IP address

Passive DNS

Tags: IP in hostname

IP blacklists

Blocklist.net.ua

52.66.82.122 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks, send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-23 18:15:02.388000
Was present on blacklist at: 2025-10-14 06:15, 2025-10-14 14:15, 2025-10-14 18:15, 2025-10-14 22:15, 2025-10-15 10:15, 2025-10-15 14:15, 2025-10-15 18:15, 2025-10-15 22:15, 2025-10-16 02:15, 2025-10-16 06:15, 2025-10-16 22:15, 2025-10-17 02:15, 2025-10-17 06:15, 2025-10-17 10:15, 2025-10-17 14:15, 2025-10-17 18:15, 2025-10-17 22:15, 2025-10-18 02:15, 2025-10-18 06:15, 2025-10-18 10:15, 2025-10-18 14:15, 2025-10-18 18:15, 2025-10-18 22:15, 2025-10-19 02:15, 2025-10-19 06:15, 2025-10-19 10:15, 2025-10-19 14:15, 2025-10-19 18:15, 2025-10-19 22:15, 2025-10-20 02:15, 2025-10-20 06:15, 2025-10-20 10:15, 2025-10-20 14:15, 2025-10-20 18:15, 2025-10-20 22:15, 2025-10-21 02:15, 2025-10-21 06:15, 2025-10-21 10:15, 2025-10-21 14:15, 2025-10-21 18:15, 2025-10-21 22:15, 2025-10-22 02:15, 2025-10-22 06:15, 2025-10-22 10:15, 2025-10-22 14:15, 2025-10-22 18:15, 2025-10-22 22:15, 2025-10-23 02:15, 2025-10-23 06:15, 2025-10-23 10:15, 2025-10-23 14:15, 2025-10-23 18:15

Turris greylist

52.66.82.122 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC, which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-11-03 22:15:00.181000
Was present on blacklist at: 2025-10-20 21:15, 2025-11-03 22:15

Spamhaus XBL CBL

52.66.82.122 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-12-09 12:18:50.247000
Was present on blacklist at: 2025-09-23 12:18, 2025-11-11 12:18

blocklist.de Apache

52.66.82.122 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-31 17:05:00.376000
Was present on blacklist at: 2025-10-29 23:05, 2025-10-30 05:05, 2025-10-30 11:05, 2025-10-30 17:05, 2025-10-30 23:05, 2025-10-31 05:05, 2025-10-31 11:05, 2025-10-31 17:05

blocklist.de FTP

52.66.82.122 is listed on the blocklist.de FTP blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the Service FTP.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-15 11:05:00.396000
Was present on blacklist at: 2025-12-13 17:05, 2025-12-13 23:05, 2025-12-14 05:05, 2025-12-14 11:05, 2025-12-14 17:05, 2025-12-14 23:05, 2025-12-15 05:05, 2025-12-15 11:05

Warden events (78)

2025-12-07: ReconScanning (node.9c1411): 2
2025-11-19: ReconScanning (node.9c1411): 1
2025-11-06: ReconScanning (node.9c1411): 1
2025-11-02: ReconScanning (node.9c1411): 2
2025-10-31: ReconScanning (node.9c1411): 2
2025-10-30: ReconScanning (node.9c1411): 1
2025-10-29: ReconScanning (node.9c1411): 2
2025-10-26: ReconScanning (node.9c1411): 1
2025-10-24: ReconScanning (node.9c1411): 2
2025-10-23: ReconScanning (node.9c1411): 1
2025-10-19: ReconScanning (node.9c1411): 4; IntrusionUserCompromise (node.cfb4f7): 23
2025-10-16: ReconScanning (node.9c1411): 4; IntrusionUserCompromise (node.cfb4f7): 19
2025-09-26: ReconScanning (node.9c1411): 2
2025-09-25: ReconScanning (node.9c1411): 1
2025-09-23: ReconScanning (node.9c1411): 3
2025-09-21: ReconScanning (node.9c1411): 7

Origin AS: AS16509 - AMAZON-02
BGP Prefix: 52.66.64.0/18
geo: India, Mumbai; 🕑 Asia/Kolkata
hostname: ec2-52-66-82-122.ap-south-1.compute.amazonaws.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 52.64.0.0 - 52.79.255.255
last_activity: 2025-12-07 18:05:16
last_warden_event: 2025-12-07 18:05:16
rep: 0.021428571428571425
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 443, 7443; Tags: cloud; CPEs: cpe:/a:apache:http_server:2.4.65, cpe:/o:debian:debian_linux
ts_added: 2025-07-22 12:18:49.788000
ts_last_update: 2025-12-15 12:18:50.334000

Warden event timeline

DShield event timeline

Presence on blacklists