JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 137.131.26.115

137.131.26.115 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 63%: ?

63%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 137.131.26.115

Whois 137.131.26.115

IP Abuse Reports for 137.131.26.115:

This IP address has been reported a total of 15 times from 11 distinct sources. 137.131.26.115 was first reported on June 17th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BlueWire Hosting	2026-07-03 00:16:56 (14 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇦🇺 Anytech	2026-07-02 20:28:16 (18 hours ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇨🇭 Origon	2026-07-01 19:05:27 (1 day ago)	http-bad-user-agent - IP: 137.131.26.115 - time="2026-07-01T21:05:26+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 137.131.26.115 - time="2026-07-01T21:05:26+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 137.131.26.115 (US/31898) : 4h ban on Ip 137.131.26.115" module=db show less	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-07-01 18:41:08 (1 day ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 Lino Project	2026-07-01 01:39:26 (2 days ago)	CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-bad-user-agent	Hacking
🇩🇪 SCHAPPY	2026-06-30 23:53:26 (2 days ago)	Malicious activity from IP detected: crowdsecurity/http-bad-user-agent.	Web App Attack Bad Web Bot
🇳🇱 Roderic	2026-06-28 18:49:18 (4 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇩🇪 yvoictra	2026-06-24 16:05:59 (1 week ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-bad-user-agent	Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 10:15:05 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 137.131.26.115 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 137.131.26.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 06:14:57.459713 2026] [security2:error] [pid 5695:tid 5695] [client 137.131.26.115:46880] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/hats/WS_FTP.LOG"] [unique_id "ajuuIbXvqSwBOK-Jdym-vQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-06-22 10:30:44 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Scrapy/2.16.0 (+https://scrapy.org) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 conseilgouz	2026-06-21 22:29:14 (1 week ago)	coe-88 : Bloc AI bots=>/composant-cg-gallery(Scrap)	Hacking
🇺🇸 TPI-Abuse	2026-06-21 04:12:16 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 137.131.26.115 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 137.131.26.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 00:12:12.903649 2026] [security2:error] [pid 22789:tid 22833] [client 137.131.26.115:3043] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.abusaimeh.com\|F\|2"] [data ".abusaimeh.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.abusaimeh.com"] [uri "/http/www.abusaimeh.com"] [unique_id "ajdknDWNrNhW5QaTvxRuvAAAAQo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-06-18 20:53:02 (2 weeks ago)	http-bad-user-agent - IP: 137.131.26.115 - time="2026-06-18T22:53:01+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 137.131.26.115 - time="2026-06-18T22:53:01+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 137.131.26.115 (US/31898) : 4h ban on Ip 137.131.26.115" module=db show less	Bad Web Bot
Anonymous	2026-06-18 13:01:15 (2 weeks ago)	Fail2ban filtered ...	Bad Web Bot
🇳🇱 Roderic	2026-06-17 13:54:08 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.18

🇺🇸 173.244.60.241

🇭🇰 129.226.114.61

🇿🇦 102.129.63.124

🇺🇸 45.249.59.71

🇩🇪 43.228.157.10

🇧🇪 207.175.79.48

🇺🇸 184.154.139.46

🇳🇱 178.16.53.101

🇩🇪 172.217.33.216

🇨🇳 111.42.132.19

🇮🇳 103.86.180.10

🇹🇷 94.154.43.181

🇦🇪 91.72.179.106

🇺🇸 52.203.30.46

🇨🇦 45.194.92.62

🇬🇧 35.203.211.105

🇬🇧 35.203.210.65

🇩🇪 4.184.246.230

🇧🇷 179.102.26.14