Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
botsattackproxy
SSH bot
2024-04-30 12:52:07
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20352
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.222.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 04:07:43 CST 2022
;; MSG SIZE  rcvd: 107
Host info
222.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
222.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
180.191.81.89 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 08-10-2019 21:05:17.
2019-10-09 05:01:54
103.57.80.58 attackbots
postfix
2019-10-09 04:16:14
92.118.161.17 attackspam
Automatic report - Banned IP Access
2019-10-09 04:54:39
177.126.188.2 attackspambots
Oct  8 22:54:09 meumeu sshd[8271]: Failed password for root from 177.126.188.2 port 37314 ssh2
Oct  8 22:58:54 meumeu sshd[9031]: Failed password for root from 177.126.188.2 port 57114 ssh2
...
2019-10-09 05:06:30
218.153.253.182 attackspambots
IP attempted unauthorised action
2019-10-09 05:14:20
125.130.110.20 attackspambots
Oct  8 22:01:02 vmanager6029 sshd\[29702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.110.20  user=root
Oct  8 22:01:03 vmanager6029 sshd\[29702\]: Failed password for root from 125.130.110.20 port 36564 ssh2
Oct  8 22:05:38 vmanager6029 sshd\[29813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.110.20  user=root
2019-10-09 04:47:03
212.147.15.213 attackspambots
2019-10-08T20:11:28.876355homeassistant sshd[11454]: Invalid user www from 212.147.15.213 port 3512
2019-10-08T20:11:28.882608homeassistant sshd[11454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.147.15.213
...
2019-10-09 04:18:42
222.186.130.20 attack
404 NOT FOUND
2019-10-09 05:03:56
60.170.224.187 attackbotsspam
Telnet Server BruteForce Attack
2019-10-09 04:40:00
103.79.143.163 attackspambots
Oct  8 15:05:16 borg sshd[17883]: Failed unknown for invalid user admin from 103.79.143.163 port 52302 ssh2
Oct  8 15:05:17 borg sshd[17883]: Failed unknown for invalid user admin from 103.79.143.163 port 52302 ssh2
Oct  8 15:05:17 borg sshd[17883]: Failed unknown for invalid user admin from 103.79.143.163 port 52302 ssh2
...
2019-10-09 04:54:10
103.253.42.34 attackbotsspam
Oct  8 20:16:12 mail postfix/smtpd\[6543\]: warning: unknown\[103.253.42.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct  8 20:52:45 mail postfix/smtpd\[7608\]: warning: unknown\[103.253.42.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct  8 21:29:24 mail postfix/smtpd\[10033\]: warning: unknown\[103.253.42.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct  8 22:05:56 mail postfix/smtpd\[11198\]: warning: unknown\[103.253.42.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2019-10-09 04:53:54
45.12.220.189 attackbots
B: Magento admin pass test (wrong country)
2019-10-09 04:17:49
188.212.101.121 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-10-09 04:27:56
37.120.142.155 attackspam
0,80-02/03 [bc01/m23] concatform PostRequest-Spammer scoring: Durban01
2019-10-09 04:45:18
222.122.31.133 attackbotsspam
Oct  9 02:21:34 areeb-Workstation sshd[1978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.122.31.133
Oct  9 02:21:36 areeb-Workstation sshd[1978]: Failed password for invalid user P@ssw0rd from 222.122.31.133 port 60824 ssh2
...
2019-10-09 05:09:34

Recently Reported IPs

118.119.60.148 181.209.116.190 183.128.106.63 176.123.8.76
117.242.232.86 43.249.131.26 180.106.90.120 202.137.144.88
217.93.247.215 185.215.247.79 28.3.88.29 203.57.254.113
45.187.97.63 110.182.96.46 104.168.151.13 183.157.173.66
192.241.195.166 143.198.146.43 222.90.12.172 200.106.124.58