JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.100.199.26

157.100.199.26 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 21%: ?

21%

ISP	ECUANET - CORPORACION ECUATORIANA DE INFORMACION
Usage Type	Fixed Line ISP
ASN	AS27947
Hostname(s)	host-157-100-199-26.ecua.net.ec
Domain Name	ecua.net.ec
Country	🇪🇨 Ecuador
City	Guayaquil, Guayas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.100.199.26

Whois 157.100.199.26

IP Abuse Reports for 157.100.199.26:

This IP address has been reported a total of 15 times from 11 distinct sources. 157.100.199.26 was first reported on August 27th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 21:57:11 (2 hours ago)	(mod_security) mod_security (id:210350) triggered by 157.100.199.26 (host-157-100-199-26.ecua.net.ec ... show more (mod_security) mod_security (id:210350) triggered by 157.100.199.26 (host-157-100-199-26.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 17:57:03.604360 2026] [security2:error] [pid 24813:tid 24813] [client 157.100.199.26:36270] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|portalvasco.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "portalvasco.com"] [uri "/blog"] [unique_id "atqGr2wVfnut7uaLmFI37QAAAA0"], referer: https://salvaj2uan.blogspot.com/2022/04/carne-de-sirena.html show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-09-26 00:20:37 (3 weeks ago)	Fail2Ban: 157.100.199.26 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 157.100.199.26 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-14 17:42:20 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-07 18:31:42 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 DrLex0	2026-08-31 22:32:13 (1 month ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 157.100.199.26 443 - [31/Aug/2026:22:32:13 +0000] "GET [redacted] HTTP/1.1" 410 6178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇳🇱 DrLex0	2026-08-27 20:58:31 (1 month ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 157.100.199.26 443 - [27/Aug/2026:20:58:31 +0000] "GET [redacted] HTTP/1.1" 410 6136 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-16 00:05:19 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-26 03:44:10 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-04 14:30:33 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 MPL	2026-05-01 18:18:41 (5 months ago)	tcp/443 (21 or more attempts)	Port Scan
🇩🇪 EGP Abuse Dept	2026-04-04 00:09:35 (6 months ago)	Scraping webshop URLs (www.dewijs-3d.com), likely botnet drone	Bad Web Bot Exploited Host
🇨🇭 backslash	2026-03-15 01:07:56 (7 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
Anonymous	2025-12-15 16:39:54 (10 months ago)	botnet	DDoS Attack
Anonymous	2025-11-20 02:13:08 (11 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-08-27 12:03:01 (1 year ago)	http-no-verb	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.4

🇰🇷 1.238.106.229

🇺🇸 209.250.4.112

🇩🇪 196.251.121.113

🇺🇸 194.33.45.73

🇬🇧 193.163.125.90

🇻🇳 171.231.182.40

🇵🇭 165.154.100.56

🇮🇪 108.130.21.190

🇬🇧 81.19.219.210

🇳🇱 81.19.216.88

🇳🇱 77.91.71.25

🇺🇸 45.45.237.69

🇺🇸 40.124.187.55

🇺🇸 40.83.182.122

🇧🇪 34.156.121.46

🇺🇸 24.149.98.78

🇺🇸 20.106.60.19

🇸🇬 8.219.164.15

🇫🇷 5.135.131.86