AbuseIPDB » 207.191.166.107
207.191.166.107 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 13% : ?
ISP
CREA SERVICIOS TECNOLรGICOS SAPEM
Usage Type
Fixed Line ISP
ASN
AS269924
Domain Name
oneinternet.com.ar
Country
๐ฆ๐ท
Argentina
City
Rivadavia, Mendoza
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 207.191.166.107 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
207.191.166.107 was first reported on
November 25th 2025 , and the most recent report was
3 days ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฉ๐ช
ghostwarriors
2026-07-01 08:20:14
(3 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
hermawan
2026-06-13 11:33:23
(3 weeks ago)
[Sat Jun 13 18:33:21.533597 2026] [security2:error] [pid 919606:tid 139664575919808] [client 207.191 ...
show more
[Sat Jun 13 18:33:21.533597 2026] [security2:error] [pid 919606:tid 139664575919808] [client 207.191.166.107:60769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-tahunan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-tahunan"] [unique_id "ai1AASSMCRJ1aiXgBb1ZIQAAiAg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[919615] [EaDX9aCRMUY] [ai1AASSMCRJ1aiXgBb1ZIQAAiAg] keep_alive=[1] [2026-06-13 18:33:21.533602] [R:ai1AASSMCRJ1aiXgBb1ZIQAAiAg] UA:'Mozilla/5.0 (Linux; Android 10; SM-S901B) AppleWeb
...
show less
Email Spam
Hacking
Anonymous
2026-04-16 04:53:06
(2 months ago)
Automated bot traffic โ residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ...
show more
Automated bot traffic โ residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
HandyTreff.de
2025-11-30 00:32:20
(7 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -18.704 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -18.704 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa
show less
Bad Web Bot
Web App Attack
๐ฑ๐น
NotACaptcha
2025-11-26 16:30:34
(7 months ago)
webserver:80 [26/Nov/2025] "GET http://www.ashunledevles.eu.org/rmy_ro/ro/PSA001.htm HTTP/1.1" 302 ...
show more
webserver:80 [26/Nov/2025] "GET http://www.ashunledevles.eu.org/rmy_ro/ro/PSA001.htm HTTP/1.1" 302 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0"
show less
Web App Attack
Anonymous
2025-11-25 13:40:11
(7 months ago)
scanning http requests from known botnet
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: