Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy 
Bot attacker IP
 2025-03-25 13:44:38
104.152.52.145 botsattackproxy 
Vulnerability Scanner
 2025-03-20 13:41:36
104.152.52.100 spamattackproxy 
VoIP blacklist IP
 2025-03-14 22:09:59
104.152.52.139 attack 
Brute-force attacker IP
 2025-03-10 13:45:36
104.152.52.219 botsattackproxy 
Bot attacker IP
 2025-03-04 13:55:48
104.152.52.124 botsattackproxy 
Vulnerability Scanner
 2025-02-26 17:12:59
104.152.52.146 botsattackproxy 
Bot attacker IP
 2025-02-21 12:31:03
104.152.52.161 botsattackproxy 
Vulnerability Scanner
 2025-02-05 14:00:57
104.152.52.176 botsattackproxy 
Botnet DB Scanner
 2025-01-20 14:03:26
104.152.52.141 botsattack 
Vulnerability Scanner
 2025-01-09 22:45:15
104.152.52.165 botsattackproxy 
Bot attacker IP
 2024-09-24 16:44:08
104.152.52.226 botsattackproxy 
Vulnerability Scanner
 2024-08-28 12:46:53
104.152.52.142 spambotsattack 
Vulnerability Scanner
 2024-08-26 12:47:13
104.152.52.116 spamattack 
Compromised IP
 2024-07-06 14:07:26
104.152.52.204 attack 
Bad IP
 2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12557
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.73.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:11:31 CST 2022
;; MSG SIZE  rcvd: 106
Host info
73.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
73.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
104.152.52.100
104.152.52.250
104.152.52.64
104.152.52.10
104.152.52.214
104.152.52.42
104.152.52.126
104.152.52.22
104.152.52.13
104.152.52.178
104.152.52.230
104.152.52.167
104.152.52.163
104.152.52.218
104.152.52.145
104.152.52.1
104.152.52.226
104.152.52.2
104.152.52.185
104.152.52.120
104.152.52.173
104.152.52.45
104.152.52.228
104.152.52.182
104.152.52.99
104.152.52.240
104.152.52.147
104.152.52.16
104.152.52.121
104.152.52.85
104.152.52.148
104.152.52.87
104.152.52.252
104.152.52.231
104.152.52.190
104.152.52.8
104.152.52.66
104.152.52.6
104.152.52.5
104.152.52.136
104.152.52.180
104.152.52.253
104.152.52.211
104.152.52.117
104.152.52.96
104.152.52.201
104.152.52.19
104.152.52.88
104.152.52.83
104.152.52.23
104.152.52.213
104.152.52.195
104.152.52.79
104.152.52.134
104.152.52.11
104.152.52.192
104.152.52.28
104.152.52.32
104.152.52.224
104.152.52.84
104.152.52.53
104.152.52.93
104.152.52.141
104.152.52.161
104.152.52.72
104.152.52.49
104.152.52.44
104.152.52.199
104.152.52.223
104.152.52.202
104.152.52.175
104.152.52.208
104.152.52.130
104.152.52.143
104.152.52.235
104.152.52.17
104.152.52.29
104.152.52.31
104.152.52.179
104.152.52.196
104.152.52.219
104.152.52.75
104.152.52.166
104.152.52.181
104.152.52.65
104.152.52.238
104.152.52.38
104.152.52.77
104.152.52.186
104.152.52.210
104.152.52.194
104.152.52.176
104.152.52.104
104.152.52.51
104.152.52.139
104.152.52.95
104.152.52.27
104.152.52.204
104.152.52.128
104.152.52.47
104.152.52.67
104.152.52.222
104.152.52.233
104.152.52.236
104.152.52.94
104.152.52.200
104.152.52.119
104.152.52.217
104.152.52.124
104.152.52.111
104.152.52.118
104.152.52.187
104.152.52.86
104.152.52.3
104.152.52.193
104.152.52.61
104.152.52.112
104.152.52.245
104.152.52.37
104.152.52.174
104.152.52.116
104.152.52.58
104.152.52.40
104.152.52.212
104.152.52.184
104.152.52.113
104.152.52.91
104.152.52.151
104.152.52.239
104.152.52.92
104.152.52.220
104.152.52.132
104.152.52.101
104.152.52.146
104.152.52.41
104.152.52.189
104.152.52.81
104.152.52.156
104.152.52.59
104.152.52.241
104.152.52.155
104.152.52.177
104.152.52.203
104.152.52.33
104.152.52.234
104.152.52.109
104.152.52.9
104.152.52.191
104.152.52.227
104.152.52.7
104.152.52.209
104.152.52.50
104.152.52.251
104.152.52.30
104.152.52.152
104.152.52.129
104.152.52.168
104.152.52.106
104.152.52.115
104.152.52.215
104.152.52.68
104.152.52.82
104.152.52.244
104.152.52.73
104.152.52.24
104.152.52.165
104.152.52.110
104.152.52.142
104.152.52.225
104.152.52.56
104.152.52.207
104.152.52.35
104.152.52.254
104.152.52.164
104.152.52.157
104.152.52.4
104.152.52.90
104.152.52.98
104.152.52.18
104.152.52.97
104.152.52.39
104.152.52.71
104.152.52.69
104.152.52.131
104.152.52.242
104.152.52.221
104.152.52.63
104.152.52.158
104.152.52.70
104.152.52.171
104.152.52.123
104.152.52.46
104.152.52.102
104.152.52.248
104.152.52.150
104.152.52.114
104.152.52.74
104.152.52.15
104.152.52.89
104.152.52.205
104.152.52.137
104.152.52.160
104.152.52.54
104.152.52.249
104.152.52.135
104.152.52.170
104.152.52.76
104.152.52.127
104.152.52.133
104.152.52.188
104.152.52.232
104.152.52.125
104.152.52.26
104.152.52.237
104.152.52.243
104.152.52.229
104.152.52.20
104.152.52.78
104.152.52.103
104.152.52.105
104.152.52.52
104.152.52.108
104.152.52.159
104.152.52.154
104.152.52.107
104.152.52.12
104.152.52.140
104.152.52.169
104.152.52.55
104.152.52.247
104.152.52.14
104.152.52.172
104.152.52.48
104.152.52.162
104.152.52.21
104.152.52.216
104.152.52.198
104.152.52.36
104.152.52.144
104.152.52.246
104.152.52.153
104.152.52.34
104.152.52.138
104.152.52.62
104.152.52.43
104.152.52.197
104.152.52.60
104.152.52.206
104.152.52.25
104.152.52.149
104.152.52.183
104.152.52.57
104.152.52.80
104.152.52.122
Related comments:
IP Type Details Datetime
52.44.93.197 attack 
Attempting access with private members email link (403)
 2019-11-01 19:10:45
185.143.221.186 attackspam 
11/01/2019-05:51:39.818129 185.143.221.186 Protocol: 6 ET SCAN NMAP -sS window 1024
 2019-11-01 18:55:22
95.37.207.81 attackspambots 
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/95.37.207.81/ 
 
 RU - 1H : (174)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : RU 
 NAME ASN : ASN12389 
 
 IP : 95.37.207.81 
 
 CIDR : 95.37.128.0/17 
 
 PREFIX COUNT : 2741 
 
 UNIQUE IP COUNT : 8699648 
 
 
 ATTACKS DETECTED ASN12389 :  
  1H - 4 
  3H - 17 
  6H - 23 
 12H - 36 
 24H - 83 
 
 DateTime : 2019-11-01 04:47:07 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
 2019-11-01 19:13:57
34.215.69.55 attack 
34.215.69.55 - - \[01/Nov/2019:06:28:55 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/65.0.3325.181 Safari/537.36"
34.215.69.55 - - \[01/Nov/2019:07:08:38 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/65.0.3325.181 Safari/537.36"
...
 2019-11-01 18:40:03
61.69.254.46 attackbotsspam 
Fail2Ban Ban Triggered
 2019-11-01 19:02:20
139.59.3.151 attackbots 
Nov  1 11:24:35 tuxlinux sshd[34981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.151  user=root
Nov  1 11:24:37 tuxlinux sshd[34981]: Failed password for root from 139.59.3.151 port 40874 ssh2
Nov  1 11:24:35 tuxlinux sshd[34981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.151  user=root
Nov  1 11:24:37 tuxlinux sshd[34981]: Failed password for root from 139.59.3.151 port 40874 ssh2
Nov  1 11:33:42 tuxlinux sshd[35100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.151  user=root
...
 2019-11-01 18:36:42
219.250.188.133 attackbots 
Invalid user Operator from 219.250.188.133 port 45063
 2019-11-01 18:51:00
185.216.32.170 attackspam 
[portscan] tcp/5938 [tcp/5938]
[portscan] tcp/81 [alter-web/web-proxy]
[portscan] tcp/993 [imaps]
[scan/connect: 3 time(s)]
in stopforumspam:'listed [392 times]'
in spfbl.net:'listed'
*(RWIN=65535)(11011243)
 2019-11-01 18:40:41
151.237.94.16 attack 
Automatic report - Banned IP Access
 2019-11-01 19:09:28
81.171.85.138 attackspam 
\[2019-11-01 06:22:02\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.138:51689' - Wrong password
\[2019-11-01 06:22:02\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-01T06:22:02.209-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="291",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.138/51689",Challenge="30fe8058",ReceivedChallenge="30fe8058",ReceivedHash="60e6ea38f5f89aa05a6b5e5590e46f64"
\[2019-11-01 06:22:54\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.138:61423' - Wrong password
\[2019-11-01 06:22:54\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-01T06:22:54.543-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="740",SessionID="0x7fdf2cda50b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.138
 2019-11-01 18:35:32
91.245.224.61 attackspam 
Fail2Ban Ban Triggered
 2019-11-01 18:43:54
140.143.15.169 attackspambots 
2019-11-01T10:02:23.015792abusebot-6.cloudsearch.cf sshd\[4600\]: Invalid user resumix from 140.143.15.169 port 37956
 2019-11-01 18:41:34
45.141.84.10 attack 
RDP Bruteforce
 2019-11-01 19:12:37
97.68.93.237 attackbots 
Nov  1 08:58:39 apollo sshd\[13193\]: Invalid user hadoop from 97.68.93.237Nov  1 08:58:41 apollo sshd\[13193\]: Failed password for invalid user hadoop from 97.68.93.237 port 57596 ssh2Nov  1 09:20:00 apollo sshd\[13319\]: Failed password for root from 97.68.93.237 port 46702 ssh2
...
 2019-11-01 19:06:26
167.71.82.184 attack 
Nov  1 06:12:22 ny01 sshd[26983]: Failed password for root from 167.71.82.184 port 37080 ssh2
Nov  1 06:16:03 ny01 sshd[27331]: Failed password for root from 167.71.82.184 port 46712 ssh2
 2019-11-01 18:33:46

Recently Reported IPs

104.152.52.185 104.152.52.159 104.152.52.168 104.152.57.149
104.152.52.165 104.154.104.47 104.152.52.177 104.152.52.55
104.156.110.52 104.16.237.230 104.156.227.99 104.155.230.1
104.156.155.9 104.160.8.200 104.161.20.163 104.16.85.20
104.152.59.252 104.16.86.20 104.16.87.20 104.168.21.35