JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.100.199.138

157.100.199.138 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 20%: ?

20%

ISP	ECUANET - CORPORACION ECUATORIANA DE INFORMACION
Usage Type	Fixed Line ISP
ASN	AS27947
Hostname(s)	host-157-100-199-138.ecua.net.ec
Domain Name	ecua.net.ec
Country	🇪🇨 Ecuador
City	Guayaquil, Guayas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.100.199.138

Whois 157.100.199.138

IP Abuse Reports for 157.100.199.138:

This IP address has been reported a total of 28 times from 12 distinct sources. 157.100.199.138 was first reported on July 24th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 francelink.fr	2026-10-26 11:16:31 (23 hours ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-26T11:14:00.000Z.	Web App Attack
🇺🇸 鬼影233	2026-09-29 22:47:12 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-28 11:05:46 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-26 15:11:46 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-25 00:22:59 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-22 04:47:59 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 157.100.199.138 (host-157-100-199-138.ecua.net. ... show more (mod_security) mod_security (id:210350) triggered by 157.100.199.138 (host-157-100-199-138.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:47:54.629092 2026] [security2:error] [pid 29138:tid 29138] [client 157.100.199.138:64432] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|veracurnow.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "veracurnow.com"] [uri "/"] [unique_id "arIIeh2uaewsafPPxbaGPAAAAA0"], referer: https://bartoe-art.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-22 03:36:16 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 08:21:40 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-13 15:23:26 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-07 19:11:05 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 Zandro	2026-09-02 05:00:14 (1 month ago)	distributed harvester	DDoS Attack Bad Web Bot Exploited Host
🇨🇭 backslash	2026-08-14 07:33:03 (2 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇺🇸 stechusa	2026-07-11 19:39:15 (3 months ago)	[Askari] \| Behavior: HTTP/1.1 over TLS, Concurrent page load during attack, Holding server worker, T ... show more [Askari] \| Behavior: HTTP/1.1 over TLS, Concurrent page load during attack, Holding server worker, Targeting specific pages, URL template abuse show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-07-11 19:39:15 (3 months ago)	ELEVATED_THREAT \| 281 IPs targeting /brand.html \| URL template shared by 134 IPs: /brand.html?bulb_s ... show more ELEVATED_THREAT \| 281 IPs targeting /brand.html \| URL template shared by 134 IPs: /brand.html?bulb_shape=&bulb_shape_type=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.92, unique_ips=399) show less	Bad Web Bot DDoS Attack
🇳🇱 maxxsense	2026-04-07 02:55:26 (6 months ago)	157.100.199.138 (EC/Ecuador/host-157-100-199-138.ecua.net.ec), 12 distributed imapd attacks on accou ... show more 157.100.199.138 (EC/Ecuador/host-157-100-199-138.ecua.net.ec), 12 distributed imapd attacks on account [redacted] show less	Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇦🇷 190.97.35.185

🇯🇵 152.32.201.217

🇨🇴 143.105.99.66

🇱🇰 112.135.111.4

🇸🇬 2a12:f547:67fa:54a0:e51d:f2dc:5f96:910b

🇧🇷 191.202.74.195

🇸🇬 188.166.222.35

🇺🇸 137.184.23.255

🇮🇳 122.166.154.21

🇳🇱 94.154.43.223

🇩🇪 69.5.169.103

🇺🇸 66.132.195.212

🇮🇳 59.179.31.238

🇺🇸 57.141.20.5

🇱🇹 45.151.45.30

🇺🇸 20.84.91.51

🇳🇱 204.76.203.44

🇦🇷 181.24.130.208

🇮🇳 103.248.120.6