JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.66.56.94

157.66.56.94 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Argon Data Communication
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58477
Domain Name	argonhost.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.66.56.94

Whois 157.66.56.94

IP Abuse Reports for 157.66.56.94:

This IP address has been reported a total of 38 times from 29 distinct sources. 157.66.56.94 was first reported on July 6th 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 conseilgouz	2026-08-24 07:40:48 (21 minutes ago)	gie-17 : Block hidden directories=>/.vscode/sftp.json(/)	Hacking
🇦🇺 nzhost.co.nz	2026-08-24 06:13:13 (1 hour ago)	$f2bV_matches	Hacking Brute-Force
🇩🇪 big-cloud.nl	2026-08-24 04:26:47 (3 hours ago)	Try to access /.vscode/sftp.json	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 20:06:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 157.66.56.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.66.56.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:06:01.904617 2026] [security2:error] [pid 28945:tid 28945] [client 157.66.56.94:59974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayarealangarts.com"] [uri "/sftp-config.json"] [unique_id "aooBKT41SKg68U_WSjVEtAAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 19:36:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 157.66.56.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.66.56.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:36:15.395791 2026] [security2:error] [pid 22647:tid 22647] [client 157.66.56.94:64265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agupgrade.net"] [uri "/sftp-config.json"] [unique_id "aon6L-90Gs76A0POEgsOIQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-08-22 12:30:36 (1 day ago)	Config JSON probe	Web App Attack
🇺🇸 Aurealize	2026-08-22 12:00:30 (1 day ago)	Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: /.vscode/ ... show more Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: /.vscode/sftp.json. show less	Hacking Web App Attack
🇫🇷 Baking333	2026-08-22 11:37:38 (1 day ago)	[redacted] 157.66.56.94 - - [22/Aug/2026:12:37:36 +0100] "GET /[redacted] HTTP/2.0" 301 301 "-" "Moz ... show more [redacted] 157.66.56.94 - - [22/Aug/2026:12:37:36 +0100] "GET /[redacted] HTTP/2.0" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" [redacted] 157.66.56.94 - - [22/Aug/2026:12:37:36 +0100] "GET /.vscode/[redacted] HTTP/2.0" 301 300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-08-22 09:27:59 (1 day ago)	FortiWeb WAF: 4 attacks detected. Threat Score: 5200. Types: Client Management(2), Block IP List(2). ... show more FortiWeb WAF: 4 attacks detected. Threat Score: 5200. Types: Client Management(2), Block IP List(2). Origin: Indonesia. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 07:12:50 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 157.66.56.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.66.56.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 03:12:44.878031 2026] [security2:error] [pid 29084:tid 29084] [client 157.66.56.94:65401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skyminor.com"] [uri "/sftp-config.json"] [unique_id "aolL7DnDJQwQjeUWDSwNMgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 tutaim.com	2026-08-22 07:00:15 (2 days ago)	⛔ [22/08/26] This IP has been detected performing multiple attacks on websites (3 attempts blocked). ... show more ⛔ [22/08/26] This IP has been detected performing multiple attacks on websites (3 attempts blocked). Potential malicious activity. show less	Brute-Force SSH Web App Attack FTP Brute-Force
Anonymous	2026-08-22 05:08:00 (2 days ago)	Multiple Violations by Bot	Port Scan Web App Attack
🇫🇷 Baking333	2026-08-22 04:44:12 (2 days ago)	[redacted] 157.66.56.94 - - [22/Aug/2026:05:44:11 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6868 ... show more [redacted] 157.66.56.94 - - [22/Aug/2026:05:44:11 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6868 0/66179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 157.66.56.94 - - [22/Aug/2026:05:44:11 +0100] "GET /[redacted] HTTP/1.1" 302 6863 0/50084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-08-22 04:10:21 (2 days ago)	Zombie network / Bot scanner detected: [GET] /sftp-config.json [GET] /.vscode/sftp.json UA: Mozill ... show more Zombie network / Bot scanner detected: [GET] /sftp-config.json [GET] /.vscode/sftp.json UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 show less	Bad Web Bot Exploited Host Web App Attack
🇬🇧 Yosi	2026-08-22 03:45:03 (2 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 85.95.188.36

🇮🇳 2405:201:302f:510a:50ce:835e:84f0:936d

🇧🇪 198.235.24.245

🇧🇪 198.235.24.244

🇹🇼 198.235.24.26

🇫🇮 185.246.191.53

🇮🇳 103.182.132.154

🇺🇸 91.230.168.164

🇨🇦 85.217.149.18

🇸🇪 83.255.102.217

🇮🇳 2401:4900:1c96:1d31:c18d:6656:9cd3:6b52

🇧🇪 198.235.24.241

🇧🇪 198.235.24.238

🇹🇼 198.235.24.15

🇰🇿 185.233.3.95

🇳🇱 185.135.212.58

🇨🇦 172.105.16.190

🇺🇸 136.144.43.175

🇺🇸 103.115.10.150

🇺🇸 74.82.47.18