JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.37.222.215

54.37.222.215 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovh.net
Country	🇫🇷 France
City	Roubaix, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.37.222.215

Whois 54.37.222.215

IP Abuse Reports for 54.37.222.215:

This IP address has been reported a total of 109 times from 63 distinct sources. 54.37.222.215 was first reported on September 8th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-09-21 02:15:19 (2 hours ago)	Blocked by UFW (TCP on 22) Source port: 53454 TTL: 50 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 53454 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 54.37.222.215) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇨🇦 Psycho Solutions LLC	2026-09-20 21:35:47 (7 hours ago)	Active SSH brute-force detected. Logs: Sep 20 23:35:40 AVM-409535 sshd[1414575]: Failed password for ... show more Active SSH brute-force detected. Logs: Sep 20 23:35:40 AVM-409535 sshd[1414575]: Failed password for root from 54.37.222.215 port 34090 ssh2 Sep 20 23:35:40 AVM-409535 sshd[1414577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt... show less	SSH Brute-Force
🇧🇷 noconex	2026-09-20 20:24:02 (8 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 54.37.222. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 54.37.222.215 show less	Port Scan Brute-Force SSH
🇨🇦 Psycho Solutions LLC	2026-09-20 09:23:23 (19 hours ago)	Active SSH brute-force detected. Logs: 2026-09-20T09:23:17.036281+00:00 remna-panel sshd[203463]: Fa ... show more Active SSH brute-force detected. Logs: 2026-09-20T09:23:17.036281+00:00 remna-panel sshd[203463]: Failed password for root from 54.37.222.215 port 57946 ssh2 2026-09-20T09:23:17.991589+00:00 remna-panel sshd[203506]: pam_unix(sshd:auth): authentication... show less	SSH Brute-Force
🇫🇷 FastPath	2026-09-19 13:06:12 (1 day ago)	Repeated unauthorized access attempts observed from this IP address.	Brute-Force SSH
🇧🇷 noconex	2026-09-19 12:29:04 (1 day ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 54.37.222. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 54.37.222.215 show less	Port Scan Brute-Force SSH
🇫🇷 Vincent6785_0	2026-09-19 10:23:33 (1 day ago)	Sustained failed SSH authentication attempts recorded by a honeypot sensor network. Threat score: 28 ... show more Sustained failed SSH authentication attempts recorded by a honeypot sensor network. Threat score: 28/100 (low) \| Phase: active_brute_force (sustained failures, recently active) Failed auth: 102 (86 bad password, 16 invalid user) \| 0 success \| 196 total SSH log events \| seen on 1 sensor(s) Origin: United Kingdom (GB) \| AS16276 OVH SAS \| datacenter \| 54.37.222.0/24 First seen: 2026-09-19 10:19:23 UTC \| Last seen: 2026-09-19 10:23:33 UTC Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot. show less	Brute-Force SSH
🇫🇮 mikkopal88	2026-09-19 09:25:14 (1 day ago)	TCP SYN port scan to SSH 22	Port Scan SSH
Anonymous	2026-09-19 08:34:09 (1 day ago)	sshd	Brute-Force SSH
🇩🇪 Kotiacat_one	2026-09-18 20:29:00 (2 days ago)	2026-09-18T16:28:58.660142-04:00 kotia sshd-session[2327134]: pam_unix(sshd:auth): authentication fa ... show more 2026-09-18T16:28:58.660142-04:00 kotia sshd-session[2327134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.222.215 user=root 2026-09-18T16:29:00.335091-04:00 kotia sshd-session[2327134]: Failed password for root from 54.37.222.215 port 58218 ssh2 ... show less	Brute-Force SSH
🇨🇦 Psycho Solutions LLC	2026-09-18 18:47:35 (2 days ago)	Active SSH brute-force detected. Logs: Sep 18 20:47:28 AVM-804962 sshd[1334009]: Failed password for ... show more Active SSH brute-force detected. Logs: Sep 18 20:47:28 AVM-804962 sshd[1334009]: Failed password for root from 54.37.222.215 port 42074 ssh2 Sep 18 20:47:29 AVM-804962 sshd[1334011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt... show less	SSH Brute-Force
🇨🇦 lakered	2026-09-18 17:47:41 (2 days ago)	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇺🇸 xmission.com	2026-09-18 12:31:15 (2 days ago)	Blocked by UFW (TCP on 22) Source port: 33156 TTL: 50 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 33156 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 54.37.222.215) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇺🇸 MPL	2026-09-18 12:02:41 (2 days ago)	tcp/22 (4 or more attempts)	Port Scan
🇩🇪 ghostwarriors	2026-09-18 11:50:33 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 124.234.245.174

🇨🇳 122.241.239.83

🇯🇵 8.216.4.104

🇮🇹 217.112.100.11

🇧🇪 198.235.24.180

🇺🇸 195.184.76.213

🇩🇪 193.124.20.252

🇦🇷 181.0.198.196

🇩🇪 165.245.255.25

🇫🇷 148.230.112.167

🇫🇮 147.185.133.224

🇮🇳 122.187.244.198

🇨🇳 112.194.142.167

🇧🇪 104.199.98.110

🇷🇴 92.118.39.71

🇫🇷 91.231.89.100

🇳🇱 85.11.167.154

🇺🇸 45.131.193.233

🇰🇷 34.50.12.235

🇺🇸 20.169.91.44