Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
attack
scan port
2023-02-20 22:14:38
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
104.152.52.242 attackproxy
Bot attacker IP
2024-06-25 12:37:07
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14867
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.142.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 02:38:34 CST 2022
;; MSG SIZE  rcvd: 107
Host info
142.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.186.180.9 attackspam
Mar 13 21:44:18 meumeu sshd[10211]: Failed password for root from 222.186.180.9 port 18626 ssh2
Mar 13 21:44:33 meumeu sshd[10211]: Failed password for root from 222.186.180.9 port 18626 ssh2
Mar 13 21:44:34 meumeu sshd[10211]: error: maximum authentication attempts exceeded for root from 222.186.180.9 port 18626 ssh2 [preauth]
...
2020-03-14 04:48:26
14.225.11.25 attackspam
Mar 13 19:46:19 Ubuntu-1404-trusty-64-minimal sshd\[20904\]: Invalid user dsvmadmin from 14.225.11.25
Mar 13 19:46:19 Ubuntu-1404-trusty-64-minimal sshd\[20904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.11.25
Mar 13 19:46:21 Ubuntu-1404-trusty-64-minimal sshd\[20904\]: Failed password for invalid user dsvmadmin from 14.225.11.25 port 53756 ssh2
Mar 13 19:51:10 Ubuntu-1404-trusty-64-minimal sshd\[23970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.11.25  user=root
Mar 13 19:51:12 Ubuntu-1404-trusty-64-minimal sshd\[23970\]: Failed password for root from 14.225.11.25 port 57272 ssh2
2020-03-14 05:01:34
14.228.20.108 attack
Feb 13 04:50:01 pi sshd[20143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.228.20.108 
Feb 13 04:50:04 pi sshd[20143]: Failed password for invalid user admin1 from 14.228.20.108 port 61959 ssh2
2020-03-14 04:54:38
222.186.180.142 attackspambots
Mar 13 18:21:49 firewall sshd[21818]: Failed password for root from 222.186.180.142 port 40235 ssh2
Mar 13 18:21:51 firewall sshd[21818]: Failed password for root from 222.186.180.142 port 40235 ssh2
Mar 13 18:21:53 firewall sshd[21818]: Failed password for root from 222.186.180.142 port 40235 ssh2
...
2020-03-14 05:24:25
41.155.253.125 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-14 05:06:31
14.228.26.28 attackbots
Feb  8 05:53:18 pi sshd[27055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.228.26.28  user=root
Feb  8 05:53:19 pi sshd[27055]: Failed password for invalid user root from 14.228.26.28 port 62022 ssh2
2020-03-14 04:53:34
14.181.252.13 attackbots
Jan 14 09:27:49 pi sshd[20933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.181.252.13  user=root
Jan 14 09:27:51 pi sshd[20933]: Failed password for invalid user root from 14.181.252.13 port 50205 ssh2
2020-03-14 05:12:35
49.88.112.67 attack
Mar 13 22:03:37 v22018053744266470 sshd[30885]: Failed password for root from 49.88.112.67 port 59453 ssh2
Mar 13 22:04:38 v22018053744266470 sshd[30947]: Failed password for root from 49.88.112.67 port 46443 ssh2
...
2020-03-14 05:14:49
187.140.178.148 attackbots
Portscan or hack attempt detected by psad/fwsnort
2020-03-14 04:48:51
14.170.223.236 attackspam
Jan 12 23:08:50 pi sshd[6609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.170.223.236  user=root
Jan 12 23:08:53 pi sshd[6609]: Failed password for invalid user root from 14.170.223.236 port 54246 ssh2
2020-03-14 05:15:48
49.235.87.213 attackbots
Mar 13 21:10:34 vserver sshd\[4827\]: Failed password for root from 49.235.87.213 port 38260 ssh2Mar 13 21:15:19 vserver sshd\[4852\]: Failed password for root from 49.235.87.213 port 36562 ssh2Mar 13 21:19:48 vserver sshd\[4870\]: Invalid user artif from 49.235.87.213Mar 13 21:19:50 vserver sshd\[4870\]: Failed password for invalid user artif from 49.235.87.213 port 34872 ssh2
...
2020-03-14 04:52:48
14.204.22.5 attackspambots
Jan 16 16:46:40 pi sshd[4977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.204.22.5  user=root
Jan 16 16:46:41 pi sshd[4977]: Failed password for invalid user root from 14.204.22.5 port 63170 ssh2
2020-03-14 05:05:21
171.240.200.19 attack
Honeypot attack, port: 5555, PTR: dynamic-ip-adsl.viettel.vn.
2020-03-14 04:56:53
42.230.201.112 attackspam
Honeypot attack, port: 81, PTR: hn.kd.ny.adsl.
2020-03-14 05:15:23
95.168.96.42 attackspambots
T: f2b postfix aggressive 3x
2020-03-14 04:51:34

Recently Reported IPs

113.28.90.66 87.0.75.8 52.70.98.120 112.249.113.163
1.80.170.37 107.148.226.97 103.40.196.91 124.115.231.186
39.105.204.48 45.248.26.152 45.228.127.250 194.104.10.75
165.140.216.105 194.158.72.13 103.123.25.48 189.126.95.23
182.148.106.228 82.137.250.18 175.159.244.33 118.249.58.144