JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

52.66.112.129

Activity Trending Down

Abuse Confidence Score

86% Critical

28 reports

23 reporters · latest 1 week ago

ISP: Amazon Data Services India
Usage Type: Data Center/Web Hosting/Transit
ASN: AS16509
Hostname(s): ec2-52-66-112-129.ap-south-1.compute.amazonaws.com
Domain Name: amazon.com
Country: 🇮🇳 India
City: Mumbai, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

28 from 23 distinct reporters

First reported

October 26th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 10 🇫🇷 France 4 🇩🇪 Germany 3

Most common categories SSH 25 Brute-Force 23 Port Scan 4 Hacking 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 david.houstin	2026-10-27 00:31:38 UTC · (1 week ago)	2026-10-27T02:31:32.815276+02:00 vps-a3e99d67 sshd-session[1721997]: Invalid user user from 52.66.112.129 port 59454 2026-10-27T02:31:33.537085+02:00 vps-a3e99d67 sshd-session[1721999]: Invalid user user from 52.66.112.129 port 59462 2026-10-27T02:31 ... show more 2026-10-27T02:31:32.815276+02:00 vps-a3e99d67 sshd-session[1721997]: Invalid user user from 52.66.112.129 port 59454 2026-10-27T02:31:33.537085+02:00 vps-a3e99d67 sshd-session[1721999]: Invalid user user from 52.66.112.129 port 59462 2026-10-27T02:31:34.272689+02:00 vps-a3e99d67 sshd-session[1722001]: Invalid user user from 52.66.112.129 port 59464 ... show less	Brute-Force SSH
🇷🇴 focusnic.com	2026-10-26 23:47:26 UTC · (1 week ago)	Multiple SSH login attempts from 52.66.112.129 targeting user(s): root \| Server Managed by Focusnic	Brute-Force SSH
🇫🇷 mailox	2026-10-26 23:24:02 UTC · (1 week ago)	Unauthorized SSH connection on tarpit ...	SSH
🇯🇵 CowGL	2026-10-26 22:36:39 UTC · (1 week ago)	2026-10-26T22:36:36.369561cowgrassland sshd[1786326]: Connection closed by authenticating user root 52.66.112.129 port 48392 [preauth] 2026-10-26T22:36:37.160644cowgrassland sshd[1786329]: Connection closed by authenticating user root 52.66.112.129 p ... show more 2026-10-26T22:36:36.369561cowgrassland sshd[1786326]: Connection closed by authenticating user root 52.66.112.129 port 48392 [preauth] 2026-10-26T22:36:37.160644cowgrassland sshd[1786329]: Connection closed by authenticating user root 52.66.112.129 port 48402 [preauth] 2026-10-26T22:36:37.938282cowgrassland sshd[1786363]: Connection closed by authenticating user root 52.66.112.129 port 48418 [preauth] 2026-10-26T22:36:38.717524cowgrassland sshd[1786369]: Connection closed by authenticating user root 52.66.112.129 port 48422 [preauth] show less	Brute-Force SSH
🇺🇸 pelopeano	2026-10-26 22:00:18 UTC · (1 week ago)	Fail2Ban ssh-iptables: repeated failed authentication attempts	Brute-Force SSH
🇫🇷 Kejult	2026-10-26 21:10:31 UTC · (1 week ago)	Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.	Hacking SSH
🇨🇦 ImMarvolo	2026-10-26 19:20:19 UTC · (1 week ago)	Unauthorized connection attempt detected ca-bhs-01, SSH Brute-Force	Brute-Force SSH
Anonymous	2026-10-26 18:37:09 UTC · (1 week ago)	2026-10-26T21:37:06.168994zimbra sshd[9193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-66-112-129.ap-south-1.compute.amazonaws.com user=root 2026-10-26T21:37:08.510897zimbra sshd[9193]: Failed pas ... show more 2026-10-26T21:37:06.168994zimbra sshd[9193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-66-112-129.ap-south-1.compute.amazonaws.com user=root 2026-10-26T21:37:08.510897zimbra sshd[9193]: Failed password for root from 52.66.112.129 port 56440 ssh2 ... show less	Brute-Force SSH
🇩🇪 DeeCipher	2026-10-26 18:15:47 UTC · (1 week ago)	2026-10-26T20:15:44.342023+02:00 helmgartner sshd[1371773]: User root from 52.66.112.129 not allowed because not listed in AllowUsers 2026-10-26T20:15:45.393315+02:00 helmgartner sshd[1371780]: User root from 52.66.112.129 not allowed because not lis ... show more 2026-10-26T20:15:44.342023+02:00 helmgartner sshd[1371773]: User root from 52.66.112.129 not allowed because not listed in AllowUsers 2026-10-26T20:15:45.393315+02:00 helmgartner sshd[1371780]: User root from 52.66.112.129 not allowed because not listed in AllowUsers 2026-10-26T20:15:46.437755+02:00 helmgartner sshd[1371782]: User root from 52.66.112.129 not allowed because not listed in AllowUsers ... show less	Brute-Force
🇪🇪 Tsumugi Kotobuki	2026-10-26 18:12:02 UTC · (2 weeks ago)	Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 120 \| Len: 60B \| Win: 62727(1) \| rDNS: ec2-52-66-112-129.ap-south-1.compute.amazonaws.com \| F2B/ufw-honeypot@2026-10-26T18:12:02Z	Port Scan Hacking
🇨🇿 lp	2026-10-26 17:03:03 UTC · (2 weeks ago)	SSH Brute force: 390 attempts were recorded from 52.66.112.129 2026-10-26T17:43:09+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:10+0100 Connection closed by authenticating user root 52.66.112.129 [preaut ... show more SSH Brute force: 390 attempts were recorded from 52.66.112.129 2026-10-26T17:43:09+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:10+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:11+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:12+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:13+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:14+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:15+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:16+0100 Connection closed by authenticating user root 52.66.112.129 [preauth] 2026-10-26T17:43:17+0100 Connection closed by authenticating user root 52.66. show less	Brute-Force SSH
🇩🇪 iNetWorker	2026-10-26 15:20:34 UTC · (2 weeks ago)	firewall-block, port(s): 22/tcp	Port Scan
🇺🇸 FherdezSoft-TechMX	2026-10-26 15:13:25 UTC · (2 weeks ago)	Invalid user user from 52.66.112.129 port 53884	Brute-Force SSH
🇺🇸 FherdezSoft-TechMX	2026-10-26 15:13:25 UTC · (2 weeks ago)	Invalid user user from 52.66.112.129 port 53884	Brute-Force SSH
🇺🇸 FherdezSoft-TechMX	2026-10-26 15:13:25 UTC · (2 weeks ago)	Invalid user user from 52.66.112.129 port 53884	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 182.122.247.167

🇺🇸 54.157.15.172

🇹🇷 193.35.153.11

🇵🇱 151.115.45.142

🇦🇺 118.208.218.46

🇲🇺 102.117.238.177

🇨🇳 101.96.195.62

🇳🇱 195.178.110.30

🇺🇸 162.216.150.110

🇹🇭 150.109.172.136

🇸🇬 139.59.246.79

🇺🇸 45.33.7.4

🇸🇬 43.172.194.44

🇧🇪 35.210.242.117

🇵🇱 217.96.213.100

🇹🇼 180.218.110.248

🇺🇸 135.148.205.135

🇺🇸 108.162.216.167

🇳🇱 103.47.145.62

🇺🇸 66.132.172.130