Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.28.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51506
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.18.28.52.			IN	A

;; AUTHORITY SECTION:
.			537	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:52:10 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 52.28.18.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.28.18.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.222.30.119 attack
Invalid user ftpuser from 51.222.30.119 port 52716
2020-09-21 03:36:04
61.177.172.142 attackspam
Brute-force attempt banned
2020-09-21 03:31:46
212.70.149.52 attackspam
2020-09-20T21:47:41.297207www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-09-20T21:48:05.477857www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-09-20T21:48:31.462773www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-21 03:51:50
104.140.188.6 attackbots
Port scan denied
2020-09-21 03:31:06
62.234.115.152 attackspambots
Lines containing failures of 62.234.115.152
Sep 19 20:34:03 nxxxxxxx sshd[917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.115.152  user=r.r
Sep 19 20:34:05 nxxxxxxx sshd[917]: Failed password for r.r from 62.234.115.152 port 51692 ssh2
Sep 19 20:34:05 nxxxxxxx sshd[917]: Received disconnect from 62.234.115.152 port 51692:11: Bye Bye [preauth]
Sep 19 20:34:05 nxxxxxxx sshd[917]: Disconnected from authenticating user r.r 62.234.115.152 port 51692 [preauth]
Sep 19 20:39:16 nxxxxxxx sshd[1598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.115.152  user=r.r
Sep 19 20:39:18 nxxxxxxx sshd[1598]: Failed password for r.r from 62.234.115.152 port 47858 ssh2
Sep 19 20:39:18 nxxxxxxx sshd[1598]: Received disconnect from 62.234.115.152 port 47858:11: Bye Bye [preauth]
Sep 19 20:39:18 nxxxxxxx sshd[1598]: Disconnected from authenticating user r.r 62.234.115.152 port 47858 [preauth]
S........
------------------------------
2020-09-21 03:48:48
116.96.128.192 attackspam
Automatic Fail2ban report - Trying login SSH
2020-09-21 03:46:18
216.218.206.107 attackbotsspam
Port scan denied
2020-09-21 03:42:06
80.15.139.251 attack
(imapd) Failed IMAP login from 80.15.139.251 (FR/France/lmontsouris-656-1-243-251.w80-15.abo.wanadoo.fr): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 20 09:34:35 ir1 dovecot[1917636]: imap-login: Disconnected (auth failed, 1 attempts in 18 secs): user=, method=PLAIN, rip=80.15.139.251, lip=5.63.12.44, TLS, session=
2020-09-21 03:51:13
125.43.21.177 attackspam
DATE:2020-09-19 18:57:40, IP:125.43.21.177, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)
2020-09-21 03:46:05
171.97.98.18 attackbots
Icarus honeypot on github
2020-09-21 03:35:09
77.222.132.189 attackbots
Sep 20 21:03:23 vmd26974 sshd[17117]: Failed password for root from 77.222.132.189 port 47018 ssh2
Sep 20 21:14:26 vmd26974 sshd[20825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.222.132.189
...
2020-09-21 03:28:30
45.118.151.85 attack
Sep 20 20:26:20 vpn01 sshd[31434]: Failed password for root from 45.118.151.85 port 50202 ssh2
...
2020-09-21 03:38:00
186.155.18.209 attackbots
Port probing on unauthorized port 23
2020-09-21 03:27:44
54.38.240.34 attackbots
Sep 20 21:11:17 piServer sshd[20616]: Failed password for root from 54.38.240.34 port 46244 ssh2
Sep 20 21:14:46 piServer sshd[20975]: Failed password for root from 54.38.240.34 port 55904 ssh2
...
2020-09-21 03:26:51
27.5.44.109 attack
Portscan detected
2020-09-21 03:29:28

Recently Reported IPs

104.18.28.246 104.18.28.58 104.18.28.41 104.18.28.61
104.18.28.218 104.18.28.70 104.18.28.32 104.18.28.80
104.18.28.87 104.18.28.88 104.18.28.91 104.18.29.134
104.18.29.10 104.18.29.13 104.18.28.99 104.21.65.221
104.18.29.100 104.18.29.123 104.18.29.104 104.18.29.149