Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Port scan attack
2022-11-26 21:56:41
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.129.			IN	A

;; AUTHORITY SECTION:
.			256	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022001 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 05:17:31 CST 2022
;; MSG SIZE  rcvd: 107
Host info
129.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
129.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
51.15.127.86 attack
port scan and connect, tcp 23 (telnet)
2020-04-09 13:22:34
139.198.188.147 attackspambots
Apr  9 05:50:40 game-panel sshd[17054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.188.147
Apr  9 05:50:42 game-panel sshd[17054]: Failed password for invalid user bot2 from 139.198.188.147 port 43894 ssh2
Apr  9 05:54:50 game-panel sshd[17188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.188.147
2020-04-09 13:57:24
142.93.121.47 attackbotsspam
Apr  9 05:55:52 debian-2gb-nbg1-2 kernel: \[8663566.119337\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.93.121.47 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=32359 PROTO=TCP SPT=51562 DPT=27817 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-09 13:14:11
123.206.176.219 attackbots
Apr  9 07:01:52 MainVPS sshd[24647]: Invalid user ubuntu from 123.206.176.219 port 17661
Apr  9 07:01:52 MainVPS sshd[24647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.176.219
Apr  9 07:01:52 MainVPS sshd[24647]: Invalid user ubuntu from 123.206.176.219 port 17661
Apr  9 07:01:54 MainVPS sshd[24647]: Failed password for invalid user ubuntu from 123.206.176.219 port 17661 ssh2
Apr  9 07:05:05 MainVPS sshd[31052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.176.219  user=games
Apr  9 07:05:06 MainVPS sshd[31052]: Failed password for games from 123.206.176.219 port 37841 ssh2
...
2020-04-09 13:10:29
51.91.138.207 attackbotsspam
ssh brute force
2020-04-09 13:54:26
60.54.89.246 attackbotsspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-04-09 13:14:25
118.100.116.155 attackbotsspam
Apr  9 03:55:06 work-partkepr sshd\[2723\]: User www-data from 118.100.116.155 not allowed because not listed in AllowUsers
Apr  9 03:55:06 work-partkepr sshd\[2723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.100.116.155  user=www-data
...
2020-04-09 13:50:13
218.75.132.59 attack
ssh brute force
2020-04-09 13:33:25
5.196.197.77 attackspambots
Apr  8 21:54:30 server sshd\[18830\]: Failed password for invalid user webmo from 5.196.197.77 port 46304 ssh2
Apr  9 06:42:00 server sshd\[11302\]: Invalid user user3 from 5.196.197.77
Apr  9 06:42:00 server sshd\[11302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.197.77 
Apr  9 06:42:02 server sshd\[11302\]: Failed password for invalid user user3 from 5.196.197.77 port 43974 ssh2
Apr  9 07:41:47 server sshd\[24900\]: Invalid user user from 5.196.197.77
Apr  9 07:41:47 server sshd\[24900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.197.77 
...
2020-04-09 13:12:34
115.159.86.75 attackbotsspam
Apr  9 05:50:02 v22019038103785759 sshd\[26619\]: Invalid user ts from 115.159.86.75 port 50524
Apr  9 05:50:02 v22019038103785759 sshd\[26619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.86.75
Apr  9 05:50:04 v22019038103785759 sshd\[26619\]: Failed password for invalid user ts from 115.159.86.75 port 50524 ssh2
Apr  9 05:55:34 v22019038103785759 sshd\[26971\]: Invalid user teampspeak3 from 115.159.86.75 port 48100
Apr  9 05:55:34 v22019038103785759 sshd\[26971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.86.75
...
2020-04-09 13:25:37
142.93.235.47 attackspambots
prod6
...
2020-04-09 13:42:03
106.12.69.53 attackbots
Wordpress malicious attack:[sshd]
2020-04-09 13:36:35
194.180.224.150 attackbots
Apr  9 06:26:01 pi sshd[2014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.180.224.150  user=root
Apr  9 06:26:02 pi sshd[2014]: Failed password for invalid user root from 194.180.224.150 port 43900 ssh2
2020-04-09 13:49:02
134.122.29.53 attackbotsspam
Apr  9 06:55:45 cvbnet sshd[11208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.29.53 
Apr  9 06:55:47 cvbnet sshd[11208]: Failed password for invalid user user from 134.122.29.53 port 57530 ssh2
...
2020-04-09 13:30:05
121.229.50.222 attackbotsspam
2020-04-09T03:52:04.983272abusebot.cloudsearch.cf sshd[6548]: Invalid user kiran from 121.229.50.222 port 58126
2020-04-09T03:52:04.989671abusebot.cloudsearch.cf sshd[6548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.50.222
2020-04-09T03:52:04.983272abusebot.cloudsearch.cf sshd[6548]: Invalid user kiran from 121.229.50.222 port 58126
2020-04-09T03:52:07.127079abusebot.cloudsearch.cf sshd[6548]: Failed password for invalid user kiran from 121.229.50.222 port 58126 ssh2
2020-04-09T03:55:29.468101abusebot.cloudsearch.cf sshd[6873]: Invalid user share from 121.229.50.222 port 51646
2020-04-09T03:55:29.474451abusebot.cloudsearch.cf sshd[6873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.50.222
2020-04-09T03:55:29.468101abusebot.cloudsearch.cf sshd[6873]: Invalid user share from 121.229.50.222 port 51646
2020-04-09T03:55:31.089674abusebot.cloudsearch.cf sshd[6873]: Failed password for inv
...
2020-04-09 13:27:13

Recently Reported IPs

104.149.217.150 104.152.208.65 104.152.52.100 104.154.106.43
104.154.131.234 104.154.142.214 104.154.147.14 104.154.145.231
104.154.149.32 104.154.155.145 104.154.167.26 104.153.251.126
104.154.168.186 104.154.180.229 104.154.179.227 104.154.188.192
104.154.192.86 104.154.197.154 104.154.197.164 104.154.20.60