52.66.207.18

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
69% Elevated
29 reports
22 reporters · latest 3 weeks ago
ISP
Amazon Data Services India
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-52-66-207-18.ap-south-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇮🇳 India
City
Mumbai, Maharashtra
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
29 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 10 🇺🇸 United States of America 8 🇮🇹 Italy 4
Most common categories Web App Attack 24 Bad Web Bot 8 Hacking 7 Brute-Force 4 Exploited Host 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 todix
"GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 19841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
Web App Attack
🇺🇸 omc
Unauthorized file [PP].
Bad Web Bot
🇮🇹 abuseiphack
Automatic report for brute force attack
Bad Web Bot
🇩🇪 todix
"GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 9996 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
Web App Attack
🇺🇸 jcbriar
Searching for vulnerable scripts
Hacking Web App Attack
🇦🇺 A.i.D.A.N.N
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
🇩🇪 todix
"GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 10501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
Web App Attack
🇫🇷 LRob
Web shell probe | method: GET | path: //wp-content/plugins/fix/up.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
Hacking Web App Attack
🇩🇪 expandmade.com
detect header anomalies [24/Oct/2026:01:58:10 "GET //wp-content/plugins/fix/up.php"]
Web App Attack
🇩🇪 outputblog.de
apache-wp-probephp
Port Scan Hacking Brute-Force
🇮🇹 Progetto1
Website Scanning / Scraping
Bad Web Bot Exploited Host Web App Attack
🇺🇸 RLDD
WP probing for vulnerabilities -ove
Web App Attack
🇫🇷 dynamix
Multiple WAF Violations
Web App Attack
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix
"GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 17329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 104.244.79.113
🇧🇬 79.124.56.138
🇺🇸 66.132.172.146
🇳🇱 45.148.10.141
🇧🇪 35.210.99.213
🇰🇷 210.206.95.162
🇺🇸 199.165.159.140
🇳🇱 195.178.110.26
🇵🇱 172.64.198.146
🇳🇱 89.21.67.144
🇮🇶 62.201.212.52
🇹🇼 35.236.180.197
🇧🇪 35.210.98.104
🇧🇪 35.210.83.18
🇭🇰 223.197.146.179
🇭🇰 220.246.46.144
🇮🇩 202.158.36.50
🇵🇰 189.12.0.50
🇫🇮 172.83.252.12
🇵🇱 172.64.198.25
feedback