JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.100.198.133

157.100.198.133 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 29%: ?

29%

ISP	ECUANET - CORPORACION ECUATORIANA DE INFORMACION
Usage Type	Fixed Line ISP
ASN	AS27947
Hostname(s)	host-157-100-198-133.ecua.net.ec
Domain Name	ecua.net.ec
Country	🇪🇨 Ecuador
City	Guayaquil, Guayas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.100.198.133

Whois 157.100.198.133

IP Abuse Reports for 157.100.198.133:

This IP address has been reported a total of 29 times from 14 distinct sources. 157.100.198.133 was first reported on January 28th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 DamonOne	2026-10-16 01:15:04 (1 day ago)	Blocked by OPNsense; 36 hits, proto=udp, ports=13679,14469,16656,23341,23396,24713,2682,28903,30031, ... show more Blocked by OPNsense; 36 hits, proto=udp, ports=13679,14469,16656,23341,23396,24713,2682,28903,30031,30755,3 show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-10-03 04:56:33 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 157.100.198.133 (host-157-100-198-133.ecua.net. ... show more (mod_security) mod_security (id:210350) triggered by 157.100.198.133 (host-157-100-198-133.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 00:56:27.546159 2026] [security2:error] [pid 2365725:tid 2365725] [client 157.100.198.133:22842] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|carterrose.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "carterrose.com"] [uri "/"] [unique_id "asCK--FPHlBPgtjqIsHMxAAAAAU"], referer: https://buyingbacklinks.website/dir/backlinks-for-traffic-34750 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 19:25:21 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 157.100.198.133 (host-157-100-198-133.ecua.net. ... show more (mod_security) mod_security (id:210350) triggered by 157.100.198.133 (host-157-100-198-133.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 15:25:17.885943 2026] [security2:error] [pid 31367:tid 31367] [client 157.100.198.133:38188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|orleansdartclub.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "orleansdartclub.com"] [uri "/"] [unique_id "asAFHRkyZYyg_YbJ_bAjYAAAABo"], referer: https://linkbuildingtools.online/dir/powerful-link-building-155700 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-10-01 23:05:26 (2 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 鬼影233	2026-09-24 12:32:54 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 milcraft.nl	2026-09-23 13:20:48 (3 weeks ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-21 04:39:10 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 10:57:54 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-07 13:08:44 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-30 07:26:55 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Tilellit.PRO	2026-07-17 10:59:32 (2 months ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: eb7eac85-2c32-49f6-94ff-e8c25ad16083	DDoS Attack
🇺🇸 鬼影233	2026-02-01 00:58:55 (8 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-01-09 02:44:47 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇦🇺 MAGIC	2025-12-17 03:09:37 (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.109.255.143

🇧🇪 146.148.14.215

🇺🇸 136.87.117.82

🇨🇳 112.102.87.20

🇨🇭 104.251.180.112

🇷🇺 91.215.85.193

🇸🇬 47.84.139.171

🇳🇱 45.148.10.35

🇪🇨 38.19.73.81

🇧🇪 34.140.234.80

🇧🇪 34.78.64.142

🇧🇪 34.22.126.178

🇦🇺 217.79.116.151

🇦🇷 190.183.134.222

🇳🇱 178.128.247.154

🇫🇮 147.185.133.13

🇺🇸 99.7.112.60

🇺🇸 91.230.168.72

🇺🇸 76.33.47.3

🇩🇪 69.5.169.106