Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Port scan attack
2022-11-26 21:56:41
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.129.			IN	A

;; AUTHORITY SECTION:
.			256	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022001 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 05:17:31 CST 2022
;; MSG SIZE  rcvd: 107
Host info
129.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
129.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
145.239.15.234 attackbotsspam
Oct  7 07:57:45 root sshd[20208]: Failed password for root from 145.239.15.234 port 52546 ssh2
Oct  7 08:01:26 root sshd[20251]: Failed password for root from 145.239.15.234 port 32874 ssh2
...
2019-10-07 14:27:59
200.13.195.70 attackspam
2019-10-07T06:38:34.267012tmaserv sshd\[30194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70  user=root
2019-10-07T06:38:36.394980tmaserv sshd\[30194\]: Failed password for root from 200.13.195.70 port 43796 ssh2
2019-10-07T06:45:55.450603tmaserv sshd\[30498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70  user=root
2019-10-07T06:45:57.453974tmaserv sshd\[30498\]: Failed password for root from 200.13.195.70 port 43654 ssh2
2019-10-07T06:50:06.650016tmaserv sshd\[30716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70  user=root
2019-10-07T06:50:08.773976tmaserv sshd\[30716\]: Failed password for root from 200.13.195.70 port 54600 ssh2
...
2019-10-07 14:12:37
178.32.218.192 attackbotsspam
Oct  7 06:18:47 mail sshd[9931]: Failed password for root from 178.32.218.192 port 55780 ssh2
Oct  7 06:22:32 mail sshd[10421]: Failed password for root from 178.32.218.192 port 46248 ssh2
2019-10-07 14:09:04
188.93.235.226 attackspambots
2019-10-06T13:18:36.4915921495-001 sshd\[9706\]: Failed password for root from 188.93.235.226 port 50682 ssh2
2019-10-06T13:38:49.1931221495-001 sshd\[11222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.235.226  user=root
2019-10-06T13:38:51.2064121495-001 sshd\[11222\]: Failed password for root from 188.93.235.226 port 49499 ssh2
2019-10-06T13:45:29.9946041495-001 sshd\[11763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.235.226  user=root
2019-10-06T13:45:32.2541141495-001 sshd\[11763\]: Failed password for root from 188.93.235.226 port 50853 ssh2
2019-10-06T13:52:28.3803451495-001 sshd\[12266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.93.235.226  user=root
...
2019-10-07 14:11:50
116.110.117.42 attack
Oct  7 05:25:11 XXX sshd[31530]: Invalid user support from 116.110.117.42 port 13386
2019-10-07 14:22:15
128.199.173.127 attack
Oct  7 06:28:00 dev0-dcde-rnet sshd[27250]: Failed password for root from 128.199.173.127 port 34404 ssh2
Oct  7 06:47:39 dev0-dcde-rnet sshd[27399]: Failed password for root from 128.199.173.127 port 42756 ssh2
2019-10-07 14:29:30
222.186.180.223 attack
Oct  6 18:26:07 debian sshd[30404]: Unable to negotiate with 222.186.180.223 port 56048: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Oct  7 02:11:26 debian sshd[19338]: Unable to negotiate with 222.186.180.223 port 2128: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
...
2019-10-07 14:26:37
104.248.170.45 attackspambots
Oct  7 05:57:27 hcbbdb sshd\[26407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.170.45  user=root
Oct  7 05:57:29 hcbbdb sshd\[26407\]: Failed password for root from 104.248.170.45 port 45828 ssh2
Oct  7 06:01:42 hcbbdb sshd\[26893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.170.45  user=root
Oct  7 06:01:45 hcbbdb sshd\[26893\]: Failed password for root from 104.248.170.45 port 57476 ssh2
Oct  7 06:05:56 hcbbdb sshd\[27363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.170.45  user=root
2019-10-07 14:08:05
49.88.112.72 attackbots
Oct  7 09:22:31 pkdns2 sshd\[18883\]: Failed password for root from 49.88.112.72 port 34820 ssh2Oct  7 09:24:08 pkdns2 sshd\[18946\]: Failed password for root from 49.88.112.72 port 30111 ssh2Oct  7 09:24:09 pkdns2 sshd\[18946\]: Failed password for root from 49.88.112.72 port 30111 ssh2Oct  7 09:24:11 pkdns2 sshd\[18946\]: Failed password for root from 49.88.112.72 port 30111 ssh2Oct  7 09:25:15 pkdns2 sshd\[19029\]: Failed password for root from 49.88.112.72 port 12831 ssh2Oct  7 09:26:57 pkdns2 sshd\[19073\]: Failed password for root from 49.88.112.72 port 44270 ssh2
...
2019-10-07 14:36:57
165.227.53.38 attackbotsspam
Oct  7 06:24:48 web8 sshd\[3264\]: Invalid user Serveur123 from 165.227.53.38
Oct  7 06:24:48 web8 sshd\[3264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.53.38
Oct  7 06:24:51 web8 sshd\[3264\]: Failed password for invalid user Serveur123 from 165.227.53.38 port 52058 ssh2
Oct  7 06:29:23 web8 sshd\[5716\]: Invalid user Haslo@12345 from 165.227.53.38
Oct  7 06:29:23 web8 sshd\[5716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.53.38
2019-10-07 14:31:26
107.155.49.126 attackspam
Oct  7 03:50:58 thevastnessof sshd[5232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.155.49.126
...
2019-10-07 14:32:49
150.109.43.226 attack
[MonOct0705:50:58.8147722019][:error][pid24499:tid46955273135872][client150.109.43.226:56678][client150.109.43.226]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\|\?=\?f\(\?:open\|write\)\?\\\\\\\\\(\|\\\\\\\\b\(\?:passthru\|serialize\|php_uname\|phpinfo\|shell_exec\|preg_\\\\\\\\w \|mysql_query\|exec\|eval\|base64_decode\|decode_base64\|rot13\|base64_url_decode\|gz\(\?:inflate\|decode\|uncompress\)\|strrev\|zlib_\\\\\\\\w \)\\\\\\\\b\?\(\?..."atARGS:widgetConfig[code].[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"767"][id"340095"][rev"53"][msg"Atomicorp.comWAFRules:AttackBlocked-PHPfunctioninArgument-thismaybeanattack."][data"die\(@md5\,ARGS:widgetConfig[code]"][severity"CRITICAL"][hostname"148.251.104.82"][uri"/index.php"][unique_id"XZq2InoipyZ8q7fi21wWTAAAAI0"][MonOct0705:50:59.2288102019][:error][pid24369:tid46955285743360][client150.109.43.226:56863][client150.109.43.226]ModSecurity:Accessde
2019-10-07 14:30:25
31.163.134.193 attack
Unauthorised access (Oct  7) SRC=31.163.134.193 LEN=40 TTL=52 ID=5382 TCP DPT=23 WINDOW=38205 SYN
2019-10-07 14:19:33
163.172.204.185 attack
2019-10-07T06:05:29.876602shield sshd\[6512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185  user=root
2019-10-07T06:05:32.481703shield sshd\[6512\]: Failed password for root from 163.172.204.185 port 44053 ssh2
2019-10-07T06:10:37.458667shield sshd\[7525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185  user=root
2019-10-07T06:10:39.346268shield sshd\[7525\]: Failed password for root from 163.172.204.185 port 53442 ssh2
2019-10-07T06:15:22.810107shield sshd\[8401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185  user=root
2019-10-07 14:22:43
78.121.187.73 attack
Telnet Server BruteForce Attack
2019-10-07 14:31:58

Recently Reported IPs

104.149.217.150 104.152.208.65 104.152.52.100 104.154.106.43
104.154.131.234 104.154.142.214 104.154.147.14 104.154.145.231
104.154.149.32 104.154.155.145 104.154.167.26 104.153.251.126
104.154.168.186 104.154.180.229 104.154.179.227 104.154.188.192
104.154.192.86 104.154.197.154 104.154.197.164 104.154.20.60