JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.100.203.90

157.100.203.90 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 27%: ?

27%

ISP	ECUANET - CORPORACION ECUATORIANA DE INFORMACION
Usage Type	Fixed Line ISP
ASN	AS27947
Hostname(s)	host-157-100-203-90.ecua.net.ec
Domain Name	ecua.net.ec
Country	🇪🇨 Ecuador
City	Quito, Pichincha

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.100.203.90

Whois 157.100.203.90

IP Abuse Reports for 157.100.203.90:

This IP address has been reported a total of 20 times from 11 distinct sources. 157.100.203.90 was first reported on November 25th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 francelink.fr	2026-10-23 12:15:30 (3 days ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-22T16:09:17.000Z.	Web App Attack
🇫🇷 MatStef132	2026-10-22 13:51:24 (4 days ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇮🇩 hermawan	2026-10-17 08:01:41 (1 week ago)	[Sat Oct 17 15:01:21.583759 2026] [security2:error] [pid 291421:tid 140148004091584] [client 157.100 ... show more [Sat Oct 17 15:01:21.583759 2026] [security2:error] [pid 291421:tid 140148004091584] [client 157.100.203.90:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "224"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=478&id=896%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-16-22-pebruari-2016&start=180 HTTP/1.1 Request URI RAW = /index.php/profil/arsip-artikel?catid=478&id=896%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-16-22-pebruari-2016&star..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "atMrUWtlLTx ... show less	Email Spam Hacking
🇺🇸 鬼影233	2026-10-03 05:24:14 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 18:48:31 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 06:35:29 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 22:07:57 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 06:45:37 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-19 18:03:48 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-11 09:15:28 (4 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-08 10:08:18 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇺 MAGIC	2026-05-04 02:06:34 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-28 02:34:41 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 157.100.203.90 (host-157-100-203-90.ecua.net.ec ... show more (mod_security) mod_security (id:210730) triggered by 157.100.203.90 (host-157-100-203-90.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 22:34:34.288201 2026] [security2:error] [pid 7037:tid 7037] [client 157.100.203.90:55368] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|red-jacket.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "red-jacket.com"] [uri "/[email protected]"] [unique_id "acc-OrOSrwvWSlzB1XtuTAAAAAw"], referer: http://red-jacket.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-24 12:32:02 (7 months ago)	2026-03-24 13:32:01 ERROR util.AccessViolations - 157.100.203.90 report to fail2ban - action: block ... show more 2026-03-24 13:32:01 ERROR util.AccessViolations - 157.100.203.90 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
🇮🇩 hermawan	2026-03-06 05:42:23 (7 months ago)	03/06/2026-12:41:15.459829 [Drop] [] [1:9200018:0] match JA4 hash Microsoft oai-searchbot openai. ... show more 03/06/2026-12:41:15.459829 [Drop] [] [1:9200018:0] match JA4 hash Microsoft oai-searchbot openai.com 74-7-241-181 [**] [Classification: (null)] [Priority: 3] {TCP} 157.100.203.90:30104 -> 103.166.156.58:443 ... show less	Email Spam Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.195.122.188

🇺🇸 205.210.31.44

🇺🇸 170.106.101.180

🇸🇬 167.71.211.40

🇻🇳 160.22.106.87

🇳🇱 138.226.239.21

🇨🇳 116.172.248.243

🇧🇷 190.111.129.121

🇧🇩 162.4.65.8

🇪🇨 157.100.105.224

🇨🇳 112.47.143.143

🇧🇩 101.2.167.10

🇫🇷 91.231.89.76

🇺🇸 91.230.168.237

🇺🇸 70.167.235.60

🇩🇪 69.5.169.222

🇮🇶 65.20.138.46

🇺🇸 45.204.124.211

🇭🇰 45.120.216.232

🇰🇷 218.234.186.2