Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.52.166.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51571
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.52.166.41.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022703 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 11:05:20 CST 2025
;; MSG SIZE  rcvd: 106
Host info
41.166.52.104.in-addr.arpa domain name pointer 104-52-166-41.lightspeed.nworla.sbcglobal.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
41.166.52.104.in-addr.arpa	name = 104-52-166-41.lightspeed.nworla.sbcglobal.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
192.95.30.59 attackspambots
192.95.30.59 - - [16/Aug/2020:09:16:13 +0100] "POST /wp-login.php HTTP/1.1" 200 6121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.95.30.59 - - [16/Aug/2020:09:17:58 +0100] "POST /wp-login.php HTTP/1.1" 200 6121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
192.95.30.59 - - [16/Aug/2020:09:19:43 +0100] "POST /wp-login.php HTTP/1.1" 200 6121 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36"
...
2020-08-16 16:24:44
136.232.80.30 attackbots
20/8/15@23:51:52: FAIL: Alarm-Network address from=136.232.80.30
...
2020-08-16 16:30:57
185.232.30.130 attack
 TCP (SYN) 185.232.30.130:58386 -> port 33389, len 44
2020-08-16 16:05:16
106.13.210.71 attack
Aug 16 01:55:49 firewall sshd[2556]: Failed password for root from 106.13.210.71 port 42972 ssh2
Aug 16 01:58:36 firewall sshd[2625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.210.71  user=root
Aug 16 01:58:38 firewall sshd[2625]: Failed password for root from 106.13.210.71 port 47360 ssh2
...
2020-08-16 16:20:18
80.255.13.30 attackspam
2020-08-16 05:52:04,815 [snip] proftpd[28591] [snip].white.fastwebserver.de (80.255.13.30[80.255.13.30]): USER admin: no such user found from 80.255.13.30 [80.255.13.30] to ::ffff:[snip]:21
2020-08-16 05:52:05,260 [snip] proftpd[28592] [snip].white.fastwebserver.de (80.255.13.30[80.255.13.30]): USER admin: no such user found from 80.255.13.30 [80.255.13.30] to ::ffff:[snip]:21
2020-08-16 05:52:05,700 [snip] proftpd[28593] [snip].white.fastwebserver.de (80.255.13.30[80.255.13.30]): USER admin: no such user found from 80.255.13.30 [80.255.13.30] to ::ffff:[snip]:21
2020-08-16 05:52:06,141 [snip] proftpd[28595] [snip].white.fastwebserver.de (80.255.13.30[80.255.13.30]): USER admin: no such user found from 80.255.13.30 [80.255.13.30] to ::ffff:[snip]:21
2020-08-16 05:52:06,586 [snip] proftpd[28596] [snip].white.fastwebserver.de (80.255.13.30[80.255.13.30]): USER admin: no such user found from 80.255.13.30 [80.255.13.30] to ::ffff:[snip]:21[...]
2020-08-16 16:21:40
51.77.148.7 attackbotsspam
SSH brute-force attempt
2020-08-16 16:28:09
114.38.81.158 attackbotsspam
Automatic report - Port Scan Attack
2020-08-16 16:06:15
223.205.226.165 attack
$f2bV_matches
2020-08-16 16:03:51
192.254.207.43 attackbots
192.254.207.43 - - [16/Aug/2020:04:48:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2323 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
192.254.207.43 - - [16/Aug/2020:04:48:23 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
192.254.207.43 - - [16/Aug/2020:04:51:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1605 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-16 16:40:58
85.208.213.114 attackspambots
Aug 16 05:52:41 db sshd[21029]: User root from 85.208.213.114 not allowed because none of user's groups are listed in AllowGroups
...
2020-08-16 16:04:23
85.245.58.95 attackspam
Aug 16 09:19:11 icinga sshd[3290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.58.95 
Aug 16 09:19:12 icinga sshd[3292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.58.95 
Aug 16 09:19:14 icinga sshd[3292]: Failed password for invalid user pi from 85.245.58.95 port 62467 ssh2
...
2020-08-16 16:36:34
206.189.171.204 attackbots
Aug 16 06:18:16 db sshd[23904]: User root from 206.189.171.204 not allowed because none of user's groups are listed in AllowGroups
...
2020-08-16 16:35:37
211.252.87.97 attack
Aug 16 05:51:41 db sshd[20939]: User root from 211.252.87.97 not allowed because none of user's groups are listed in AllowGroups
...
2020-08-16 16:36:52
35.188.149.132 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-08-16 16:19:10
167.71.86.88 attackbots
(sshd) Failed SSH login from 167.71.86.88 (US/United States/-): 5 in the last 3600 secs
2020-08-16 16:30:37

Recently Reported IPs

153.194.76.161 115.156.66.186 114.90.22.255 218.59.133.36
63.46.59.240 243.19.56.99 37.233.205.88 237.126.130.15
50.153.80.217 163.150.182.193 171.159.227.221 253.42.102.143
133.172.177.48 171.27.103.5 186.183.102.177 43.3.228.94
245.156.150.156 233.205.57.247 214.193.118.23 29.203.43.240