54.37.234.111
Classification: Malicious
54.37.234.111 is a malicious IP address. Reported by 5 threat sources, last seen 2026-08-10. Network: AS16276 OVH LTD.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | StopForumSpam.com | 2024-11-16 20:33:00 | 2026-08-10 07:12:06 | attacker malicious-activity | |
| VPN | IPWhois.io | 2024-12-02 19:02:15 | 2026-07-26 09:09:02 | anonymization vpn | |
| Proxy | IPWhois.io | 2025-02-13 03:33:36 | 2026-01-15 14:03:02 | anonymization | |
| HTTP Spammer | Sblam | 2024-11-16 18:05:18 | 2025-09-20 15:58:56 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2024-11-06 19:01:30 | 2025-08-20 17:26:01 | compromised malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2024-10-22 08:38:39 | 2025-08-06 19:33:11 | malicious-activity | |
| Phishing | AbuseIPDB | 2024-11-03 02:46:19 | 2025-08-06 19:05:48 | malicious-activity | |
| Mail Spammer | AbuseIPDB | 2024-11-10 01:45:29 | 2025-08-06 10:33:33 | malicious-activity | |
| Hacking | AbuseIPDB | 2024-11-10 20:54:24 | 2025-08-06 10:33:33 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2024-11-02 10:37:05 | 2025-08-04 13:50:12 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2024-11-01 15:00:58 | 2025-08-02 23:24:05 | malicious-activity | |
| HTTP Spammer | Botscout | 2024-12-20 22:29:27 | 2025-08-02 14:51:07 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2024-11-01 15:00:58 | 2025-07-22 21:52:55 | anomalous-activity | |
| VPN | AbuseIPDB | 2025-07-11 21:21:44 | 2025-07-11 21:21:44 | anonymization | |
| SQL Injection | AbuseIPDB | 2024-11-11 14:16:02 | 2025-07-06 09:37:32 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2024-12-08 02:08:39 | 2025-05-29 07:23:20 | anomalous-activity | |
| SSH Attacker | AbuseIPDB | 2024-11-22 07:13:31 | 2025-04-19 09:07:43 | malicious-activity | |
| IoT Attacker | AbuseIPDB | 2024-11-11 14:01:28 | 2024-11-11 14:01:28 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-11-02 01:57:24 | 2024-11-08 02:59:39 | anomalous-activity |
Tags
bot abuseWhois information
- AS name
- AS16276 OVH LTD
- AS registry
- ripencc
- AS date
- 1992-03-17 00:00:00
- AS CIDR
- 54.37.0.0/16
- Registrant
- OVH LTD
- City
- Wroclaw
- Postal code
- 50-018
- Country
- PL — Poland 🇵🇱
- First indexed
- 2024-11-02 05:06:01
- Last updated
- 2026-08-10 07:12:06
Malicious IPs in the same CIDR
54.37.5.18 54.37.18.137 54.37.74.231 54.37.229.48 54.37.11.28 54.37.10.124 54.37.77.212 54.37.211.125 54.37.130.150 54.37.234.111 54.37.131.158