54.37.131.60

Classification: Malicious

54.37.131.60 is a malicious IP address in Wroclaw, PL. 58 sightings from 7 threat sources (Proxy, Anonymizer), last seen 2026-09-24. Network: AS16276 OVH SAS.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Anonymizer FireHOL 2026-09-24 17:14:45 2026-09-24 17:14:45 anomalous-activity anonymization
Proxy IPWhois.io 2025-06-16 02:40:01 2026-09-22 16:53:34 anonymization proxy
Mail Spammer Barracuda 2021-10-03 01:52:07 2026-09-22 16:53:34 attacker malicious-activity
Proxy FireHOL 2022-12-31 23:03:51 2026-09-21 18:32:16 anomalous-activity anonymization proxy
Anonymizer FireHol 2022-12-29 11:42:04 2022-12-29 23:01:51 anonymization
Bruteforce login attacker Blocklist.de 2021-10-03 02:02:38 2022-06-28 02:27:40 malicious-activity
HTTP Attacker Blocklist.de 2021-10-03 01:52:07 2022-06-28 01:59:08 malicious-activity
Anonymizer Maltiverse Research Team 2021-03-05 08:07:54 2021-05-22 23:08:43 anonymizer
Anonymizer Maltiverse 2021-03-03 19:09:40 2021-03-03 19:09:40

Tags

anonymization attacker login bruteforce bot joomla wordpress apache ddos rfi anonymizer

Whois information

AS name
AS16276 OVH SAS
AS registry
ripencc
AS date
1992-03-17 00:00:00
AS CIDR
54.37.0.0/16
Registrant
OVH SAS
City
Wroclaw
Postal code
50-027
Country
PL — Poland 🇵🇱
First indexed
2021-03-03 19:09:40
Last updated
2026-09-24 17:14:45

Malicious IPs in the same CIDR

54.37.131.9 54.37.235.82 54.37.100.115 54.37.77.191 54.37.211.125 54.37.76.247 54.37.229.48 54.37.10.124 54.37.70.75 54.37.233.240 54.37.138.158 54.37.131.158 54.37.131.137 54.37.131.163 54.37.131.187 54.37.131.215 54.37.131.204 54.37.131.169 54.37.131.245 54.37.131.118 54.37.131.60 54.37.131.84 54.37.131.52 54.37.130.150 54.37.130.22