Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Scan port
2023-07-03 21:09:07
Comments on same subnet:
IP Type Details Datetime
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40656
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.152.52.95.			IN	A

;; AUTHORITY SECTION:
.			570	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023070300 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 03 21:09:05 CST 2023
;; MSG SIZE  rcvd: 106
Host info
95.52.152.104.in-addr.arpa domain name pointer internettl.org.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
95.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
2.179.199.174 attack
Automatic report - Port Scan Attack
2020-01-13 15:52:55
187.1.22.114 attackbots
Jan 13 03:54:03 vps46666688 sshd[19204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.1.22.114
Jan 13 03:54:05 vps46666688 sshd[19204]: Failed password for invalid user debian from 187.1.22.114 port 31723 ssh2
...
2020-01-13 15:18:24
49.235.124.137 attackbots
Unauthorized connection attempt detected from IP address 49.235.124.137 to port 2220 [J]
2020-01-13 15:45:43
118.161.153.234 attackspambots
Honeypot attack, port: 81, PTR: 118-161-153-234.dynamic-ip.hinet.net.
2020-01-13 15:33:17
122.226.238.10 attackspam
firewall-block, port(s): 445/tcp
2020-01-13 15:48:34
58.186.126.211 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-13 15:44:11
80.82.65.90 attack
01/13/2020-08:09:30.916951 80.82.65.90 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-01-13 15:49:52
61.178.38.97 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-13 15:23:00
117.247.232.136 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-13 15:40:06
115.192.45.242 attack
unauthorized connection attempt
2020-01-13 15:45:08
60.189.125.122 attack
Steam Account hacked.

possibly through phishing.
2020-01-13 15:33:21
199.119.144.4 attackspambots
Jan 13 08:44:19 server sshd\[12847\]: Invalid user otto from 199.119.144.4
Jan 13 08:44:19 server sshd\[12847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.119.144.4 
Jan 13 08:44:21 server sshd\[12847\]: Failed password for invalid user otto from 199.119.144.4 port 49673 ssh2
Jan 13 10:39:35 server sshd\[9433\]: Invalid user otto from 199.119.144.4
Jan 13 10:39:35 server sshd\[9433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.119.144.4 
...
2020-01-13 15:47:11
113.161.32.237 attack
Jan 13 08:11:15 meumeu sshd[26835]: Failed password for root from 113.161.32.237 port 59135 ssh2
Jan 13 08:11:19 meumeu sshd[26850]: Failed password for root from 113.161.32.237 port 60061 ssh2
...
2020-01-13 15:28:00
180.215.112.98 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-13 15:23:45
113.160.148.11 attackbots
Honeypot attack, port: 445, PTR: static.vnpt.vn.
2020-01-13 15:36:11

Recently Reported IPs

93.155.123.48 147.65.116.143 24.234.7.7 146.88.241.133
189.192.220.99 38.7.198.10 200.197.51.20 1.64.241.235
115.86.53.221 103.156.71.252 177.130.171.60 228.147.37.178
6.104.122.6 78.150.5.103 50.171.113.72 29.136.137.122
33.165.154.237 127.35.0.104 77.195.249.234 116.109.78.199