-content/uploads/2021/02/IMG_9021-1024x683.jpg\"][unique_id\"akEG4TgdzpvdiTt-c0wqnAAAAMs\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 162.158.103.60

🇺🇸 8.228.21.53

🇨🇳 8.137.171.243

🇹🇼 198.235.24.97

🇬🇧 185.247.137.105

🇩🇪 185.176.255.72

🇵🇱 162.158.103.208

🇨🇳 111.32.229.67

🇻🇳 103.42.57.15

🇳🇱 64.205.72.15

🇨🇳 36.136.45.35

🇳🇱 195.178.110.30

🇳🇱 158.173.21.64

🇨🇳 123.207.233.140

🇷🇴 92.118.39.64

🇪🇸 90.71.20.11

🇧🇬 79.124.58.106

🇳🇱 64.205.72.175

🇺🇸 50.6.207.146

🇹🇳 41.224.62.206