JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.100.140.103

157.100.140.103 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 31%: ?

31%

ISP	ECUANET - CORPORACION ECUATORIANA DE INFORMACION
Usage Type	Fixed Line ISP
ASN	AS27947
Hostname(s)	host-157-100-140-103.ecua.net.ec
Domain Name	ecua.net.ec
Country	🇪🇨 Ecuador
City	Quito, Pichincha

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.100.140.103

Whois 157.100.140.103

IP Abuse Reports for 157.100.140.103:

This IP address has been reported a total of 16 times from 9 distinct sources. 157.100.140.103 was first reported on December 7th 2023, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-25 19:54:34 (9 hours ago)	(mod_security) mod_security (id:210730) triggered by 157.100.140.103 (host-157-100-140-103.ecua.net. ... show more (mod_security) mod_security (id:210730) triggered by 157.100.140.103 (host-157-100-140-103.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:54:31.110562 2026] [security2:error] [pid 24610:tid 24610] [client 157.100.140.103:18200] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.john-bell-associates.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.john-bell-associates.com"] [uri "/reddit.com"] [unique_id "ao3y96uiEBpfy4g0qALXHAAAAAw"], referer: https://www.john-bell-associates.com show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 masterguru	2026-08-25 07:01:51 (22 hours ago)	Blocked scraper: Distributed DDoS IP.. String match "sc_product_" at QUERY_STRING. (200101-185)	Hacking
🇺🇸 gui-ying233	2026-08-22 09:04:31 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 15:04:58 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-12 23:34:20 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-01 23:07:24 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-07-30 00:00:08 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-29 02:38:22 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-06-26 01:11:59 (2 months ago)	157.100.140.103 \| Port: 13531 \| DNS: host-157-100-140-103.ecua.net.ec 2026-06-26T09:11:58+08:00 Amer ... show more 157.100.140.103 \| Port: 13531 \| DNS: host-157-100-140-103.ecua.net.ec 2026-06-26T09:11:58+08:00 America/Guayaquil \| HOST Data Center/Web Hosting/Transit Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 HTTP/1.1 443 GET \| URL: /ms?be9dacddfe9fae8dd=708 \| Ref: https://xxxxxx \| Country: EC/Ecuador/−05:00 IP City: Quito Windows a1185740d9802458-ATL/Atlanta, GA, United States 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇸🇬 mypatricks	2026-06-25 07:00:42 (2 months ago)	157.100.140.103 \| Port: 13267 \| DNS: host-157-100-140-103.ecua.net.ec 2026-06-25T15:00:41+08:00 Amer ... show more 157.100.140.103 \| Port: 13267 \| DNS: host-157-100-140-103.ecua.net.ec 2026-06-25T15:00:41+08:00 America/Guayaquil \| HOST Data Center/Web Hosting/Transit Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /ms?bc9ebedae9c8be98edb9=663 \| Ref: https://xxxxxx \| Country: EC/Ecuador/−05:00 IP City: Quito Windows a11218acac458255-GYE/Guayaquil, Ecuador 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous	2025-11-17 21:55:10 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-08-08 18:08:53 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-08-04 18:10:01 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇬🇧 Aetherweb Ark	2025-01-25 02:50:30 (1 year ago)	157.100.140.103 (EC/Ecuador/host-157-100-140-103.ecua.net.ec), N distributed cpanel attacks on accou ... show more 157.100.140.103 (EC/Ecuador/host-157-100-140-103.ecua.net.ec), N distributed cpanel attacks on account in the last X secs show less	Hacking
🇺🇸 hostseries	2024-08-06 15:19:40 (2 years ago)	Trigger: LF_DISTATTACK	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.164.64.143

🇺🇸 205.210.31.107

🇹🇭 203.154.158.195

🇭🇰 199.45.154.72

🇲🇽 189.203.174.29

🇧🇷 189.50.48.163

🇧🇷 168.194.164.3

🇹🇼 114.24.115.218

🇦🇹 109.70.100.2

🇨🇳 61.134.163.244

🇺🇸 45.55.236.117

🇧🇪 34.76.72.207

🇵🇰 223.123.92.56

🇧🇷 201.17.146.173

🇦🇷 186.61.159.76

🇫🇷 185.177.72.38

🇫🇮 147.185.133.74

🇺🇸 147.185.132.103

🇫🇷 146.70.194.236

🇨🇳 111.40.114.102