Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Rethem Hosting LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Unauthorized connection attempt detected from IP address 104.152.52.27 to port 691
2020-01-30 22:48:38
attackspam
Masscan Port Scanning Tool Detection
2019-11-21 04:08:02
attack
scan z
2019-10-16 13:58:46
attack
19/8/27@15:34:07: FAIL: Alarm-SSH address from=104.152.52.27
...
2019-08-28 07:06:22
attackbots
Web application attack detected by fail2ban
2019-07-05 08:04:06
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39759
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.152.52.27.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019043000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 30 16:37:55 +08 2019
;; MSG SIZE  rcvd: 117

Host info
27.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
27.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
170.80.63.196 attackspam
Automatic report - Port Scan Attack
2020-01-28 00:41:48
185.107.29.135 attackspam
Unauthorized connection attempt from IP address 185.107.29.135 on Port 445(SMB)
2020-01-28 00:32:51
36.81.131.182 attackspam
Attempt to attack host OS, exploiting network vulnerabilities, on 27-01-2020 09:50:14.
2020-01-28 00:57:33
43.250.165.172 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 27-01-2020 09:50:14.
2020-01-28 00:57:12
46.246.45.138 attack
fraudulent SSH attempt
2020-01-28 00:52:53
78.128.113.62 attackspam
20 attempts against mh-misbehave-ban on oak
2020-01-28 01:08:10
177.55.165.60 attack
Unauthorized connection attempt from IP address 177.55.165.60 on Port 445(SMB)
2020-01-28 00:42:17
196.23.154.76 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 27-01-2020 09:50:13.
2020-01-28 00:58:40
89.248.172.85 attackbotsspam
01/27/2020-11:22:59.729369 89.248.172.85 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-01-28 00:45:09
71.6.233.38 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-01-28 01:07:03
92.63.196.10 attack
Triggered: repeated knocking on closed ports.
2020-01-28 00:33:39
78.128.113.166 attack
20 attempts against mh_ha-misbehave-ban on sun
2020-01-28 00:38:02
148.70.96.124 attackbotsspam
Jan 27 17:21:19 vpn01 sshd[24592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.96.124
Jan 27 17:21:21 vpn01 sshd[24592]: Failed password for invalid user abcd from 148.70.96.124 port 40350 ssh2
...
2020-01-28 00:46:05
180.242.75.111 attackspambots
Unauthorized connection attempt from IP address 180.242.75.111 on Port 445(SMB)
2020-01-28 00:40:17
180.241.153.236 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 27-01-2020 09:50:12.
2020-01-28 00:59:36

Recently Reported IPs

149.129.50.37 79.105.135.50 14.102.102.246 225.230.38.173
13.152.226.252 197.97.117.34 103.123.161.38 188.138.102.91
195.191.131.150 85.163.0.37 198.108.66.144 175.101.63.77
188.113.240.36 160.20.15.41 82.138.29.174 210.212.78.34
40.112.232.248 52.4.236.226 46.225.115.49 41.38.235.79