JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.66.56.60

157.66.56.60 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 0%: ?

ISP	Argon Data Communication
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58477
Domain Name	argonhost.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.66.56.60

Whois 157.66.56.60

IP Abuse Reports for 157.66.56.60:

This IP address has been reported a total of 78 times from 55 distinct sources. 157.66.56.60 was first reported on June 30th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Niko's Stuff	2026-04-18 02:49:23 (2 months ago)	Triggered crowdsecurity/http-probing. More information at: https://app.crowdsec.net/cti/157.66.56.60	Web App Attack Hacking
Anonymous	2026-04-18 00:41:31 (2 months ago)	157.66.56.60 - - [18/Apr/2026:02:41:25 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 567 "- ... show more 157.66.56.60 - - [18/Apr/2026:02:41:25 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 157.66.56.60 - - [18/Apr/2026:02:41:28 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 157.66.56.60 - - [18/Apr/2026:02:41:29 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 157.66.56.60 - - [18/Apr/2026:02:41:30 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 157.66.56.60 - - [18/Apr/2026:02:41:30 +0200] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" ... show less	Brute-Force Web App Attack
🇫🇷 Baking333	2026-04-10 13:03:08 (2 months ago)	[redacted] 157.66.56.60 - - [10/Apr/2026:14:03:06 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" ... show more [redacted] 157.66.56.60 - - [10/Apr/2026:14:03:06 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" 302 5332 0/71791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 157.66.56.60 - - [10/Apr/2026:14:03:06 +0100] "GET /[redacted]?rsd HTTP/1.1" 302 1604 0/68222 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-04-10 11:35:43 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇺🇸 myagent.site	2026-04-10 09:29:09 (2 months ago)	Blocking for trying to access an exploit file: //xmlrpc.php?rsd	Hacking
🇳🇴 jlouisbiz	2026-04-10 08:28:05 (2 months ago)	157.66.56.60 - - [10/Apr/2026:08:19:29 +0000] "GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/ ... show more 157.66.56.60 - - [10/Apr/2026:08:19:29 +0000] "GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1" 404 734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Brute-Force
🇧🇪 cmbplf	2026-04-10 04:59:53 (2 months ago)	2.588 requests from abuseipdb.com blacklisted IP (2mos4w1d)	Brute-Force Bad Web Bot
🇬🇧 Mendip_Defender	2026-04-09 12:06:14 (2 months ago)	157.66.56.60 - - [09/Apr/2026:13:06:10 +0100] "GET /wp-includes/ID3/license.txt HTTP/1.0" 404 1073 " ... show more 157.66.56.60 - - [09/Apr/2026:13:06:10 +0100] "GET /wp-includes/ID3/license.txt HTTP/1.0" 404 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 157.66.56.60 - - [09/Apr/2026:13:06:10 +0100] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 157.66.56.60 - - [09/Apr/2026:13:06:10 +0100] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 1073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking Web App Attack
🇵🇱 sefinek.net	2026-04-09 11:28:48 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: //shop/wp-includes/wlwmanifest.xml \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-04-09 07:32:43 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇸🇪 nekopavel	2026-04-09 02:32:08 (2 months ago)	157.66.56.60 - - [09/Apr/2026:04:32:05 +0200]"GET //wp-includes/ID3/license.txt HTTP/1.1" 301 0"-" n ... show more 157.66.56.60 - - [09/Apr/2026:04:32:05 +0200]"GET //wp-includes/ID3/license.txt HTTP/1.1" 301 0"-" neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36""0.005" "0.003""-" "ID" 157.66.56.60 - - [09/Apr/2026:04:32:06 +0200]"GET /xmlrpc.php?rsd HTTP/1.1" 404 548"-" web.neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36""0.197" "0.004""-" "ID" 157.66.56.60 - - [09/Apr/2026:04:32:06 +0200]"GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548"-" web.neko.chat "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36""0.197" "0.004""-" "ID" ... show less	Hacking Bad Web Bot Web App Attack
🇨🇭 YF	2026-04-09 02:05:02 (2 months ago)	Unauthorized WordPress access attempt	Brute-Force Web App Attack
Anonymous	2026-04-09 02:00:15 (2 months ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇫🇷 Baking333	2026-04-08 19:50:33 (2 months ago)	[redacted] 157.66.56.60 - - [08/Apr/2026:20:50:31 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" ... show more [redacted] 157.66.56.60 - - [08/Apr/2026:20:50:31 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" 302 5272 0/158281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 157.66.56.60 - - [08/Apr/2026:20:50:32 +0100] "GET /[redacted]?rsd HTTP/1.1" 302 1544 0/61820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Bad Web Bot Web App Attack
🇵🇾 armandosaucedo.me	2026-04-08 04:15:00 (2 months ago)	Threat Intelligence via ARMTI, Web Attack: GET //wp-includes/ID3/license.txt	Web App Attack

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.244.240.251

🇮🇩 110.35.80.116

🇨🇦 85.217.149.48

🇳🇱 78.142.18.172

🇩🇪 51.75.64.35

🇻🇪 201.249.192.202

🇺🇸 169.197.88.115

🇺🇸 100.29.192.48

🇨🇳 58.48.170.235

🇳🇱 45.198.224.241

🇬🇧 35.203.210.166

🇺🇸 20.163.16.228

🇮🇪 18.203.176.87

🇺🇸 2604:a940:300:5b6:0:25::

🇬🇧 198.244.240.171

🇷🇺 185.233.186.93

🇺🇸 172.208.48.177

🇸🇬 129.226.88.44

🇺🇸 69.164.216.154

🇺🇸 66.132.224.24