JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

166.108.207.136

Neutral Activity

Abuse Confidence Score

0% Low Risk

71 reports

22 reporters · latest 1 year ago

ISP: Huawei-Cloud-SG
Usage Type: Data Center/Web Hosting/Transit
ASN: AS136907
Hostname(s): ecs-166-108-207-136.compute.hwclouds-dns.com
Domain Name: huawei.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

166.108.207.136 has been reported 71 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

71 from 22 distinct reporters

First reported

April 9th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 JuicyJ	2025-08-26 11:53:17 UTC · (1 year ago)	Excessive crawling/scraping	Web App Attack
🇺🇸 TPI-Abuse	2025-08-15 16:16:28 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 166.108.207.136 (ecs-166-108-207-136.compute.hwclouds-dns.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 15 12:16:25.427771 2025] [security2:error] [pid 17 ... show more (mod_security) mod_security (id:210730) triggered by 166.108.207.136 (ecs-166-108-207-136.compute.hwclouds-dns.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 15 12:16:25.427771 2025] [security2:error] [pid 17425:tid 17425] [client 166.108.207.136:37334] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|serviciodeimpermeabilizaciontijuana.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "serviciodeimpermeabilizaciontijuana.com"] [uri "/nosotros/instagram.com"] [unique_id "aJ9dWWu-HyzwxcNvWkPXswAAAAw"], referer: http://serviciodeimpermeabilizaciontijuana.com/nosotros/instagram.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-15 07:22:38 UTC · (1 year ago)	Malicious activity	Bad Web Bot Web App Attack
🇺🇸 lnklnx	2025-08-11 13:15:51 UTC · (1 year ago)	man-cave.lnklnx.com:443 166.108.207.136 - - [11/Aug/2025:08:15:48 -0500] "GET /documents/humble-assertAlmostEqual/porcelain-httpclientUnknownTransferEncoding/printcomplete/PyDTSFALT/prehistoric-eyelidthin/curable-halfseated/mesomeone-posixgetpid/life ... show more man-cave.lnklnx.com:443 166.108.207.136 - - [11/Aug/2025:08:15:48 -0500] "GET /documents/humble-assertAlmostEqual/porcelain-httpclientUnknownTransferEncoding/printcomplete/PyDTSFALT/prehistoric-eyelidthin/curable-halfseated/mesomeone-posixgetpid/lifelessly-endoskeleton/YouareHelen/jumpbays/Responsible/greenishyellow/biometric-doubting/backup/securitycamera/ HTTP/1.1" 200 3887 "https://man-cave.lnklnx.com/documents/humble-assertAlmostEqual/porcelain-httpclientUnknownTransferEncoding/printcomplete/PyDTSFALT/prehistoric-eyelidthin/curable-halfseated/mesomeone-posixgetpid/lifelessly-endoskeleton/YouareHelen/jumpbays/Responsible/greenishyellow/biometric-doubting/backup/securitycamera/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 Sklurk	2025-08-08 11:13:20 UTC · (1 year ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2025-08-07 10:05:13 UTC · (1 year ago)	Web App Attack	Web App Attack
🇦🇺 MAGIC	2025-08-05 03:03:05 UTC · (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2025-07-29 04:05:46 UTC · (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-07-28 16:18:00 UTC · (1 year ago)	Scraper not respecting robots.txt or not identifying itself properly ...	Bad Web Bot
🇫🇷 Sklurk	2025-07-28 08:03:12 UTC · (1 year ago)	Web App Attack	Web App Attack
Anonymous	2025-07-27 20:30:36 UTC · (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2025-07-27 15:45:23 UTC · (1 year ago)	Scraper not respecting robots.txt or not identifying itself properly ...	Bad Web Bot
Anonymous	2025-07-26 10:59:52 UTC · (1 year ago)	Scraper not respecting robots.txt or not identifying itself properly ...	Bad Web Bot
🇫🇷 Sklurk	2025-07-24 18:33:17 UTC · (1 year ago)	Web App Attack	Web App Attack
🇮🇩 hermawan	2025-07-22 16:02:47 UTC · (1 year ago)	[Tue Jul 22 23:02:16.391439 2025] [security2:error] [pid 626660:tid 140126465251008] [client 166.108.207.136:44310] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^$" at REQUEST_HEADERS:Cookie. [file "/etc/modsecurity/coreruleset- ... show more [Tue Jul 22 23:02:16.391439 2025] [security2:error] [pid 626660:tid 140126465251008] [client 166.108.207.136:44310] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^$" at REQUEST_HEADERS:Cookie. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1212"] [id "920291"] [msg "Empty Cookie"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: found within REQUEST_HEADERS:Cookie: request_line = GET / HTTP/2.0 Request URI RAW = / Request Basename = "] [severity "CRITICAL"] [ver "OWASP_CRS/4.10.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aH-2CKqdStwPQ2XnwYLfLgAAAgw"], referer https://staklim-jatim.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[626674] [ctpXtwYq+R ... show less	Hacking Web App Attack

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.124.24

🇺🇸 206.232.1.53

🇭🇰 154.92.2.59

🇦🇺 121.200.5.146

🇭🇺 94.27.162.124

🇨🇳 49.68.125.245

🇳🇱 45.148.10.141

🇰🇷 221.165.6.102

🇰🇷 221.161.235.168

🇺🇸 216.73.217.47

🇧🇪 207.175.165.55

🇺🇸 199.165.159.213

🇮🇳 182.75.234.236

🇬🇧 154.16.44.154

🇨🇳 124.67.120.106

🇩🇪 94.183.174.99

🇺🇸 75.82.243.137

🇺🇸 68.225.62.65

🇧🇪 35.210.150.149

🇺🇸 2001:470:1:332::18