54.37.131.84

Classification: Malicious

54.37.131.84 is a malicious IP address in Wroclaw, PL. 58 sightings from 9 threat sources (Proxy, Anonymizer), last seen 2026-09-24. Network: AS16276 OVH SAS.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Anonymizer FireHOL 2026-09-24 17:14:45 2026-09-24 17:14:45 anomalous-activity anonymization
Proxy IPWhois.io 2025-06-16 02:40:05 2026-09-22 16:53:34 anonymization proxy
Mail Spammer Barracuda 2025-06-16 02:40:05 2026-09-22 16:53:34 attacker malicious-activity
Proxy FireHOL 2022-12-31 23:03:52 2026-09-21 18:32:16 anomalous-activity anonymization proxy
Anonymizer FireHol 2022-12-29 11:42:05 2022-12-29 23:01:52 anonymization
Anonymizer Maltiverse Research Team 2020-11-21 16:27:01 2021-05-22 23:08:43 anonymizer
Malicious url Cyber Threat Coalition 2020-12-14 21:24:00 2021-03-04 16:29:31 malicious-activity
Covid19 scam Cyber Threat Coalition 2020-11-25 00:19:45 2020-12-13 21:41:17 malicious-activity
DDoS attack Blocklist.net.ua 2019-11-21 00:54:54 2019-12-21 07:20:18
HTTP Spammer StopForumSpam.com 2019-11-27 02:35:01 2019-11-27 02:35:01
Anonymizer Maltiverse 2019-11-13 01:26:10 2019-11-13 01:26:10

Tags

anonymization anonymizer abuse bot covid19 coronavirus scam phishing

Whois information

AS name
AS16276 OVH SAS
AS registry
ripencc
AS date
1992-03-17 00:00:00
AS CIDR
54.37.0.0/16
Registrant
OVH SAS
City
Wroclaw
Postal code
50-027
Country
PL — Poland 🇵🇱
First indexed
2019-11-13 01:26:10
Last updated
2026-09-24 17:14:45

Malicious IPs in the same CIDR

54.37.131.9 54.37.235.82 54.37.100.115 54.37.77.191 54.37.211.125 54.37.76.247 54.37.229.48 54.37.10.124 54.37.70.75 54.37.233.240 54.37.138.158 54.37.131.158 54.37.131.137 54.37.131.163 54.37.131.187 54.37.131.215 54.37.131.204 54.37.131.169 54.37.131.245 54.37.131.118 54.37.131.60 54.37.131.84 54.37.131.52 54.37.130.150 54.37.130.22