JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.38.41.222

54.38.41.222 was found in our database!

This IP was reported 197 times. Confidence of Abuse is 0%: ?

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ip-54-38-41.eu
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.38.41.222

Whois 54.38.41.222

IP Abuse Reports for 54.38.41.222:

This IP address has been reported a total of 197 times from 21 distinct sources. 54.38.41.222 was first reported on December 16th 2020, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2024-03-05 14:06:58 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 backslash	2024-03-04 10:52:08 (2 years ago)		Bad Web Bot
🇦🇺 MAGIC	2024-03-04 00:14:16 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-03-02 21:15:24 (2 years ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇦🇺 MAGIC	2024-03-02 04:04:54 (2 years ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-02-18 21:07:03 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-02-14 15:07:08 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-02-12 12:11:21 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-02-11 04:03:19 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2024-02-07 11:33:30 (2 years ago)	[Wed Feb 07 18:33:27.488444 2024] [security2:error] [pid 564707:tid 133792389924416] [client 54.38.4 ... show more [Wed Feb 07 18:33:27.488444 2024] [security2:error] [pid 564707:tid 133792389924416] [client 54.38.41.222:54950] [client 54.38.41.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib3/1.26.9 request_line = GET /images/Klimatologi/Prakiraan/02-Prakiraan-Dasarian/Prakiraan_Deterministik_Curah_Hujan_Dasarian/Prakiraan_Deterministik_Curah_Hujan_Dasarian_Provinsi_Jawa_Timur/2019/11/Peta_Prakiraan_Deterministik_Curah_Hujan_Dasarian_Provinsi_Jawa_Timur_Update_10_November_2019.jpg HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-02-07 08:06:43 (2 years ago)	[Wed Feb 07 15:06:41.317906 2024] [security2:error] [pid 268720:tid 133795625829952] [client 54.38.4 ... show more [Wed Feb 07 15:06:41.317906 2024] [security2:error] [pid 268720:tid 133795625829952] [client 54.38.41.222:38146] [client 54.38.41.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib3/1.26.9 request_line = GET /images/Meteorologi/Prakiraan/Prakiraan-Mingguan/2019/12/30-12-2019/Prakiraan_Cuaca_Daerah_Malang_dan_Batu_Seminggu_ke_Depan_Berlaku_31_Desember_2019-6_Januari_2020.jpg HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-m ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2024-02-04 05:15:56 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-01-27 03:03:48 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2024-01-22 08:05:48 (2 years ago)	[Mon Jan 22 15:05:43.711388 2024] [security2:error] [pid 206937:tid 133102970078784] [client 54.38.4 ... show more [Mon Jan 22 15:05:43.711388 2024] [security2:error] [pid 206937:tid 133102970078784] [client 54.38.41.222:54212] [client 54.38.41.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib3/1.26.9 request_line = GET /images/Lambang_Hujan/Hujan_Lebat.png HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-malang.info"] [uri "/images/Lambang_Hujan/Hujan_Lebat.png"] [unique_id "Za4h14Bo7DtGKRxKL9L5jQAAALw"] [staklim-malang.info] [staklim ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2024-01-21 10:03:07 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 197 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 222.167.122.195

🇪🇬 156.217.80.76

🇩🇪 139.162.173.209

🇺🇸 198.13.215.191

🇨🇴 190.69.181.5

🇺🇸 180.92.137.13

🇭🇰 165.154.41.152

🇺🇸 154.28.65.226

🇰🇿 147.30.190.82

🇰🇷 125.247.51.6

🇬🇪 5.178.198.57

🇺🇸 203.89.99.11

🇺🇸 202.81.218.115

🇺🇸 192.74.228.113

🇦🇲 176.32.193.16

🇺🇸 151.244.45.164

🇰🇷 119.207.26.11

🇺🇸 107.170.59.136

🇺🇸 98.190.61.254

🇺🇸 94.176.54.24