Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
spamattack
Compromised IP
2024-07-06 14:07:26
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
104.152.52.242 attackproxy
Bot attacker IP
2024-06-25 12:37:07
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52931
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.116.			IN	A

;; AUTHORITY SECTION:
.			432	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:11:27 CST 2022
;; MSG SIZE  rcvd: 107
Host info
116.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
116.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
119.29.234.236 attack
Jul 15 13:59:06 areeb-Workstation sshd\[21129\]: Invalid user explorer from 119.29.234.236
Jul 15 13:59:06 areeb-Workstation sshd\[21129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.234.236
Jul 15 13:59:09 areeb-Workstation sshd\[21129\]: Failed password for invalid user explorer from 119.29.234.236 port 50822 ssh2
...
2019-07-15 23:10:10
158.69.110.31 attackbotsspam
2019-07-15T14:17:25.585036abusebot.cloudsearch.cf sshd\[21049\]: Invalid user postgres from 158.69.110.31 port 53938
2019-07-15 22:38:00
40.127.106.50 attack
Jul 15 05:09:46 vtv3 sshd\[23986\]: Invalid user dev from 40.127.106.50 port 59588
Jul 15 05:09:46 vtv3 sshd\[23986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.127.106.50
Jul 15 05:09:49 vtv3 sshd\[23986\]: Failed password for invalid user dev from 40.127.106.50 port 59588 ssh2
Jul 15 05:16:51 vtv3 sshd\[27828\]: Invalid user hall from 40.127.106.50 port 59100
Jul 15 05:16:51 vtv3 sshd\[27828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.127.106.50
Jul 15 05:28:54 vtv3 sshd\[1341\]: Invalid user andres from 40.127.106.50 port 58020
Jul 15 05:28:54 vtv3 sshd\[1341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.127.106.50
Jul 15 05:28:56 vtv3 sshd\[1341\]: Failed password for invalid user andres from 40.127.106.50 port 58020 ssh2
Jul 15 05:35:02 vtv3 sshd\[4284\]: Invalid user wf from 40.127.106.50 port 57448
Jul 15 05:35:02 vtv3 sshd\[4284\]: pam_unix\(sshd:a
2019-07-15 22:22:00
69.202.205.246 attackspam
Honeypot attack, port: 5555, PTR: mta-69-202-205-246.nyc.rr.com.
2019-07-15 22:44:06
59.125.214.115 attackspam
Automatic report - Banned IP Access
2019-07-15 22:30:49
190.134.249.57 attack
DATE:2019-07-15 08:17:41, IP:190.134.249.57, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)
2019-07-15 23:04:46
212.83.163.205 attack
Honeypot attack, port: 445, PTR: 212-83-163-205.rev.poneytelecom.eu.
2019-07-15 22:48:57
222.186.15.110 attack
Jul 15 10:55:21 plusreed sshd[14962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110  user=root
Jul 15 10:55:23 plusreed sshd[14962]: Failed password for root from 222.186.15.110 port 33192 ssh2
...
2019-07-15 23:06:56
189.177.115.126 attackspambots
Honeypot attack, port: 445, PTR: dsl-189-177-115-126-dyn.prod-infinitum.com.mx.
2019-07-15 22:56:13
78.187.169.116 attack
Automatic report - Port Scan Attack
2019-07-15 23:11:13
185.222.211.13 attackbots
$f2bV_matches
2019-07-15 22:07:30
92.249.148.32 attack
2019-07-15T08:00:08.283693abusebot-3.cloudsearch.cf sshd\[29837\]: Invalid user sap from 92.249.148.32 port 35236
2019-07-15 23:03:21
27.254.136.29 attackbotsspam
Jul 15 09:24:27 v22019058497090703 sshd[29194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.136.29
Jul 15 09:24:29 v22019058497090703 sshd[29194]: Failed password for invalid user admin from 27.254.136.29 port 53218 ssh2
Jul 15 09:30:32 v22019058497090703 sshd[29612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.136.29
...
2019-07-15 22:19:09
79.107.179.124 attackspam
Automatic report - Port Scan Attack
2019-07-15 22:15:01
198.176.48.192 attackbotsspam
SSH Brute Force, server-1 sshd[8370]: Failed password for root from 198.176.48.192 port 64148 ssh2
2019-07-15 22:06:17

Recently Reported IPs

104.152.52.108 104.152.52.130 104.149.145.29 104.152.52.139
104.152.52.134 104.152.52.138 104.152.52.119 104.152.52.111
104.149.204.15 104.152.52.167 104.152.52.185 104.152.52.73
104.152.52.159 104.152.52.168 104.152.57.149 104.152.52.165
104.154.104.47 104.152.52.177 104.152.52.55 104.156.110.52