JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.66.56.138

Neutral Activity

Abuse confidence score ?

0% Low Risk

47 reports

25 reporters · latest 4 months ago

ISP	Argon Data Communication
Usage Type	Fixed Line ISP
ASN	AS58477
Domain Name	argonhost.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

157.66.56.138 has been reported 47 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 157.66.56.138

Export CSV

This IP address has been reported a total of 47 times from 25 distinct sources. 157.66.56.138 was first reported on March 16th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 fazar	2026-05-27 00:48:55 (4 months ago)	crowdsecurity/http-admin-interface-probing on node: us01	Web App Attack Hacking
🇮🇩 Burayot	2026-05-25 15:53:47 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.66.56.138 (ID/Indonesia/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.66.56.138 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 Burayot	2026-05-24 10:47:32 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.66.56.138 (ID/Indonesia/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.66.56.138 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 Burayot	2026-05-23 18:20:54 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.66.56.138 (ID/Indonesia/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.66.56.138 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack
🇮🇩 sockominfo	2026-05-09 11:00:44 (5 months ago)	Webshell discovery success (Response: 200). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v ... show more Webshell discovery success (Response: 200). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-05-09 10:00:39 (5 months ago)	Webshell discovery success (Response: 200). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v ... show more Webshell discovery success (Response: 200). Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-05-09 09:00:39 (5 months ago)	Webshell discovery success (Response: 200). Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3. ... show more Webshell discovery success (Response: 200). Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-05-09 08:00:12 (5 months ago)	Webshell discovery success (Response: 200). Threat Score: 8.2/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.2/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-05-09 07:00:28 (5 months ago)	Webshell discovery success (Response: 200). Threat Score: 7.6/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 7.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-05-07 21:00:48 (5 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇩 sockominfo	2026-05-07 20:00:13 (5 months ago)	Webshell discovery success (Response: 200). Threat Score: 8.2/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.2/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-05-07 19:00:40 (5 months ago)	Webshell discovery success (Response: 200). Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3. ... show more Webshell discovery success (Response: 200). Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇳🇱 BlueWire Hosting	2026-04-16 14:12:45 (5 months ago)	Probing websites for vulnerabilities	Web App Attack
🇬🇧 BRHosting	2026-04-15 22:43:02 (5 months ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇺🇸 jormaster3k	2026-04-14 04:56:49 (6 months ago)	Attack against WordPress	Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.107.164.87

🇺🇸 172.98.32.133

🇩🇪 93.152.221.37

🇺🇸 64.205.112.76

🇺🇸 17.166.154.170

🇳🇱 193.47.62.69

🇪🇸 162.158.120.193

🇳🇱 154.6.145.14

🇨🇳 123.245.85.220

🇨🇳 112.26.30.212

🇷🇺 37.113.113.77

🇹🇼 35.221.157.128

🇺🇸 34.127.53.21

🇬🇧 31.14.254.27

🇮🇩 202.155.18.56

🇻🇳 171.232.54.177

🇻🇳 116.102.212.36

🇫🇷 91.196.152.73

🇻🇳 42.1.65.123

🇨🇳 36.135.100.48