Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
attack
Port Scan Attack
2022-05-26 12:33:29
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
104.152.52.242 attackproxy
Bot attacker IP
2024-06-25 12:37:07
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45884
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.146.			IN	A

;; AUTHORITY SECTION:
.			473	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020601 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 08:51:00 CST 2022
;; MSG SIZE  rcvd: 107
Host info
146.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
146.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
94.102.60.18 attack
Apr 15 16:25:33 mail sshd\[5464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.102.60.18  user=root
...
2020-04-16 05:19:48
138.68.250.76 attackspam
Port Scan: Events[2] countPorts[2]: 9424 9425 ..
2020-04-16 05:19:19
185.156.73.49 attackspambots
Port Scan: Events[1] countPorts[1]: 3025 ..
2020-04-16 05:38:48
91.241.19.68 attack
RDP Bruteforce
2020-04-16 05:40:00
112.95.249.136 attackbots
Apr 15 22:13:11 vps sshd[2118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.95.249.136 
Apr 15 22:13:13 vps sshd[2118]: Failed password for invalid user router from 112.95.249.136 port 10871 ssh2
Apr 15 22:25:06 vps sshd[2962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.95.249.136 
...
2020-04-16 05:48:03
92.63.194.22 attackspam
Apr 16 04:33:13 webhost01 sshd[19118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.22
Apr 16 04:33:16 webhost01 sshd[19118]: Failed password for invalid user admin from 92.63.194.22 port 34727 ssh2
...
2020-04-16 05:34:26
182.180.128.134 attackspambots
Apr 15 15:08:11 server1 sshd\[22680\]: Failed password for root from 182.180.128.134 port 44166 ssh2
Apr 15 15:12:16 server1 sshd\[24059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.180.128.134  user=ubuntu
Apr 15 15:12:18 server1 sshd\[24059\]: Failed password for ubuntu from 182.180.128.134 port 51656 ssh2
Apr 15 15:16:30 server1 sshd\[25352\]: Invalid user osm from 182.180.128.134
Apr 15 15:16:30 server1 sshd\[25352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.180.128.134 
...
2020-04-16 05:24:34
122.228.19.79 attack
ET SCAN HID VertX and Edge door controllers discover - port: 4070 proto: UDP cat: Attempted Information Leak
2020-04-16 05:26:30
106.13.73.59 attackbots
Apr 15 22:21:06 srv01 sshd[21072]: Invalid user lz from 106.13.73.59 port 35504
Apr 15 22:21:06 srv01 sshd[21072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.73.59
Apr 15 22:21:06 srv01 sshd[21072]: Invalid user lz from 106.13.73.59 port 35504
Apr 15 22:21:07 srv01 sshd[21072]: Failed password for invalid user lz from 106.13.73.59 port 35504 ssh2
Apr 15 22:25:09 srv01 sshd[21471]: Invalid user db2inst1 from 106.13.73.59 port 32996
...
2020-04-16 05:50:08
222.186.173.215 attackspambots
Fail2Ban - SSH Bruteforce Attempt
2020-04-16 05:32:23
172.105.89.161 attackbots
Port Scan: Events[1] countPorts[1]: 445 ..
2020-04-16 05:50:31
185.142.239.16 attack
Apr 15 22:31:19 debian-2gb-nbg1-2 kernel: \[9241663.113691\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.142.239.16 DST=195.201.40.59 LEN=43 TOS=0x08 PREC=0x00 TTL=114 ID=33139 PROTO=UDP SPT=26477 DPT=11211 LEN=23
2020-04-16 05:46:56
141.98.81.84 attack
Apr 15 23:05:11 ks10 sshd[437823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.84 
Apr 15 23:05:13 ks10 sshd[437823]: Failed password for invalid user admin from 141.98.81.84 port 33735 ssh2
...
2020-04-16 05:14:11
202.158.123.94 attack
"Unauthorized connection attempt on SSHD detected"
2020-04-16 05:35:32
112.120.111.247 attack
2020-04-15T22:21:53.093868vps773228.ovh.net sshd[32028]: Invalid user admin from 112.120.111.247 port 56150
2020-04-15T22:21:53.116261vps773228.ovh.net sshd[32028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=n112120111247.netvigator.com
2020-04-15T22:21:53.093868vps773228.ovh.net sshd[32028]: Invalid user admin from 112.120.111.247 port 56150
2020-04-15T22:21:55.296959vps773228.ovh.net sshd[32028]: Failed password for invalid user admin from 112.120.111.247 port 56150 ssh2
2020-04-15T22:25:23.779252vps773228.ovh.net sshd[890]: Invalid user ftp1 from 112.120.111.247 port 56802
...
2020-04-16 05:29:46

Recently Reported IPs

106.5.121.249 90.90.225.154 134.135.238.164 216.176.158.73
229.91.133.73 88.230.165.250 228.216.154.26 59.12.105.66
89.6.82.54 182.237.8.10 185.146.35.207 182.94.10.109
145.50.128.223 151.40.49.27 194.11.24.17 194.7.22.11
160.59.49.65 178.167.46.46 108.94.68.148 67.242.24.133