This IP address has been reported a total of
6
times from
4 distinct
sources.
157.173.104.242 was first reported on
June 8th 2026 , and the most recent report was
1 day ago Czechia
with 1
report;
France
with 1
report;
Indonesia
with 1
report.
The most common categories in these recent reports were:
Web App Attack
2
times;
Hacking
2
times;
Bad Web Bot
2
times;
Brute-Force
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-10 12:46:38
(1 day ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇺🇸
TPI-Abuse
2026-09-14 14:06:46
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 157.173.104.242 (vmi3173202.contaboserver.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 157.173.104.242 (vmi3173202.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:06:38.144321 2026] [security2:error] [pid 23405:tid 23405] [client 157.173.104.242:42354] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.stepiz62.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stepiz62.com"] [uri "/joty/resources/JotyResponse.xsd"] [unique_id "aqf_boK2w3sn-z6stlVICAAAAAU"], referer: http://www.stepiz62.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-09-01 01:24:09
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 157.173.104.242 (FR/France/vmi3173 ...
show more
LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 157.173.104.242 (FR/France/vmi3173202.contaboserver.net): 2 in the last 3600 secs
show less
Web App Attack
🇫🇷
masterguru
2026-08-14 00:28:15
(1 month ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.173.104.242 (DE/Germany/vmi3173202.contabo ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.173.104.242 (DE/Germany/vmi3173202.contaboserver.net): 1 in the last 3600 secs (0-196)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-28 05:28:28
(3 months ago)
(mod_security) mod_security (id:217210) triggered by 157.173.104.242 (vmi3173202.contaboserver.net): ...
show more
(mod_security) mod_security (id:217210) triggered by 157.173.104.242 (vmi3173202.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 01:28:24.185711 2026] [security2:error] [pid 20305:tid 20305] [client 157.173.104.242:51484] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||acpalms.com|F|4"] [data "GET ?C=D;O=A HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acpalms.com"] [uri "/"] [unique_id "akCw-AFJ65pqLtEdaKVRqQAAABM"], referer: https://acpalms.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 16:07:12
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 157.173.104.242 (vmi3173202.contaboserver.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 157.173.104.242 (vmi3173202.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 12:07:08.550270 2026] [security2:error] [pid 16990:tid 16990] [client 157.173.104.242:45976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adoniahenterprises.com"] [uri "/goober_.htaccess.preinstall"] [unique_id "aiborBTyXspy63p9UXWBjQAAAAk"], referer: https://adoniahenterprises.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
