Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Rethem Hosting LLC

Hostname: unknown

Organization: Rethem Hosting LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Make a comment on this IP
Type Details Datetime
attackspam 
[MultiHost/MultiPort scan (19)] tcp/106, tcp/110, tcp/111, tcp/113, tcp/119, tcp/135, tcp/139, tcp/1433, tcp/21, tcp/22, tcp/23, tcp/26, tcp/3306, tcp/37, tcp/445, tcp/5060, tcp/554, tcp/79, tcp/88
[scan/connect: 43 time(s)]
*(RWIN=14600)(08041230)
 2019-08-05 01:57:52
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy 
Bot attacker IP
 2025-03-25 13:44:38
104.152.52.145 botsattackproxy 
Vulnerability Scanner
 2025-03-20 13:41:36
104.152.52.100 spamattackproxy 
VoIP blacklist IP
 2025-03-14 22:09:59
104.152.52.139 attack 
Brute-force attacker IP
 2025-03-10 13:45:36
104.152.52.219 botsattackproxy 
Bot attacker IP
 2025-03-04 13:55:48
104.152.52.124 botsattackproxy 
Vulnerability Scanner
 2025-02-26 17:12:59
104.152.52.146 botsattackproxy 
Bot attacker IP
 2025-02-21 12:31:03
104.152.52.161 botsattackproxy 
Vulnerability Scanner
 2025-02-05 14:00:57
104.152.52.176 botsattackproxy 
Botnet DB Scanner
 2025-01-20 14:03:26
104.152.52.141 botsattack 
Vulnerability Scanner
 2025-01-09 22:45:15
104.152.52.165 botsattackproxy 
Bot attacker IP
 2024-09-24 16:44:08
104.152.52.226 botsattackproxy 
Vulnerability Scanner
 2024-08-28 12:46:53
104.152.52.142 spambotsattack 
Vulnerability Scanner
 2024-08-26 12:47:13
104.152.52.116 spamattack 
Compromised IP
 2024-07-06 14:07:26
104.152.52.204 attack 
Bad IP
 2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21053
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.152.52.12.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 05 01:57:41 CST 2019
;; MSG SIZE  rcvd: 117
Host info
12.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
12.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
104.152.52.129
104.152.52.254
104.152.52.75
104.152.52.72
104.152.52.68
104.152.52.200
104.152.52.10
104.152.52.58
104.152.52.142
104.152.52.222
104.152.52.61
104.152.52.195
104.152.52.187
104.152.52.183
104.152.52.191
104.152.52.206
104.152.52.6
104.152.52.71
104.152.52.99
104.152.52.186
104.152.52.220
104.152.52.171
104.152.52.214
104.152.52.219
104.152.52.176
104.152.52.1
104.152.52.182
104.152.52.93
104.152.52.130
104.152.52.34
104.152.52.251
104.152.52.137
104.152.52.172
104.152.52.16
104.152.52.155
104.152.52.151
104.152.52.106
104.152.52.54
104.152.52.169
104.152.52.73
104.152.52.12
104.152.52.165
104.152.52.126
104.152.52.128
104.152.52.161
104.152.52.159
104.152.52.24
104.152.52.35
104.152.52.53
104.152.52.238
104.152.52.21
104.152.52.179
104.152.52.49
104.152.52.168
104.152.52.227
104.152.52.184
104.152.52.81
104.152.52.113
104.152.52.118
104.152.52.204
104.152.52.138
104.152.52.164
104.152.52.139
104.152.52.119
104.152.52.90
104.152.52.205
104.152.52.193
104.152.52.146
104.152.52.236
104.152.52.149
104.152.52.163
104.152.52.36
104.152.52.237
104.152.52.232
104.152.52.202
104.152.52.180
104.152.52.8
104.152.52.100
104.152.52.114
104.152.52.240
104.152.52.208
104.152.52.213
104.152.52.234
104.152.52.173
104.152.52.203
104.152.52.15
104.152.52.32
104.152.52.44
104.152.52.96
104.152.52.246
104.152.52.87
104.152.52.120
104.152.52.194
104.152.52.7
104.152.52.201
104.152.52.56
104.152.52.135
104.152.52.92
104.152.52.45
104.152.52.3
104.152.52.185
104.152.52.228
104.152.52.125
104.152.52.23
104.152.52.143
104.152.52.123
104.152.52.248
104.152.52.116
104.152.52.117
104.152.52.242
104.152.52.136
104.152.52.63
104.152.52.50
104.152.52.80
104.152.52.28
104.152.52.150
104.152.52.46
104.152.52.91
104.152.52.154
104.152.52.141
104.152.52.26
104.152.52.158
104.152.52.88
104.152.52.145
104.152.52.33
104.152.52.55
104.152.52.131
104.152.52.252
104.152.52.245
104.152.52.188
104.152.52.22
104.152.52.156
104.152.52.210
104.152.52.66
104.152.52.13
104.152.52.253
104.152.52.215
104.152.52.69
104.152.52.62
104.152.52.37
104.152.52.157
104.152.52.52
104.152.52.30
104.152.52.51
104.152.52.102
104.152.52.48
104.152.52.181
104.152.52.192
104.152.52.211
104.152.52.107
104.152.52.217
104.152.52.231
104.152.52.109
104.152.52.221
104.152.52.127
104.152.52.11
104.152.52.47
104.152.52.162
104.152.52.94
104.152.52.76
104.152.52.223
104.152.52.77
104.152.52.224
104.152.52.122
104.152.52.167
104.152.52.190
104.152.52.152
104.152.52.104
104.152.52.41
104.152.52.189
104.152.52.249
104.152.52.175
104.152.52.115
104.152.52.29
104.152.52.65
104.152.52.148
104.152.52.85
104.152.52.101
104.152.52.132
104.152.52.98
104.152.52.233
104.152.52.144
104.152.52.14
104.152.52.166
104.152.52.83
104.152.52.2
104.152.52.247
104.152.52.9
104.152.52.110
104.152.52.111
104.152.52.43
104.152.52.250
104.152.52.4
104.152.52.229
104.152.52.198
104.152.52.174
104.152.52.133
104.152.52.207
104.152.52.38
104.152.52.40
104.152.52.95
104.152.52.230
104.152.52.134
104.152.52.31
104.152.52.212
104.152.52.79
104.152.52.27
104.152.52.60
104.152.52.239
104.152.52.225
104.152.52.108
104.152.52.112
104.152.52.74
104.152.52.89
104.152.52.241
104.152.52.42
104.152.52.216
104.152.52.17
104.152.52.19
104.152.52.121
104.152.52.59
104.152.52.82
104.152.52.197
104.152.52.84
104.152.52.178
104.152.52.196
104.152.52.124
104.152.52.57
104.152.52.105
104.152.52.86
104.152.52.140
104.152.52.226
104.152.52.160
104.152.52.147
104.152.52.235
104.152.52.39
104.152.52.25
104.152.52.170
104.152.52.244
104.152.52.243
104.152.52.18
104.152.52.218
104.152.52.64
104.152.52.5
104.152.52.153
104.152.52.199
104.152.52.70
104.152.52.209
104.152.52.177
104.152.52.97
104.152.52.103
104.152.52.20
104.152.52.67
104.152.52.78
Related comments:
IP Type Details Datetime
217.174.61.116 attackbotsspam 
Honeypot attack, port: 23, PTR: vlan-burgas-static-61-116.comnet.bg.
 2019-08-14 08:13:11
199.249.230.87 attackbots 
Unauthorized access detected from banned ip
 2019-08-14 07:57:55
117.95.189.40 attackbots 
Honeypot attack, port: 23, PTR: PTR record not found
 2019-08-14 08:22:31
94.23.149.25 attackbotsspam 
Aug 13 14:12:14 vps200512 sshd\[4634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.149.25  user=root
Aug 13 14:12:15 vps200512 sshd\[4634\]: Failed password for root from 94.23.149.25 port 59392 ssh2
Aug 13 14:19:39 vps200512 sshd\[4795\]: Invalid user liidia from 94.23.149.25
Aug 13 14:19:39 vps200512 sshd\[4795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.149.25
Aug 13 14:19:41 vps200512 sshd\[4795\]: Failed password for invalid user liidia from 94.23.149.25 port 50248 ssh2
 2019-08-14 08:00:14
193.70.43.220 attack 
Automated report - ssh fail2ban:
Aug 13 20:52:02 authentication failure 
Aug 13 20:52:04 wrong password, user=java, port=55306, ssh2
 2019-08-14 08:09:35
194.145.137.135 attackbotsspam 
Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Mon, 12 Aug 2019 22:47:31 -0500
Received: from MBX07D-ORD1.mex08.mlsrvr.com (172.29.9.30) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Mon, 12 Aug 2019 22:47:30 -0500
Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
 MBX07D-ORD1.mex08.mlsrvr.com (172.29.9.30) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Mon, 12 Aug 2019 22:47:24 -0500
Return-Path: 
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [194.145.137.135]
Authentication-Results: smtp27.gate.ord1d.rsapps.net; iprev=pass policy.iprev="194.145.137.135"; spf=pass smtp.mailfrom="speech@disktie.icu" smtp.helo="disktie.icu"; dkim=pass header.d=disktie.icu; dmarc=pass (p=quaran
 2019-08-14 08:15:42
80.211.137.127 attackbots 
Fail2Ban Ban Triggered
 2019-08-14 08:14:48
68.183.227.74 attackbots 
ssh failed login
 2019-08-14 08:17:04
51.15.59.9 attack 
1,47-01/02 [bc01/m20] concatform PostRequest-Spammer scoring: essen
 2019-08-14 08:12:20
168.90.12.3 attackspambots 
Honeypot attack, port: 445, PTR: 16890123.ip74.static.mediacommerce.com.co.
 2019-08-14 08:25:34
209.97.161.162 attackspam 
Invalid user md from 209.97.161.162 port 43335
 2019-08-14 07:48:39
91.121.101.61 attackbotsspam 
firewall-block, port(s): 3629/tcp
 2019-08-14 07:43:32
71.6.167.142 attackbots 
51106/tcp 3702/udp 3001/tcp...
[2019-06-12/08-13]422pkt,220pt.(tcp),35pt.(udp)
 2019-08-14 08:03:18
179.184.66.213 attackbotsspam 
Aug 14 01:17:40 mail sshd[15479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.184.66.213  user=root
Aug 14 01:17:42 mail sshd[15479]: Failed password for root from 179.184.66.213 port 6365 ssh2
...
 2019-08-14 08:16:06
139.199.213.105 attack 
$f2bV_matches
 2019-08-14 08:11:05

Recently Reported IPs

216.227.100.125 103.94.126.58 103.93.178.45 192.188.151.35
44.59.65.235 103.31.54.67 81.4.188.109 54.207.84.41
110.214.233.47 152.36.40.204 32.244.47.119 80.90.173.218
114.247.226.170 79.107.253.21 79.107.234.114 175.25.244.100
79.81.117.185 59.23.254.98 133.45.114.111 78.188.88.186