Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Rethem Hosting LLC

Hostname: unknown

Organization: Rethem Hosting LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
UDP and TCP Ports scans
2020-08-24 12:36:35
attackspambots
Jun 20 16:10:54 mail postfix/postscreen[1906]: DNSBL rank 3 for [104.152.52.28]:42223
...
2020-06-29 05:13:00
attackbots
Drop-BlasterVariant-p4444-TCP | Jun/04/2020 03:04:57
2020-06-05 01:52:56
attackbots
TCP scanned port list, 2080, 518, 49190, 53, 6679
2020-04-14 08:05:53
attackbots
Oct 28 17:17:51 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=104.152.52.28 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=243 ID=29604 PROTO=UDP SPT=42981 DPT=123 LEN=56 
...
2020-03-04 02:41:03
attackspam
SMB Server BruteForce Attack
2019-09-01 12:09:08
attackbots
*Port Scan* detected from 104.152.52.28 (US/United States/internettl.org). 11 hits in the last 270 seconds
2019-08-01 00:05:31
attack
Jul 29 17:31:04 *** sshd[18483]: Did not receive identification string from 104.152.52.28
2019-07-30 09:05:32
attack
SMB Server BruteForce Attack
2019-07-05 19:09:51
attackbots
A portscan was detected. Details about the event:
Time.............: 2019-06-25 21:30:16
Source IP address: 104.152.52.28 (internettl.org)
2019-06-27 02:10:39
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52758
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.152.52.28.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 12 23:22:43 +08 2019
;; MSG SIZE  rcvd: 117

Host info
28.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
28.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
182.185.123.243 attackbots
Brute-force general attack.
2020-03-10 22:52:12
186.207.180.25 attack
2020-03-10T10:29:22.765130scmdmz1 sshd[9335]: Invalid user ricambi from 186.207.180.25 port 36490
2020-03-10T10:29:24.442815scmdmz1 sshd[9335]: Failed password for invalid user ricambi from 186.207.180.25 port 36490 ssh2
2020-03-10T10:37:30.845713scmdmz1 sshd[10348]: Invalid user dmsplus from 186.207.180.25 port 40992
...
2020-03-10 22:55:20
188.69.135.214 attackbotsspam
Banned by Fail2Ban.
2020-03-10 22:49:05
151.236.33.28 attack
10.03.2020 11:37:03 - Wordpress fail 
Detected by ELinOX-ALM
2020-03-10 23:30:07
188.226.149.92 attackspam
Mar 10 14:58:56 tuxlinux sshd[25770]: Invalid user 217 from 188.226.149.92 port 58484
Mar 10 14:58:56 tuxlinux sshd[25770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.149.92 
Mar 10 14:58:56 tuxlinux sshd[25770]: Invalid user 217 from 188.226.149.92 port 58484
Mar 10 14:58:56 tuxlinux sshd[25770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.149.92 
Mar 10 14:58:56 tuxlinux sshd[25770]: Invalid user 217 from 188.226.149.92 port 58484
Mar 10 14:58:56 tuxlinux sshd[25770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.149.92 
Mar 10 14:58:58 tuxlinux sshd[25770]: Failed password for invalid user 217 from 188.226.149.92 port 58484 ssh2
...
2020-03-10 23:15:54
192.241.235.46 attackbotsspam
scans once in preceeding hours on the ports (in chronological order) 62534 resulting in total of 67 scans from 192.241.128.0/17 block.
2020-03-10 23:09:24
218.92.0.171 attackspam
Mar 10 15:30:07 sso sshd[28939]: Failed password for root from 218.92.0.171 port 63768 ssh2
Mar 10 15:30:11 sso sshd[28939]: Failed password for root from 218.92.0.171 port 63768 ssh2
...
2020-03-10 23:32:49
134.73.51.20 attack
Mar 10 11:16:11 mail.srvfarm.net postfix/smtpd[473509]: NOQUEUE: reject: RCPT from unknown[134.73.51.20]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 10 11:16:11 mail.srvfarm.net postfix/smtpd[467826]: NOQUEUE: reject: RCPT from unknown[134.73.51.20]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 10 11:16:11 mail.srvfarm.net postfix/smtpd[486142]: NOQUEUE: reject: RCPT from unknown[134.73.51.20]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 10 11:16:17 mail.srvfarm.net postfix/smtpd[473509]: NOQUEUE: reject: RCPT from unknown[134.73.51.20]: 450 4.1.8 : Sender address
2020-03-10 23:20:53
101.255.95.69 attackbotsspam
Mar 10 02:11:59 spidey sshd[24700]: Invalid user sniffer from 101.255.95.69 port 62264
Mar 10 02:11:59 spidey sshd[24699]: Invalid user sniffer from 101.255.95.69 port 63914
Mar 10 02:12:00 spidey sshd[24706]: Invalid user sniffer from 101.255.95.69 port 53429
Mar 10 02:12:00 spidey sshd[24705]: Invalid user sniffer from 101.255.95.69 port 53392
Mar 10 02:12:00 spidey sshd[24707]: Invalid user sniffer from 101.255.95.69 port 55505


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=101.255.95.69
2020-03-10 22:50:03
36.75.107.112 attack
1583832103 - 03/10/2020 10:21:43 Host: 36.75.107.112/36.75.107.112 Port: 445 TCP Blocked
2020-03-10 22:48:12
149.3.124.136 attack
1583832084 - 03/10/2020 10:21:24 Host: 149.3.124.136/149.3.124.136 Port: 445 TCP Blocked
2020-03-10 22:59:16
122.228.19.79 attackspam
Unauthorized connection attempt detected from IP address 122.228.19.79 to port 2525 [T]
2020-03-10 23:28:30
185.175.93.3 attackspam
03/10/2020-10:50:20.888711 185.175.93.3 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-03-10 23:05:44
14.248.214.157 attack
Mar 10 11:21:24 taivassalofi sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.214.157
Mar 10 11:21:26 taivassalofi sshd[5414]: Failed password for invalid user ubnt from 14.248.214.157 port 60746 ssh2
...
2020-03-10 22:57:20
176.113.115.246 attack
Mar 10 15:38:31 debian-2gb-nbg1-2 kernel: \[6110258.770078\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=176.113.115.246 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=2482 PROTO=TCP SPT=58556 DPT=30133 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-10 22:58:48

Recently Reported IPs

118.89.33.17 42.239.87.9 162.241.154.60 12.244.69.178
119.42.119.20 177.126.212.128 38.92.125.10 27.201.253.164
201.231.101.234 27.152.113.203 177.67.162.43 14.34.202.51
146.0.135.115 223.181.232.168 1.161.90.215 40.134.163.163
41.190.62.205 125.40.199.8 189.149.19.137 177.36.201.81