JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.100.199.206

157.100.199.206 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 27%: ?

27%

ISP	ECUANET - CORPORACION ECUATORIANA DE INFORMACION
Usage Type	Fixed Line ISP
ASN	AS27947
Hostname(s)	host-157-100-199-206.ecua.net.ec
Domain Name	ecua.net.ec
Country	🇪🇨 Ecuador
City	Guayaquil, Guayas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.100.199.206

Whois 157.100.199.206

IP Abuse Reports for 157.100.199.206:

This IP address has been reported a total of 25 times from 15 distinct sources. 157.100.199.206 was first reported on May 20th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-09-02 06:00:55 (3 hours ago)	Fail2Ban: 157.100.199.206 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 157.100.199.206 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇬 garrymenata	2026-08-23 21:35:17 (1 week ago)	157.100.199.206 - - [24/Aug/2026:01:18:58 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; ... show more 157.100.199.206 - - [24/Aug/2026:01:18:58 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 157.100.199.206 - - [24/Aug/2026:01:19:00 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 157.100.199.206 - - [24/Aug/2026:01:19:02 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-19 21:55:13 (1 week ago)	UDP flood (DDoS) vs AS215599: 448 pkts / 0.64 MB to UDP 80/8443 across 108 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 448 pkts / 0.64 MB to UDP 80/8443 across 108 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:55:13 (1 week ago)	UDP flood (DDoS) vs AS215599: 448 pkts / 0.64 MB to UDP 80/8443 across 108 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 448 pkts / 0.64 MB to UDP 80/8443 across 108 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 SX Communications	2026-08-09 18:10:29 (3 weeks ago)	Web vulnerability scanning / probing from 157.100.199.206: automated requests for CMS admin paths, l ... show more Web vulnerability scanning / probing from 157.100.199.206: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /Forums/General-Discussion/Links. show less	Port Scan Hacking Web App Attack
🇺🇸 SX Communications	2026-08-09 18:10:29 (3 weeks ago)	HTTP application-layer DoS / botnet traffic from 157.100.199.206: repeated high-cost dynamic page an ... show more HTTP application-layer DoS / botnet traffic from 157.100.199.206: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-07-22 10:45:53 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 pltcldvlpr	2026-06-14 23:04:48 (2 months ago)	Bogus Useragent: 157.100.199.206 - - [14/Jun/2026:14:55:51 +0200] "GET /protocol?id=bb_3_72&paragrap ... show more Bogus Useragent: 157.100.199.206 - - [14/Jun/2026:14:55:51 +0200] "GET /protocol?id=bb_3_72&paragraph=75612&seq=985 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (compatible; MSIE 5.0; Windows 98; Trident/5.1)" asn=27947 org="Telconet S.A" country=EC ... show less	Bad Web Bot
🇨🇭 backslash	2026-06-06 15:48:00 (2 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇩🇪 filstal.org	2026-05-02 02:23:48 (4 months ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_8_8; rv:1.9.6.20) Gecko ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_8_8; rv:1.9.6.20) Gecko/3903-04-02 00:39:17.841591 Firefox/9.0). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-23 11:31:23 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-25 08:45:46 (9 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-21 19:36:08 (9 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-16 03:17:20 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇦🇺 MAGIC	2025-09-18 00:17:00 (11 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 107.150.112.48

🇩🇪 91.92.240.38

🇹🇷 88.238.105.143

🇺🇸 82.117.89.135

🇻🇪 66.9.161.197

🇨🇳 47.109.134.2

🇸🇪 46.59.91.85

🇬🇧 45.82.76.139

🇻🇳 14.225.52.228

🇺🇸 2604:a880:400:d1:0:4:e8e3:3001

🇨🇳 221.201.24.99

🇳🇱 204.76.203.221

🇵🇰 202.47.53.194

🇷🇴 193.46.255.86

🇫🇷 144.91.121.61

🇬🇧 89.238.165.139

🇮🇶 65.20.132.230

🇩🇪 45.82.81.212

🇪🇬 41.178.230.115

🇦🇷 186.123.136.217