Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackproxy
Vulnerability Scanner
2024-06-14 12:52:07
attack
Port scan
2022-05-12 12:55:07
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38567
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.152.			IN	A

;; AUTHORITY SECTION:
.			252	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 06:30:36 CST 2022
;; MSG SIZE  rcvd: 107
Host info
152.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
152.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
102.22.126.177 attackspambots
SSH login attempts.
2020-03-20 13:10:28
222.72.137.110 attackbotsspam
Mar 20 05:00:00 [host] sshd[30309]: Invalid user a
Mar 20 05:00:00 [host] sshd[30309]: pam_unix(sshd:
Mar 20 05:00:02 [host] sshd[30309]: Failed passwor
2020-03-20 12:30:16
54.38.185.226 attackspambots
Mar 20 05:51:47 ourumov-web sshd\[27728\]: Invalid user cpanelphpmyadmin from 54.38.185.226 port 52764
Mar 20 05:51:47 ourumov-web sshd\[27728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.185.226
Mar 20 05:51:48 ourumov-web sshd\[27728\]: Failed password for invalid user cpanelphpmyadmin from 54.38.185.226 port 52764 ssh2
...
2020-03-20 12:54:16
51.68.174.177 attackspambots
SSH login attempts.
2020-03-20 13:15:20
213.230.126.191 attackspambots
SSH login attempts.
2020-03-20 13:09:31
178.156.202.78 attack
SSH_attack
2020-03-20 12:32:21
45.248.163.180 attackspam
Unauthorized connection attempt from IP address 45.248.163.180 on Port 445(SMB)
2020-03-20 12:39:34
62.171.161.248 attackbots
SSH login attempts.
2020-03-20 12:55:28
222.223.93.11 attack
Mar 20 10:24:13 areeb-Workstation sshd[6647]: Failed password for root from 222.223.93.11 port 2513 ssh2
...
2020-03-20 13:16:10
185.253.217.55 attack
Mar 20 00:55:59 firewall sshd[12776]: Failed password for root from 185.253.217.55 port 36006 ssh2
Mar 20 00:59:54 firewall sshd[13002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.253.217.55  user=root
Mar 20 00:59:56 firewall sshd[13002]: Failed password for root from 185.253.217.55 port 42426 ssh2
...
2020-03-20 12:56:17
95.216.150.178 attackbotsspam
SSH login attempts.
2020-03-20 13:01:10
83.5.203.40 attackspam
Mar 20 03:35:45 XXXXXX sshd[58219]: Invalid user nagios from 83.5.203.40 port 34138
2020-03-20 12:38:41
115.159.220.190 attack
SSH login attempts.
2020-03-20 13:02:11
14.29.250.133 attack
SSH login attempts.
2020-03-20 12:40:05
198.27.81.94 attack
Wordpress Admin Login attack
2020-03-20 12:30:42

Recently Reported IPs

104.152.52.145 104.152.52.184 104.152.52.181 104.156.226.243
104.156.250.155 104.162.82.245 104.163.142.201 104.168.86.200
104.19.152.75 104.168.77.133 104.171.59.205 104.175.201.239
104.160.18.108 104.196.104.237 104.194.11.205 104.196.22.115
104.197.138.6 104.197.244.255 104.199.76.46 104.199.226.249