Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57980
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.91.			IN	A

;; AUTHORITY SECTION:
.			435	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023060900 1800 900 604800 86400

;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 10 02:09:57 CST 2023
;; MSG SIZE  rcvd: 106
Host info
91.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
91.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
165.22.248.215 attackspam
Sep 13 12:50:33 plusreed sshd[7749]: Invalid user odoo2017 from 165.22.248.215
...
2019-09-14 04:11:14
104.42.27.187 attack
Sep 13 21:32:07 vps691689 sshd[20492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.27.187
Sep 13 21:32:09 vps691689 sshd[20492]: Failed password for invalid user mysql2 from 104.42.27.187 port 48696 ssh2
...
2019-09-14 03:48:00
139.59.149.183 attack
Sep 13 21:22:54 ArkNodeAT sshd\[2329\]: Invalid user advagrant from 139.59.149.183
Sep 13 21:22:54 ArkNodeAT sshd\[2329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.149.183
Sep 13 21:22:56 ArkNodeAT sshd\[2329\]: Failed password for invalid user advagrant from 139.59.149.183 port 37100 ssh2
2019-09-14 04:05:36
71.127.237.61 attackbotsspam
Sep 13 17:54:11 markkoudstaal sshd[5151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.127.237.61
Sep 13 17:54:14 markkoudstaal sshd[5151]: Failed password for invalid user oracle from 71.127.237.61 port 38164 ssh2
Sep 13 17:58:28 markkoudstaal sshd[5515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.127.237.61
2019-09-14 04:13:02
185.254.122.8 attackspam
Automated reporting of bulk port scanning
2019-09-14 04:10:53
72.221.232.153 attack
[munged]::443 72.221.232.153 - - [13/Sep/2019:14:33:10 +0200] "POST /[munged]: HTTP/1.1" 200 4506 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 72.221.232.153 - - [13/Sep/2019:14:33:13 +0200] "POST /[munged]: HTTP/1.1" 200 4363 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 72.221.232.153 - - [13/Sep/2019:14:33:14 +0200] "POST /[munged]: HTTP/1.1" 200 4363 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 72.221.232.153 - - [13/Sep/2019:14:33:15 +0200] "POST /[munged]: HTTP/1.1" 200 4363 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 72.221.232.153 - - [13/Sep/2019:14:33:16 +0200] "POST /[munged]: HTTP/1.1" 200 4363 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 72.221.232.153 - - [13/Sep/2019:14:
2019-09-14 04:09:42
187.142.5.181 attackbotsspam
(Sep 13)  LEN=40 PREC=0x20 TTL=46 ID=38022 TCP DPT=8080 WINDOW=43578 SYN 
 (Sep 13)  LEN=40 PREC=0x20 TTL=46 ID=63387 TCP DPT=8080 WINDOW=43578 SYN 
 (Sep 13)  LEN=40 PREC=0x20 TTL=46 ID=15875 TCP DPT=8080 WINDOW=43578 SYN 
 (Sep 12)  LEN=40 PREC=0x20 TTL=46 ID=30204 TCP DPT=8080 WINDOW=48938 SYN 
 (Sep 12)  LEN=40 PREC=0x20 TTL=46 ID=18020 TCP DPT=8080 WINDOW=48938 SYN 
 (Sep 11)  LEN=40 PREC=0x20 TTL=46 ID=47473 TCP DPT=8080 WINDOW=48938 SYN 
 (Sep 11)  LEN=40 PREC=0x20 TTL=46 ID=12732 TCP DPT=8080 WINDOW=43578 SYN 
 (Sep 10)  LEN=40 PREC=0x20 TTL=46 ID=58334 TCP DPT=8080 WINDOW=48938 SYN 
 (Sep 10)  LEN=40 PREC=0x20 TTL=46 ID=42488 TCP DPT=8080 WINDOW=43578 SYN 
 (Sep  9)  LEN=40 PREC=0x20 TTL=46 ID=15102 TCP DPT=8080 WINDOW=48938 SYN 
 (Sep  9)  LEN=40 PREC=0x20 TTL=46 ID=53141 TCP DPT=8080 WINDOW=43578 SYN
2019-09-14 03:36:13
219.85.68.50 attackbots
19/9/13@07:10:42: FAIL: Alarm-Intrusion address from=219.85.68.50
...
2019-09-14 04:14:50
104.211.216.173 attack
Sep 13 17:10:11 lnxweb61 sshd[21109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.216.173
2019-09-14 04:08:00
41.230.23.169 attackbots
Sep 13 09:57:21 hcbb sshd\[22932\]: Invalid user vbox1 from 41.230.23.169
Sep 13 09:57:21 hcbb sshd\[22932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.230.23.169
Sep 13 09:57:23 hcbb sshd\[22932\]: Failed password for invalid user vbox1 from 41.230.23.169 port 59902 ssh2
Sep 13 10:03:26 hcbb sshd\[23406\]: Invalid user password from 41.230.23.169
Sep 13 10:03:26 hcbb sshd\[23406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.230.23.169
2019-09-14 04:09:59
81.8.21.234 attackspam
WordPress wp-login brute force :: 81.8.21.234 0.156 BYPASS [13/Sep/2019:21:11:22  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-09-14 03:59:47
45.11.98.216 attackspambots
Spam Timestamp : 13-Sep-19 11:06   BlockList Provider  zen.spamhaus.org snowshoe   (392)
2019-09-14 03:53:17
200.31.28.219 attack
Unauthorized IMAP connection attempt
2019-09-14 03:35:15
49.69.49.23 attackspambots
Sep 12 19:23:06 server6 sshd[5851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.69.49.23  user=r.r
Sep 12 19:23:08 server6 sshd[5851]: Failed password for r.r from 49.69.49.23 port 48334 ssh2
Sep 12 19:23:10 server6 sshd[5851]: Failed password for r.r from 49.69.49.23 port 48334 ssh2
Sep 12 19:23:12 server6 sshd[5851]: Failed password for r.r from 49.69.49.23 port 48334 ssh2
Sep 12 19:23:14 server6 sshd[5851]: Failed password for r.r from 49.69.49.23 port 48334 ssh2
Sep 12 19:23:16 server6 sshd[5851]: Failed password for r.r from 49.69.49.23 port 48334 ssh2
Sep 12 19:23:18 server6 sshd[5851]: Failed password for r.r from 49.69.49.23 port 48334 ssh2
Sep 12 19:23:18 server6 sshd[5851]: Disconnecting: Too many authentication failures for r.r from 49.69.49.23 port 48334 ssh2 [preauth]
Sep 12 19:23:18 server6 sshd[5851]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.69.49.23  user=r.r


........
-------------------------------------
2019-09-14 03:56:35
193.32.160.144 attackspam
$f2bV_matches
2019-09-14 03:41:55

Recently Reported IPs

82.151.125.34 111.92.78.87 185.244.25.1 82.223.1.190
38.55.249.236 38.55.249.216 8.42.78.118 19.193.137.171
7.11.253.189 135.15.176.22 119.38.162.1 237.225.164.88
146.185.201.154 104.23.137.16 213.94.48.57 104.248.14.180
195.52.82.104 107.213.181.58 199.225.93.26 27.10.249.50