Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Scan port
2023-10-02 12:45:27
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3737
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.133.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 09:05:18 CST 2022
;; MSG SIZE  rcvd: 107
Host info
133.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
133.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
41.72.219.102 attackspambots
Invalid user abhishek from 41.72.219.102 port 55574
2020-10-02 16:29:31
3.129.90.48 attackbots
mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php()
2020-10-02 16:32:33
118.25.12.187 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-10-02 16:22:58
45.148.122.20 attackbots
 TCP (SYN) 45.148.122.20:50901 -> port 22, len 44
2020-10-02 16:49:43
36.91.97.122 attackbotsspam
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-10-02 17:02:07
81.70.22.3 attackbotsspam
Port scan denied
2020-10-02 16:47:19
114.245.31.241 attack
Invalid user openhabian from 114.245.31.241 port 58212
2020-10-02 16:25:27
18.212.209.250 attack
k+ssh-bruteforce
2020-10-02 16:30:28
45.77.176.234 attack
Oct  2 06:17:53 vps8769 sshd[18562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.77.176.234
Oct  2 06:17:54 vps8769 sshd[18562]: Failed password for invalid user hdfs from 45.77.176.234 port 11230 ssh2
...
2020-10-02 16:54:22
123.127.244.100 attack
Oct  2 08:09:57 django-0 sshd[29075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.127.244.100  user=root
Oct  2 08:09:59 django-0 sshd[29075]: Failed password for root from 123.127.244.100 port 38430 ssh2
...
2020-10-02 16:45:16
125.119.42.238 attack
Oct  1 20:35:24 CT3029 sshd[7748]: Invalid user user13 from 125.119.42.238 port 38654
Oct  1 20:35:24 CT3029 sshd[7748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.42.238
Oct  1 20:35:26 CT3029 sshd[7748]: Failed password for invalid user user13 from 125.119.42.238 port 38654 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=125.119.42.238
2020-10-02 16:43:51
35.242.214.242 attack
35.242.214.242 - - [02/Oct/2020:09:42:58 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-02 16:24:57
125.43.69.155 attack
SSH login attempts.
2020-10-02 17:03:32
168.232.162.2 attackbotsspam
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-10-02 16:46:22
218.241.134.34 attackbotsspam
Oct  2 10:24:30 prox sshd[31371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.134.34 
Oct  2 10:24:33 prox sshd[31371]: Failed password for invalid user multimedia from 218.241.134.34 port 44046 ssh2
2020-10-02 16:35:17

Recently Reported IPs

185.104.186.172 151.243.65.174 187.25.101.31 58.253.9.5
189.207.107.251 2.51.172.171 91.215.143.14 61.3.153.199
111.224.235.92 112.185.18.46 89.178.209.61 173.81.159.157
162.158.141.28 113.26.0.147 95.86.124.253 45.148.234.94
193.169.254.233 162.144.134.125 188.125.88.200 36.133.83.147