JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 132.226.106.216

132.226.106.216 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 71%: ?

71%

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 132.226.106.216

Whois 132.226.106.216

IP Abuse Reports for 132.226.106.216:

This IP address has been reported a total of 16 times from 13 distinct sources. 132.226.106.216 was first reported on June 23rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-07-11 13:10:47 (1 hour ago)	CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/spip.php?article29=","/Silence-on-tourne"] \| U ... show more CrowdSec: crowdsecurity/http-bad-user-agent \| req: ["/spip.php?article29=","/Silence-on-tourne"] \| UA: ["Scrapy/2.16.0 (+https://scrapy.org)"] show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-09 05:29:44 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 132.226.106.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 132.226.106.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 01:29:40.204930 2026] [security2:error] [pid 8124:tid 8124] [client 132.226.106.216:2184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Osaki/pics/Thumbs.db"] [unique_id "ak8xxPpjzY7l-njHyhnuNQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 03:46:42 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 132.226.106.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 132.226.106.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 23:46:35.725582 2026] [security2:error] [pid 14751:tid 14751] [client 132.226.106.216:36407] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|koswerks.net\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "koswerks.net"] [uri "/index.bak"] [unique_id "ak8Zm1IMwMDj5ojMCixQwAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-07-08 02:05:59 (3 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-07-07 14:57:25 (3 days ago)	Detected by CrowdSec: crowdsecurity/http-bad-user-agent	Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 14:02:09 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 132.226.106.216 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 132.226.106.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 10:02:06.101539 2026] [security2:error] [pid 15471:tid 15471] [client 132.226.106.216:65455] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|printorganic.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "printorganic.com"] [uri "/printorganic.com"] [unique_id "ak0G3uCBLrQMGOax_w0H1wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-07-07 06:16:45 (4 days ago)	http-bad-user-agent - IP: 132.226.106.216 - time="2026-07-07T08:16:45+02:00" level=info msg="(555f6 ... show more http-bad-user-agent - IP: 132.226.106.216 - time="2026-07-07T08:16:45+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 132.226.106.216 (US/31898) : 4h ban on Ip 132.226.106.216" module=db show less	Bad Web Bot
🇩🇪 yvoictra	2026-07-06 12:28:00 (5 days ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-bad-user-agent	Web App Attack
🇫🇷 bazter.pro	2026-07-05 17:35:10 (5 days ago)	Auto-Ban [2026-07-05 17:35:10]: CRITICAL: bot trap (soft) \| host=twingeo.com \| route=/api/trap/catal ... show more Auto-Ban [2026-07-05 17:35:10]: CRITICAL: bot trap (soft) \| host=twingeo.com \| route=/api/trap/catalog-export \| hits=1 \| ua=Scrapy/2.16.0 (+https://scrapy.org) show less	Hacking Web App Attack
🇩🇪 conseilgouz	2026-07-05 14:22:03 (6 days ago)	coe-88 : Bloc AI bots=>/composant-cg-isotope(Scrap)	Hacking
🇨🇭 backslash	2026-06-28 21:48:02 (1 week ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇮🇹 Progetto1	2026-06-27 23:30:02 (1 week ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇳🇱 Roderic	2026-06-27 20:07:24 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-06-27 00:13:40 (2 weeks ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇨🇦 polycoda	2026-06-24 22:38:41 (2 weeks ago)	📄 Probes for tons of inexistent files and/or PHP scripts	Hacking Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 178.16.55.94

🇸🇮 102.220.160.176

🇹🇷 94.154.43.30

🇦🇷 45.162.20.165

🇳🇱 45.142.193.197

🇨🇦 20.220.212.5

🇺🇸 2607:fa18:0:2::75

🇳🇱 203.159.90.217

🇦🇷 200.41.187.212

🇵🇱 176.53.159.197

🇳🇱 45.148.10.157

🇸🇬 18.140.44.23

🇷🇴 185.100.84.174

🇨🇳 180.76.185.216

🇻🇳 171.239.35.162

🇮🇳 103.255.134.61

🇷🇴 13.143.252.247

🇬🇧 5.252.83.238

🇺🇸 195.184.76.3

🇬🇧 185.247.137.123