54.37.131.169
Classification: Malicious
54.37.131.169 is a malicious IP address in Wroclaw, PL. 226 sightings from 8 threat sources (Suspicious Host, Proxy), last seen 2026-09-24.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Anonymizer | FireHOL | 2026-09-24 17:14:46 | 2026-09-24 17:14:46 | anomalous-activity anonymization | |
| Proxy | IPWhois.io | 2025-03-03 16:53:11 | 2026-09-22 16:53:34 | anonymization proxy | |
| Mail Spammer | Barracuda | 2025-03-03 16:53:11 | 2026-09-22 16:53:34 | attacker malicious-activity | |
| Proxy | FireHOL | 2022-12-31 23:03:53 | 2026-09-21 18:32:16 | anomalous-activity anonymization proxy | |
| Suspicious Host | AbuseIPDB | 2025-11-03 21:06:41 | 2026-03-14 20:12:52 | anomalous-activity | |
| Malicious Host | AbuseIPDB | 2025-11-04 20:50:53 | 2026-03-02 20:12:26 | compromised malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2025-11-04 05:10:36 | 2025-11-20 00:13:57 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2025-11-03 15:49:09 | 2025-11-12 08:07:21 | anomalous-activity | |
| Bruteforce | AbuseIPDB | 2025-11-03 16:46:18 | 2025-11-12 05:46:13 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-11-03 16:46:18 | 2025-11-05 12:31:54 | malicious-activity | |
| Hacking | AbuseIPDB | 2025-11-03 16:46:18 | 2025-11-05 04:12:41 | malicious-activity | |
| SQL Injection | AbuseIPDB | 2025-11-04 19:45:09 | 2025-11-04 22:45:06 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2025-11-04 01:00:21 | 2025-11-04 01:00:21 | anomalous-activity | |
| Anonymizer | FireHol | 2022-12-29 11:42:07 | 2022-12-29 23:01:54 | anonymization | |
| Anonymizer | Maltiverse Research Team | 2020-11-21 16:27:02 | 2021-05-22 23:08:44 | anonymizer | |
| Anonymizer | Maltiverse | 2020-08-02 09:10:44 | 2020-08-02 09:10:44 | ||
| HTTP Spammer | StopForumSpam.com | 2020-06-04 10:40:08 | 2020-06-04 10:40:08 |
Tags
anonymization bot abuse anonymizerWhois information
- AS name
- AS16276 OVH SAS
- AS registry
- ripencc
- AS date
- 1992-03-17 00:00:00
- AS CIDR
- 54.37.0.0/16
- CIDR
- 54.37.130.0/23
- Registrant
- OVH SAS
- Address
- ul. Swobodna 1 50-088 Wroclaw Poland
- City
- Wroclaw
- Postal code
- 50-027
- Country
- PL — Poland 🇵🇱
- Contact email
- [email protected]
- First indexed
- 2020-06-04 10:40:08
- Last updated
- 2026-09-24 17:14:46
Malicious IPs in the same CIDR
54.37.131.9 54.37.235.82 54.37.100.115 54.37.77.191 54.37.211.125 54.37.76.247 54.37.229.48 54.37.10.124 54.37.70.75 54.37.233.240 54.37.138.158 54.37.131.158 54.37.131.137 54.37.131.163 54.37.131.187 54.37.131.215 54.37.131.204 54.37.131.169 54.37.131.245 54.37.131.118 54.37.131.60 54.37.131.84 54.37.131.52 54.37.130.150 54.37.130.22