IP address

Passive DNS

Tags: IP in hostname

IP blacklists: Echelon config file hunt
52.85.86.87 is listed on the Echelon config file hunt blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning for exposed configuration files
Type of feed: primary (feed detail page)

Last checked at: 2026-11-09 10:10:01.056000
Was present on blacklist at: 2026-11-06 10:10, 2026-11-07 10:10, 2026-11-08 10:10, 2026-11-09 10:10
Echelon web crawler
52.85.86.87 is listed on the Echelon web crawler blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-11-09 10:50:01.013000
Was present on blacklist at: 2026-11-06 10:50, 2026-11-07 10:50, 2026-11-08 10:50, 2026-11-09 10:50
Echelon WordPress enumeration
52.85.86.87 is listed on the Echelon WordPress enumeration blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: WordPress user and plugin enumeration
Type of feed: primary (feed detail page)

Last checked at: 2026-11-09 10:55:00.640000
Was present on blacklist at: 2026-11-06 10:55, 2026-11-07 10:55, 2026-11-08 10:55, 2026-11-09 10:55

TL	Role	Category	Details
44	src	scan

Origin AS: AS16509 - AMAZON-02
BGP Prefix: 52.85.80.0/21
geo: United States; 🕑 America/Chicago
hostname: server-52-85-86-87.lax54.r.cloudfront.net
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 52.84.0.0 - 52.87.255.255
rep: 0.4053964424986395
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 443; Tags: cloud, pqc, cdn; CPEs: cpe:/a:amazon:amazon_cloudfront
ts_added: 2026-11-06 10:10:15.306000
ts_last_update: 2026-11-09 10:55:04.272000

Warden event timeline

DShield event timeline

Presence on blacklists