JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.173.116.59

157.173.116.59 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3407709.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.173.116.59

Whois 157.173.116.59

IP Abuse Reports for 157.173.116.59:

This IP address has been reported a total of 107 times from 89 distinct sources. 157.173.116.59 was first reported on July 18th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 femboy.cat	2026-07-21 08:12:42 (3 hours ago)	Port scan to tcp/2375 from 157.173.116.59	Brute-Force
🇹🇼 tyetriiix	2026-07-21 07:29:56 (3 hours ago)	Wazuh Alert Evidence: 157.173.116.59 - - [21/Jul/2026:07:29:53 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/ ... show more Wazuh Alert Evidence: 157.173.116.59 - - [21/Jul/2026:07:29:53 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇬🇧 NotCool	2026-07-21 06:19:03 (4 hours ago)	(sshd) Failed SSH login from 157.173.116.59 (DE/Germany/vmi3407709.contaboserver.net): 50 in the las ... show more (sshd) Failed SSH login from 157.173.116.59 (DE/Germany/vmi3407709.contaboserver.net): 50 in the last 3600 secs show less	Brute-Force SSH
🇩🇪 mr.joecat	2026-07-21 06:04:26 (5 hours ago)	157.173.116.59 - - [21/Jul/2026:08:04:23 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more 157.173.116.59 - - [21/Jul/2026:08:04:23 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" 157.173.116.59 - - [21/Jul/2026:08:04:23 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" 157.173.116.59 - - [21/Jul/2026:08:04:24 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" 157.173.116.59 - - [21/Jul/2026:08:04:25 +0200] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" 157.173.116.59 - - [21/Jul/2026:08:04:26 +0200] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" ... show less	Web App Attack
🇮🇩 PENJAGA.AUM	2026-07-21 03:44:00 (7 hours ago)	157.173.116.59 - Attack: Path Traversal / Directory Traversal	Web App Attack SQL Injection Spoofing
🇩🇪 jotoma.de	2026-07-21 03:33:34 (7 hours ago)	2026-07-21T05:32:58.598217+02:00 canterlot.jotoma.de sshd[2276252]: Invalid user admin from 157.173. ... show more 2026-07-21T05:32:58.598217+02:00 canterlot.jotoma.de sshd[2276252]: Invalid user admin from 157.173.116.59 port 45750 2026-07-21T05:32:58.964438+02:00 canterlot.jotoma.de sshd[2276252]: Connection closed by invalid user admin 157.173.116.59 port 45750 [preauth] 2026-07-21T05:33:33.694194+02:00 canterlot.jotoma.de sshd[2276886]: Invalid user orangepi from 157.173.116.59 port 33162 ... show less	Brute-Force SSH
🇫🇷 evvsk	2026-07-21 02:34:57 (8 hours ago)	23/tcp	Port Scan IoT Targeted
🇧🇷 noconex	2026-07-21 02:29:50 (8 hours ago)	Wazuh Alert \| Rule ID: 110100 \| Desc: Suricata: Tentativa de exploit detectada de 157.173.116.59	Port Scan Brute-Force SSH
🇮🇪 AutosOnShow	2026-07-20 23:42:05 (11 hours ago)	blocked for webapp attack \| path requested: /index.php \| seen at 2026-07-20 23:41:52.719 \|	Web App Attack
Anonymous	2026-07-20 23:30:52 (11 hours ago)	157.173.116.59 - - [21/Jul/2026:01:30:52 +0200] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Ut ... show more 157.173.116.59 - - [21/Jul/2026:01:30:52 +0200] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 27 "-" "libredtail-http" ... show less	Hacking Bad Web Bot Web App Attack
🇭🇰 www.winos.me	2026-07-20 23:01:43 (12 hours ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇩🇪 mxpgmbh	2026-07-20 22:51:26 (12 hours ago)	2026-07-21T00:50:51.540752+02:00 ** sshd-session[44711]: pam_unix(sshd:auth): authentication failu ... show more 2026-07-21T00:50:51.540752+02:00 sshd-session[44711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.116.59 user=root 2026-07-21T00:50:53.559696+02:00 sshd-session[44711]: Failed password for root from 157.173.116.59 port 37222 ssh2 2026-07-21T00:51:24.268037+02:00 sshd-session[44977]: Invalid user from 157.173.116.59 port 58236 2026-07-21T00:51:24.270002+02:00 sshd-session[44977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.173.116.59 2026-07-21T00:51:26.047447+02:00 sshd-session[44977]: Failed password for invalid user ** from 157.173.116.59 port 58236 ssh2 show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-07-20 22:45:00 (12 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇹 CoreTech srl	2026-07-20 22:32:16 (12 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol,ndpi_tcp_issues, ... show more [DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol,ndpi_tcp_issues,ndpi_probing_attempt show less	Hacking
🇨🇿 ptlab	2026-07-20 22:00:06 (13 hours ago)	Detected lfi_path_traversal attack from WP-host.	Hacking Web App Attack

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.11.123.241

🇸🇬 168.144.140.219

🇩🇪 167.94.146.43

🇺🇸 162.216.150.248

🇺🇸 162.144.61.95

🇸🇬 139.59.234.162

🇺🇸 104.9.60.148

🇧🇬 79.124.40.126

🇺🇸 64.62.156.215

🇮🇳 49.32.195.206

🇳🇱 45.148.10.141

🇨🇭 209.99.190.200

🇦🇴 193.163.125.97

🇦🇷 190.112.191.222

🇺🇸 185.243.5.150

🇺🇸 162.216.150.116

🇺🇸 157.230.48.205

🇳🇿 149.19.26.122

🇺🇸 135.237.126.84

🇹🇼 128.14.236.128