JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.66.56.12

157.66.56.12 was found in our database!

This IP was reported 441 times. Confidence of Abuse is 0%: ?

ISP	Argon Data Communication
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58477
Domain Name	argonhost.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.66.56.12

Whois 157.66.56.12

IP Abuse Reports for 157.66.56.12:

This IP address has been reported a total of 441 times from 160 distinct sources. 157.66.56.12 was first reported on October 9th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sverson	2026-01-16 01:27:06 (5 months ago)	Mutliple unauthorized attempts to access web resources	Web App Attack
🇫🇷 vtchost.com	2026-01-15 20:53:00 (5 months ago)	HTTP honeypot triggered - ignoring robots.txt \\| potential virus infected client or botnet ...	Bad Web Bot Exploited Host
🇨🇿 ddw	2026-01-15 20:33:15 (5 months ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
🇬🇧 pinguin	2026-01-15 20:26:27 (5 months ago)	Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /sftp-config.json UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-01-15 20:18:58 (5 months ago)		Web App Attack
🇫🇮 oh.mg	2026-01-15 17:17:54 (5 months ago)	[Thu Jan 15 18:17:50.554863 2026] [security2:error] [pid 1509469:tid 1509473] [client 157.66.56.12:6 ... show more [Thu Jan 15 18:17:50.554863 2026] [security2:error] [pid 1509469:tid 1509473] [client 157.66.56.12:64045] [client 157.66.56.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.on.ca"] [uri "/sftp-config.json"] [unique_id "aWkhPhqND-S0MrGRzZxYCwAAAkI"] [Thu Jan 15 18:17:53.852090 2026] [security2:error] [pid 1509469:tid 1509474] [client 157.66.56.12:64416] [client 157.66.56.12] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [t ... show less	Bad Web Bot Web App Attack
🇺🇸 etu brutus	2026-01-15 16:24:37 (5 months ago)	157.66.56.12 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇸 rdpguard.com	2026-01-15 16:10:28 (5 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 jkcunningham	2026-01-15 15:05:08 (5 months ago)	Scans for exposed system files. Spoofs browser agent.	Hacking Bad Web Bot
Anonymous	2026-01-15 14:39:27 (5 months ago)	Automated report (2026-01-15T09:39:27-05:00). Caught probing for exposed FTP credentials.	Hacking
🇧🇪 madeit	2026-01-15 09:11:00 (5 months ago)		Web App Attack
🇺🇸 entangled_mongoose	2026-01-15 08:55:23 (5 months ago)	Probed /.vscode/sftp.json.	Web App Attack
🇵🇱 sefinek.net	2026-01-15 06:11:06 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /sftp-config.json UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇹 René Hickersberger	2026-01-15 06:07:38 (5 months ago)	[2026-01-15T06:07:38Z] Malicious request to /.vscode/sftp.json	Hacking Bad Web Bot Web App Attack
🇬🇧 CrystalMaker	2026-01-15 04:11:13 (5 months ago)	Vulnerability scan - GET /sftp-config.json; GET /.vscode/sftp.json; GET /sftp-config.json; GET /.vsc ... show more Vulnerability scan - GET /sftp-config.json; GET /.vscode/sftp.json; GET /sftp-config.json; GET /.vscode/sftp.json show less	Hacking

Showing 1 to 15 of 441 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 167.99.197.34

🇺🇸 2a04:4e40:4410:0:7f:2b2b:d9f:d5fb

🇭🇰 199.45.154.177

🇬🇧 195.96.139.187

🇳🇬 102.91.77.218

🇩🇪 64.226.93.157

🇺🇸 44.134.7.144

🇩🇪 43.228.157.8

🇺🇸 23.44.170.8

🇰🇷 222.111.95.253

🇬🇧 195.96.139.137

🇬🇧 188.240.59.33

🇵🇭 119.93.249.179

🇱🇹 84.15.250.81

🇬🇧 77.72.5.59

🇺🇸 44.225.209.201

🇱🇰 220.247.224.226

🇮🇹 217.26.179.90

🇺🇸 195.184.76.94

🇫🇷 185.185.82.158