Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
botsattack
104.152.52.74 - - [13/May/2019:16:52:17 +0800] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 232 "-" "-"
104.152.52.74 - - [13/May/2019:16:52:18 +0800] "\\x01default" 400 182 "-" "-"
104.152.52.74 - - [13/May/2019:16:52:19 +0800] "0\\x0C\\x02\\x01\\x01`\\x07\\x02\\x01\\x02\\x04\\x00\\x80\\x00" 400 182 "-" "-"
104.152.52.74 - - [13/May/2019:16:52:20 +0800] "OPTIONS sip:nm SIP/2.0" 400 182 "-" "-"
104.152.52.74 - - [13/May/2019:16:52:21 +0800] "TNMP\\x04\\x00\\x00\\x00TNME\\x00\\x00\\x04\\x00" 400 182 "-" "-"
2019-05-13 16:53:29
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58848
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.152.52.74.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019051300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon May 13 16:53:28 CST 2019
;; MSG SIZE  rcvd: 117

Host info
74.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
74.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
120.132.27.238 attackspambots
$f2bV_matches
2020-06-18 05:33:56
180.76.161.77 attackspam
ssh intrusion attempt
2020-06-18 05:29:41
67.2.3.111 attackspambots
Invalid user monk from 67.2.3.111 port 39162
2020-06-18 05:18:16
218.93.225.150 attack
Invalid user git from 218.93.225.150 port 10539
2020-06-18 05:05:38
181.65.252.10 attack
Jun 18 00:23:13 hosting sshd[10287]: Invalid user lsr from 181.65.252.10 port 35716
...
2020-06-18 05:29:13
45.33.34.123 attack
Invalid user test2 from 45.33.34.123 port 50684
2020-06-18 05:20:06
128.199.62.182 attack
Invalid user michael from 128.199.62.182 port 35044
2020-06-18 05:11:59
150.136.160.141 attackbots
Jun 17 20:58:57 124388 sshd[8381]: Invalid user sip from 150.136.160.141 port 43314
Jun 17 20:58:57 124388 sshd[8381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.160.141
Jun 17 20:58:57 124388 sshd[8381]: Invalid user sip from 150.136.160.141 port 43314
Jun 17 20:58:59 124388 sshd[8381]: Failed password for invalid user sip from 150.136.160.141 port 43314 ssh2
Jun 17 21:01:52 124388 sshd[8415]: Invalid user tmax from 150.136.160.141 port 43308
2020-06-18 05:32:30
146.120.97.41 attack
Jun 17 23:00:13 Ubuntu-1404-trusty-64-minimal sshd\[32254\]: Invalid user gmod from 146.120.97.41
Jun 17 23:00:13 Ubuntu-1404-trusty-64-minimal sshd\[32254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.120.97.41
Jun 17 23:00:15 Ubuntu-1404-trusty-64-minimal sshd\[32254\]: Failed password for invalid user gmod from 146.120.97.41 port 54514 ssh2
Jun 17 23:05:40 Ubuntu-1404-trusty-64-minimal sshd\[2603\]: Invalid user hadoopuser from 146.120.97.41
Jun 17 23:05:40 Ubuntu-1404-trusty-64-minimal sshd\[2603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.120.97.41
2020-06-18 05:32:51
150.136.252.42 attackbotsspam
Invalid user bft from 150.136.252.42 port 33388
2020-06-18 05:31:58
169.47.195.187 attack
Invalid user laureen from 169.47.195.187 port 33566
2020-06-18 05:45:31
222.182.189.113 attack
Invalid user admin from 222.182.189.113 port 58694
2020-06-18 05:40:57
144.172.73.41 attackbotsspam
$f2bV_matches
2020-06-18 05:10:46
101.89.63.136 attackspam
Jun 17 20:07:18 mail sshd\[20826\]: Invalid user youcef from 101.89.63.136
Jun 17 20:07:18 mail sshd\[20826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.63.136
Jun 17 20:07:20 mail sshd\[20826\]: Failed password for invalid user youcef from 101.89.63.136 port 42002 ssh2
...
2020-06-18 05:37:58
200.73.240.238 attack
2020-06-17T20:45:14+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-06-18 05:41:49

Recently Reported IPs

54.161.151.212 155.197.170.245 84.238.36.49 136.34.163.188
31.204.139.211 36.78.192.226 118.72.187.173 222.27.146.252
162.50.60.189 144.217.165.147 114.32.173.86 38.141.45.26
109.226.201.174 203.195.229.145 105.247.243.236 198.108.66.27
188.255.237.143 80.245.127.248 118.179.206.10 79.111.123.46