104.152.52.9 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.152.52.231	botsattackproxy	Bot attacker IP	2025-03-25 13:44:38
104.152.52.145	botsattackproxy	Vulnerability Scanner	2025-03-20 13:41:36
104.152.52.100	spamattackproxy	VoIP blacklist IP	2025-03-14 22:09:59
104.152.52.139	attack	Brute-force attacker IP	2025-03-10 13:45:36
104.152.52.219	botsattackproxy	Bot attacker IP	2025-03-04 13:55:48
104.152.52.124	botsattackproxy	Vulnerability Scanner	2025-02-26 17:12:59
104.152.52.146	botsattackproxy	Bot attacker IP	2025-02-21 12:31:03
104.152.52.161	botsattackproxy	Vulnerability Scanner	2025-02-05 14:00:57
104.152.52.176	botsattackproxy	Botnet DB Scanner	2025-01-20 14:03:26
104.152.52.141	botsattack	Vulnerability Scanner	2025-01-09 22:45:15
104.152.52.165	botsattackproxy	Bot attacker IP	2024-09-24 16:44:08
104.152.52.226	botsattackproxy	Vulnerability Scanner	2024-08-28 12:46:53
104.152.52.142	spambotsattack	Vulnerability Scanner	2024-08-26 12:47:13
104.152.52.116	spamattack	Compromised IP	2024-07-06 14:07:26
104.152.52.204	attack	Bad IP	2024-07-01 12:36:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22499
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.9.			IN	A

;; AUTHORITY SECTION:
.			159	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023012601 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 27 12:41:20 CST 2023
;; MSG SIZE  rcvd: 105

Host info

9.52.152.104.in-addr.arpa domain name pointer internettl.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
9.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
150.136.102.101	attack	Jun 17 14:03:19 sip sshd[682976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.102.101 Jun 17 14:03:19 sip sshd[682976]: Invalid user bpc from 150.136.102.101 port 59632 Jun 17 14:03:21 sip sshd[682976]: Failed password for invalid user bpc from 150.136.102.101 port 59632 ssh2 ...	2020-06-17 22:30:19
174.219.134.90	attackbotsspam	Brute forcing email accounts	2020-06-17 22:33:00
185.153.197.50	attackbotsspam	Port scan	2020-06-17 21:54:56
120.92.77.201	attackbotsspam	k+ssh-bruteforce	2020-06-17 22:09:06
111.161.74.113	attackspambots	(sshd) Failed SSH login from 111.161.74.113 (CN/China/dns113.online.tj.cn): 5 in the last 3600 secs	2020-06-17 22:00:10
129.211.50.239	attackspam	SSH bruteforce	2020-06-17 22:25:33
200.78.216.127	attackspambots	Automatic report - Port Scan Attack	2020-06-17 22:02:31
43.241.238.152	attack	2020-06-17T05:05:53.614070-07:00 suse-nuc sshd[18214]: Invalid user nagios from 43.241.238.152 port 49609 ...	2020-06-17 22:23:06
147.135.253.94	attackbotsspam	[2020-06-17 09:59:11] NOTICE[1273] chan_sip.c: Registration from '' failed for '147.135.253.94:64420' - Wrong password [2020-06-17 09:59:11] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-17T09:59:11.585-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6810",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94/64420",Challenge="2c182cb0",ReceivedChallenge="2c182cb0",ReceivedHash="c8489c03688ef5d39eef6fcf5231ab0a" [2020-06-17 10:01:15] NOTICE[1273] chan_sip.c: Registration from '' failed for '147.135.253.94:52565' - Wrong password [2020-06-17 10:01:15] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-17T10:01:15.531-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6811",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.25 ...	2020-06-17 22:22:08
222.186.31.83	attack	Jun 17 16:12:02 mellenthin sshd[21850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83 user=root Jun 17 16:12:04 mellenthin sshd[21850]: Failed password for invalid user root from 222.186.31.83 port 46177 ssh2	2020-06-17 22:20:48
103.205.68.2	attack	Jun 17 05:51:15 dignus sshd[11222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.205.68.2 user=root Jun 17 05:51:17 dignus sshd[11222]: Failed password for root from 103.205.68.2 port 38542 ssh2 Jun 17 05:55:27 dignus sshd[11618]: Invalid user rafal from 103.205.68.2 port 32892 Jun 17 05:55:27 dignus sshd[11618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.205.68.2 Jun 17 05:55:29 dignus sshd[11618]: Failed password for invalid user rafal from 103.205.68.2 port 32892 ssh2 ...	2020-06-17 22:03:39
140.249.30.203	attackspam	2020-06-17T13:44:40.949447shield sshd\[15734\]: Invalid user t3rr0r from 140.249.30.203 port 34292 2020-06-17T13:44:40.953227shield sshd\[15734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.30.203 2020-06-17T13:44:42.827016shield sshd\[15734\]: Failed password for invalid user t3rr0r from 140.249.30.203 port 34292 ssh2 2020-06-17T13:49:31.580024shield sshd\[16489\]: Invalid user qb from 140.249.30.203 port 50220 2020-06-17T13:49:31.584516shield sshd\[16489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.30.203	2020-06-17 21:54:00
139.199.4.219	attack	Jun 17 15:48:02 vps sshd[125295]: Invalid user ubuntu from 139.199.4.219 port 38356 Jun 17 15:48:02 vps sshd[125295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.4.219 Jun 17 15:48:04 vps sshd[125295]: Failed password for invalid user ubuntu from 139.199.4.219 port 38356 ssh2 Jun 17 15:50:30 vps sshd[137921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.4.219 user=root Jun 17 15:50:33 vps sshd[137921]: Failed password for root from 139.199.4.219 port 36324 ssh2 ...	2020-06-17 22:24:23
45.143.223.149	attackbotsspam	Rude login attack (19 tries in 1d)	2020-06-17 22:16:06
49.68.144.98	attackspambots	Jun 17 13:48:40 mxgate1 postfix/postscreen[9373]: CONNECT from [49.68.144.98]:1864 to [176.31.12.44]:25 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9377]: addr 49.68.144.98 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9377]: addr 49.68.144.98 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9377]: addr 49.68.144.98 listed by domain zen.spamhaus.org as 127.0.0.11 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9378]: addr 49.68.144.98 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 17 13:48:40 mxgate1 postfix/dnsblog[9375]: addr 49.68.144.98 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 17 13:48:46 mxgate1 postfix/postscreen[9373]: DNSBL rank 4 for [49.68.144.98]:1864 Jun x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.68.144.98	2020-06-17 22:07:22

Recently Reported IPs

165.233.163.16	150.158.254.45	172.64.147.83	122.53.209.2
144.79.82.154	202.90.136.99	83.215.32.236	216.55.120.246
23.242.115.53	208.140.21.242	86.139.23.125	215.182.95.0
101.25.12.177	153.232.171.174	65.27.88.83	223.237.30.49
247.183.65.55	251.244.114.189	52.63.76.29	86.252.182.83