104.152.52.116

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
spamattack	Compromised IP	2024-07-06 14:07:26

Comments on same subnet:

IP	Type	Details	Datetime
104.152.52.231	botsattackproxy	Bot attacker IP	2025-03-25 13:44:38
104.152.52.145	botsattackproxy	Vulnerability Scanner	2025-03-20 13:41:36
104.152.52.100	spamattackproxy	VoIP blacklist IP	2025-03-14 22:09:59
104.152.52.139	attack	Brute-force attacker IP	2025-03-10 13:45:36
104.152.52.219	botsattackproxy	Bot attacker IP	2025-03-04 13:55:48
104.152.52.124	botsattackproxy	Vulnerability Scanner	2025-02-26 17:12:59
104.152.52.146	botsattackproxy	Bot attacker IP	2025-02-21 12:31:03
104.152.52.161	botsattackproxy	Vulnerability Scanner	2025-02-05 14:00:57
104.152.52.176	botsattackproxy	Botnet DB Scanner	2025-01-20 14:03:26
104.152.52.141	botsattack	Vulnerability Scanner	2025-01-09 22:45:15
104.152.52.165	botsattackproxy	Bot attacker IP	2024-09-24 16:44:08
104.152.52.226	botsattackproxy	Vulnerability Scanner	2024-08-28 12:46:53
104.152.52.142	spambotsattack	Vulnerability Scanner	2024-08-26 12:47:13
104.152.52.204	attack	Bad IP	2024-07-01 12:36:27
104.152.52.242	attackproxy	Bot attacker IP	2024-06-25 12:37:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52931
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.116.			IN	A

;; AUTHORITY SECTION:
.			432	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:11:27 CST 2022
;; MSG SIZE  rcvd: 107

Host info

116.52.152.104.in-addr.arpa domain name pointer internettl.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
116.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.47.33.5	attack	Brute Force attack - banned by Fail2Ban	2020-10-09 20:54:31
180.76.139.54	attackspambots	Invalid user test from 180.76.139.54 port 35366	2020-10-09 21:10:16
196.247.5.50	attack	Web form spam	2020-10-09 21:14:00
51.161.45.174	attack	Oct 9 12:48:15 ns381471 sshd[13024]: Failed password for root from 51.161.45.174 port 44810 ssh2	2020-10-09 21:08:05
106.75.240.86	attackspam	Oct 9 13:22:02 h1745522 sshd[11191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.240.86 user=root Oct 9 13:22:04 h1745522 sshd[11191]: Failed password for root from 106.75.240.86 port 42138 ssh2 Oct 9 13:23:40 h1745522 sshd[11501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.240.86 user=root Oct 9 13:23:42 h1745522 sshd[11501]: Failed password for root from 106.75.240.86 port 59456 ssh2 Oct 9 13:25:21 h1745522 sshd[11804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.240.86 user=root Oct 9 13:25:23 h1745522 sshd[11804]: Failed password for root from 106.75.240.86 port 48870 ssh2 Oct 9 13:27:01 h1745522 sshd[11922]: Invalid user web from 106.75.240.86 port 37624 Oct 9 13:27:01 h1745522 sshd[11922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.240.86 Oct 9 13:27:01 h1745522 ssh ...	2020-10-09 21:07:46
82.138.21.54	attackbots	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "dircreate" at 2020-10-08T20:48:19Z	2020-10-09 21:09:13
211.87.178.161	attackspam	Oct 9 10:39:06 cho sshd[286083]: Invalid user test from 211.87.178.161 port 40740 Oct 9 10:39:06 cho sshd[286083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.87.178.161 Oct 9 10:39:06 cho sshd[286083]: Invalid user test from 211.87.178.161 port 40740 Oct 9 10:39:08 cho sshd[286083]: Failed password for invalid user test from 211.87.178.161 port 40740 ssh2 Oct 9 10:43:31 cho sshd[286356]: Invalid user shutdown from 211.87.178.161 port 45358 ...	2020-10-09 20:38:57
45.142.120.58	attackbots	2020-10-09 04:39:25 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data \(set_id=rqd@no-server.de\) 2020-10-09 04:39:36 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data \(set_id=gid@no-server.de\) 2020-10-09 04:39:38 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data \(set_id=blacklist@no-server.de\) 2020-10-09 04:39:51 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data \(set_id=gabvirtual@no-server.de\) 2020-10-09 04:39:57 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data \(set_id=gofuckyourself@no-server.de\) 2020-10-09 04:39:57 dovecot_login authenticator failed for \(localhost\) \[45.142.120.58\]: 535 Incorrect authentication data \(set_id=matsuno@no-server.de\) 2020-10-09 04:40:07 dovecot_login authenticator ...	2020-10-09 21:16:21
66.85.30.117	attack	xmlrpc attack	2020-10-09 20:48:27
186.0.185.135	attack	TCP (SYN) 186.0.185.135:31211 -> port 23, len 44	2020-10-09 21:13:00
200.108.143.6	attackspam	Oct 9 06:40:51 inter-technics sshd[14664]: Invalid user bestcoach from 200.108.143.6 port 39044 Oct 9 06:40:51 inter-technics sshd[14664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6 Oct 9 06:40:51 inter-technics sshd[14664]: Invalid user bestcoach from 200.108.143.6 port 39044 Oct 9 06:40:52 inter-technics sshd[14664]: Failed password for invalid user bestcoach from 200.108.143.6 port 39044 ssh2 Oct 9 06:45:15 inter-technics sshd[18258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6 user=root Oct 9 06:45:17 inter-technics sshd[18258]: Failed password for root from 200.108.143.6 port 45036 ssh2 ...	2020-10-09 21:12:39
216.155.93.77	attackspam	Oct 9 12:01:36 mout sshd[22529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.155.93.77 user=root Oct 9 12:01:38 mout sshd[22529]: Failed password for root from 216.155.93.77 port 33840 ssh2	2020-10-09 20:55:50
177.205.90.167	attackspambots	Port probing on unauthorized port 23	2020-10-09 21:02:28
103.45.179.86	attackspambots	Oct 9 12:34:55 vps647732 sshd[9682]: Failed password for root from 103.45.179.86 port 53306 ssh2 ...	2020-10-09 21:03:53
175.206.147.232	attackspam	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-09 21:19:00

Recently Reported IPs

104.152.52.108	104.152.52.130	104.149.145.29	104.152.52.139
104.152.52.134	104.152.52.138	104.152.52.119	104.152.52.111
104.149.204.15	104.152.52.167	104.152.52.185	104.152.52.73
104.152.52.159	104.152.52.168	104.152.57.149	104.152.52.165
104.154.104.47	104.152.52.177	104.152.52.55	104.156.110.52