JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.21.157.66

107.21.157.66 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 29%: ?

29%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-107-21-157-66.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.21.157.66

Whois 107.21.157.66

IP Abuse Reports for 107.21.157.66:

This IP address has been reported a total of 21 times from 4 distinct sources. 107.21.157.66 was first reported on August 2nd 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 12:27:44 (15 hours ago)	(mod_security) mod_security (id:210730) triggered by 107.21.157.66 (ec2-107-21-157-66.compute-1.amaz ... show more (mod_security) mod_security (id:210730) triggered by 107.21.157.66 (ec2-107-21-157-66.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:27:39.311686 2026] [security2:error] [pid 3623:tid 3623] [client 107.21.157.66:55412] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|john-bell-associates.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "john-bell-associates.com"] [uri "/reddit.com"] [unique_id "aqqLOxE5juf8kOjXKmuBFAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 maxasp.net	2026-09-15 09:00:30 (1 day ago)	Inc-HTTP-Safe Reject, collection = Risk Profile; Attack Var: Direct Spam; Attack Data: Blank Referer ... show more Inc-HTTP-Safe Reject, collection = Risk Profile; Attack Var: Direct Spam; Attack Data: Blank Referer; inc_http_safe_overall_risk: medium; script_name: /login/index.asp; ip attacks: 25; subnet attacks: 25 show less	SQL Injection
🇺🇸 SX Communications	2026-09-13 16:33:18 (3 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-13 03:44:23 (4 days ago)	HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇸🇪 KIDOS	2026-09-12 20:55:21 (4 days ago)	IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)	Web App Attack
🇺🇸 SX Communications	2026-09-12 07:37:00 (4 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-11 05:52:36 (5 days ago)	HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-09 14:54:26 (1 week ago)	HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-08 09:13:31 (1 week ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-05 23:36:44 (1 week ago)	HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-05 05:36:57 (1 week ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-03 15:34:39 (1 week ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-02 16:09:16 (2 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-08-29 16:55:07 (2 weeks ago)	HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 107.21.157.66: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-08-29 09:46:22 (2 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 107.21.157.66: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.135

🇫🇷 212.114.28.102

🇳🇵 202.166.218.213

🇺🇸 184.105.139.68

🇳🇱 176.65.149.212

🇪🇸 173.254.229.24

🇩🇪 167.94.146.32

🇰🇿 109.248.156.49

🇧🇬 109.160.32.26

🇰🇼 78.154.226.230

🇺🇸 64.62.197.194

🇰🇷 59.24.28.114

🇻🇪 38.17.178.216

🇺🇸 35.253.152.111

🇬🇧 35.203.210.91

🇺🇸 12.138.125.82

🇧🇷 200.106.183.4

🇺🇸 198.64.108.210

🇧🇪 161.123.23.223

🇲🇦 102.97.190.131