AbuseIPDB » 52.66.189.143

52.66.189.143 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-52-66-189-143.ap-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 52.66.189.143

Whois 52.66.189.143

IP Abuse Reports for 52.66.189.143:

This IP address has been reported a total of 109 times from 69 distinct sources. 52.66.189.143 was first reported on May 18th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-05-21 20:08:17 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
SpaceHost-Server	2025-05-20 22:29:06 (1 month ago)		Brute-Force Web App Attack
rtbh.com.tr	2025-05-20 20:08:16 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Jason Howell	2025-05-20 04:12:22 (1 month ago)	52.66.189.143 - - [19/May/2025:23:12:17 -0500] "POST //xmlrpc.php HTTP/1.1" 200 622 "-" "Mozilla/5.0 ... show more52.66.189.143 - - [19/May/2025:23:12:17 -0500] "POST //xmlrpc.php HTTP/1.1" 200 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:23:12:18 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:23:12:19 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:23:12:20 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:23:12:21 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch ... show less	Web App Attack
octageeks.com	2025-05-20 04:06:21 (1 month ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
Jason Howell	2025-05-20 03:55:32 (1 month ago)	52.66.189.143 - - [19/May/2025:22:55:27 -0500] "POST //xmlrpc.php HTTP/1.1" 200 653 "-" "Mozilla/5.0 ... show more52.66.189.143 - - [19/May/2025:22:55:27 -0500] "POST //xmlrpc.php HTTP/1.1" 200 653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:22:55:28 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:22:55:29 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:22:55:30 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:22:55:31 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3063 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch ... show less	Web App Attack
psauxit	2025-05-20 03:48:26 (1 month ago)	Fail2Ban - NGINX 403 forcing to access a restricted resource	Hacking
FeG Deutschland	2025-05-20 03:32:13 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Site.eu	2025-05-20 03:28:22 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2025-05-20 03:16:49 (1 month ago)		Bad Web Bot Web App Attack
rtbh.com.tr	2025-05-20 00:08:14 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-05-20 00:05:47 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
SpaceHost-Server	2025-05-19 22:28:25 (1 month ago)		Brute-Force Web App Attack
tecnicorioja	2025-05-19 22:00:32 (1 month ago)	(Mod_security) [19/May/2025:13:34:34.236057	Brute-Force Bad Web Bot Web App Attack
Jason Howell	2025-05-19 21:58:39 (1 month ago)	52.66.189.143 - - [19/May/2025:16:58:33 -0500] "POST //xmlrpc.php HTTP/1.1" 200 620 "-" "Mozilla/5.0 ... show more52.66.189.143 - - [19/May/2025:16:58:33 -0500] "POST //xmlrpc.php HTTP/1.1" 200 620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:16:58:35 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:16:58:36 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:16:58:37 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 52.66.189.143 - - [19/May/2025:16:58:38 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch ... show less	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩