Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
Type Details Datetime
attack 
Scan port
 2023-08-23 12:39:55
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy 
Bot attacker IP
 2025-03-25 13:44:38
104.152.52.145 botsattackproxy 
Vulnerability Scanner
 2025-03-20 13:41:36
104.152.52.100 spamattackproxy 
VoIP blacklist IP
 2025-03-14 22:09:59
104.152.52.139 attack 
Brute-force attacker IP
 2025-03-10 13:45:36
104.152.52.219 botsattackproxy 
Bot attacker IP
 2025-03-04 13:55:48
104.152.52.124 botsattackproxy 
Vulnerability Scanner
 2025-02-26 17:12:59
104.152.52.146 botsattackproxy 
Bot attacker IP
 2025-02-21 12:31:03
104.152.52.161 botsattackproxy 
Vulnerability Scanner
 2025-02-05 14:00:57
104.152.52.176 botsattackproxy 
Botnet DB Scanner
 2025-01-20 14:03:26
104.152.52.141 botsattack 
Vulnerability Scanner
 2025-01-09 22:45:15
104.152.52.165 botsattackproxy 
Bot attacker IP
 2024-09-24 16:44:08
104.152.52.226 botsattackproxy 
Vulnerability Scanner
 2024-08-28 12:46:53
104.152.52.142 spambotsattack 
Vulnerability Scanner
 2024-08-26 12:47:13
104.152.52.116 spamattack 
Compromised IP
 2024-07-06 14:07:26
104.152.52.204 attack 
Bad IP
 2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50713
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.158.			IN	A

;; AUTHORITY SECTION:
.			101	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020601 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 12:52:20 CST 2022
;; MSG SIZE  rcvd: 107
Host info
158.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
158.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
104.152.52.164
104.152.52.92
104.152.52.97
104.152.52.115
104.152.52.63
104.152.52.2
104.152.52.162
104.152.52.211
104.152.52.20
104.152.52.138
104.152.52.110
104.152.52.127
104.152.52.13
104.152.52.240
104.152.52.199
104.152.52.233
104.152.52.234
104.152.52.15
104.152.52.249
104.152.52.9
104.152.52.231
104.152.52.241
104.152.52.79
104.152.52.201
104.152.52.95
104.152.52.170
104.152.52.145
104.152.52.38
104.152.52.86
104.152.52.180
104.152.52.227
104.152.52.142
104.152.52.52
104.152.52.31
104.152.52.75
104.152.52.243
104.152.52.6
104.152.52.220
104.152.52.58
104.152.52.168
104.152.52.246
104.152.52.34
104.152.52.42
104.152.52.126
104.152.52.8
104.152.52.237
104.152.52.133
104.152.52.64
104.152.52.153
104.152.52.7
104.152.52.195
104.152.52.172
104.152.52.248
104.152.52.29
104.152.52.106
104.152.52.91
104.152.52.223
104.152.52.17
104.152.52.232
104.152.52.217
104.152.52.93
104.152.52.157
104.152.52.77
104.152.52.82
104.152.52.26
104.152.52.71
104.152.52.32
104.152.52.171
104.152.52.87
104.152.52.198
104.152.52.210
104.152.52.179
104.152.52.236
104.152.52.111
104.152.52.144
104.152.52.50
104.152.52.216
104.152.52.187
104.152.52.51
104.152.52.147
104.152.52.49
104.152.52.41
104.152.52.151
104.152.52.167
104.152.52.37
104.152.52.188
104.152.52.178
104.152.52.196
104.152.52.251
104.152.52.176
104.152.52.177
104.152.52.57
104.152.52.222
104.152.52.129
104.152.52.101
104.152.52.218
104.152.52.117
104.152.52.174
104.152.52.18
104.152.52.21
104.152.52.47
104.152.52.43
104.152.52.100
104.152.52.252
104.152.52.219
104.152.52.114
104.152.52.244
104.152.52.141
104.152.52.83
104.152.52.112
104.152.52.27
104.152.52.204
104.152.52.182
104.152.52.28
104.152.52.68
104.152.52.254
104.152.52.186
104.152.52.225
104.152.52.84
104.152.52.131
104.152.52.154
104.152.52.72
104.152.52.209
104.152.52.59
104.152.52.194
104.152.52.45
104.152.52.235
104.152.52.36
104.152.52.173
104.152.52.78
104.152.52.124
104.152.52.155
104.152.52.224
104.152.52.90
104.152.52.202
104.152.52.132
104.152.52.74
104.152.52.65
104.152.52.183
104.152.52.67
104.152.52.229
104.152.52.247
104.152.52.120
104.152.52.107
104.152.52.46
104.152.52.135
104.152.52.4
104.152.52.14
104.152.52.16
104.152.52.242
104.152.52.159
104.152.52.137
104.152.52.3
104.152.52.40
104.152.52.94
104.152.52.85
104.152.52.150
104.152.52.193
104.152.52.152
104.152.52.88
104.152.52.149
104.152.52.125
104.152.52.119
104.152.52.228
104.152.52.163
104.152.52.103
104.152.52.109
104.152.52.81
104.152.52.148
104.152.52.69
104.152.52.230
104.152.52.11
104.152.52.208
104.152.52.22
104.152.52.156
104.152.52.253
104.152.52.189
104.152.52.99
104.152.52.191
104.152.52.30
104.152.52.130
104.152.52.123
104.152.52.53
104.152.52.245
104.152.52.205
104.152.52.181
104.152.52.62
104.152.52.158
104.152.52.122
104.152.52.206
104.152.52.160
104.152.52.1
104.152.52.98
104.152.52.12
104.152.52.238
104.152.52.250
104.152.52.35
104.152.52.80
104.152.52.55
104.152.52.207
104.152.52.60
104.152.52.25
104.152.52.23
104.152.52.175
104.152.52.10
104.152.52.54
104.152.52.184
104.152.52.212
104.152.52.121
104.152.52.166
104.152.52.108
104.152.52.24
104.152.52.169
104.152.52.203
104.152.52.102
104.152.52.192
104.152.52.61
104.152.52.221
104.152.52.76
104.152.52.118
104.152.52.165
104.152.52.56
104.152.52.161
104.152.52.5
104.152.52.96
104.152.52.116
104.152.52.226
104.152.52.139
104.152.52.185
104.152.52.73
104.152.52.19
104.152.52.134
104.152.52.140
104.152.52.105
104.152.52.104
104.152.52.89
104.152.52.48
104.152.52.213
104.152.52.70
104.152.52.39
104.152.52.113
104.152.52.128
104.152.52.44
104.152.52.200
104.152.52.190
104.152.52.33
104.152.52.197
104.152.52.239
104.152.52.143
104.152.52.214
104.152.52.146
104.152.52.136
104.152.52.66
104.152.52.215
Related comments:
IP Type Details Datetime
41.58.82.192 attackbotsspam 
lfd: (smtpauth) Failed SMTP AUTH login from 41.58.82.192 (-): 5 in the last 3600 secs - Mon Dec 24 04:20:10 2018
 2020-02-07 09:20:04
82.165.71.187 attackspambots 
lfd: (smtpauth) Failed SMTP AUTH login from 82.165.71.187 (DE/Germany/-): 5 in the last 3600 secs - Mon Dec 24 03:30:55 2018
 2020-02-07 09:19:02
119.42.118.105 attackbots 
lfd: (smtpauth) Failed SMTP AUTH login from 119.42.118.105 (-): 5 in the last 3600 secs - Wed Dec 19 22:11:54 2018
 2020-02-07 09:37:05
113.172.15.22 attackspam 
lfd: (smtpauth) Failed SMTP AUTH login from 113.172.15.22 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs - Mon Dec 24 23:22:56 2018
 2020-02-07 09:13:19
91.98.172.37 attack 
lfd: (smtpauth) Failed SMTP AUTH login from 91.98.172.37 (IR/Iran/91.98.172.37.pol.ir): 5 in the last 3600 secs - Wed Dec 19 08:09:22 2018
 2020-02-07 09:35:52
40.112.182.56 attack 
Brute force blocker - service: exim2 - aantal: 25 - Thu Dec 20 11:50:11 2018
 2020-02-07 09:33:05
124.109.58.9 attackbotsspam 
lfd: (smtpauth) Failed SMTP AUTH login from 124.109.58.9 (PK/Pakistan/mbl-109-58-9.dsl.net.pk): 5 in the last 3600 secs - Tue Dec 25 17:56:26 2018
 2020-02-07 09:05:49
143.0.179.55 attack 
Brute force attack stopped by firewall
 2020-02-07 09:20:22
106.51.78.188 attackspambots 
Feb  6 20:04:17 NPSTNNYC01T sshd[3241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.78.188
Feb  6 20:04:19 NPSTNNYC01T sshd[3241]: Failed password for invalid user mwg from 106.51.78.188 port 39570 ssh2
Feb  6 20:06:21 NPSTNNYC01T sshd[3281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.78.188
...
 2020-02-07 09:06:38
139.59.137.154 attackbotsspam 
SSH Brute-Force reported by Fail2Ban
 2020-02-07 09:05:27
37.71.138.29 attack 
Feb  6 13:33:34 XXX sshd[1514]: Invalid user ixb from 37.71.138.29 port 37070
 2020-02-07 08:59:28
41.58.56.69 attackbots 
lfd: (smtpauth) Failed SMTP AUTH login from 41.58.56.69 (-): 5 in the last 3600 secs - Tue Dec 25 01:36:05 2018
 2020-02-07 09:13:44
182.253.184.20 attack 
2019-11-12T03:40:24.825267suse-nuc sshd[23765]: Invalid user roide from 182.253.184.20 port 52578
...
 2020-02-07 09:28:45
180.167.216.10 attackbotsspam 
lfd: (smtpauth) Failed SMTP AUTH login from 180.167.216.10 (CN/China/-): 5 in the last 3600 secs - Wed Dec 26 07:14:13 2018
 2020-02-07 08:58:35
185.39.11.28 attackspam 
Feb  7 00:38:22 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.39.11.28, lip=207.180.241.50, session=
Feb  7 00:39:06 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.39.11.28, lip=207.180.241.50, session=
Feb  7 00:39:47 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.39.11.28, lip=207.180.241.50, session=
Feb  7 00:41:43 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.39.11.28, lip=207.180.241.50, session=
Feb  7 00:41:53 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=185.39.11.28, lip=207.180.241.50, session=
 2020-02-07 09:12:04

Recently Reported IPs

58.222.123.50 42.91.140.205 180.243.63.201 189.208.163.230
201.22.103.150 182.53.15.95 34.74.182.138 95.181.148.111
222.141.14.53 88.144.2.196 85.133.134.203 95.189.100.224
200.2.143.2 172.121.142.65 23.80.97.78 45.129.136.37
177.125.222.65 106.51.67.43 217.218.230.5 187.204.56.66