必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Rethem Hosting LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
*Port Scan* detected from 104.152.52.29 (US/United States/internettl.org). 4 hits in the last 280 seconds
2020-02-16 18:26:11
attack
Unauthorized connection attempt detected from IP address 104.152.52.29 to port 1707 [T]
2020-01-27 04:35:01
attackbotsspam
SMB Server BruteForce Attack
2019-08-03 08:54:35
相同子网IP讨论:
IP 类型 评论内容 时间
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45666
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.152.52.29.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042901 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 30 06:39:09 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:
29.52.152.104.in-addr.arpa domain name pointer internettl.org.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
29.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.233.89.111 attackbots
" "
2020-06-09 23:58:26
114.4.227.194 attackspam
Invalid user rumbie from 114.4.227.194 port 45722
2020-06-09 23:48:14
139.199.85.241 attackbotsspam
2020-06-09 07:04:53.589086-0500  localhost sshd[81458]: Failed password for root from 139.199.85.241 port 39414 ssh2
2020-06-10 00:21:39
41.67.138.6 attackbots
RCPT=EAVAIL
2020-06-10 00:24:40
142.93.161.89 attack
142.93.161.89 - - [09/Jun/2020:14:05:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 15310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.161.89 - - [09/Jun/2020:14:05:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 15311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-06-10 00:07:38
178.217.169.247 attack
2020-06-09T10:58:56.861635morrigan.ad5gb.com sshd[23983]: Invalid user super from 178.217.169.247 port 35838
2020-06-09T10:58:58.296146morrigan.ad5gb.com sshd[23983]: Failed password for invalid user super from 178.217.169.247 port 35838 ssh2
2020-06-09T10:58:59.276127morrigan.ad5gb.com sshd[23983]: Disconnected from invalid user super 178.217.169.247 port 35838 [preauth]
2020-06-10 00:17:41
201.184.68.58 attackbotsspam
Jun  9 17:02:44 ajax sshd[14685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.184.68.58 
Jun  9 17:02:46 ajax sshd[14685]: Failed password for invalid user admin from 201.184.68.58 port 38042 ssh2
2020-06-10 00:20:03
175.200.110.224 attackspambots
[09/Jun/2020 x@x
[09/Jun/2020 x@x
[09/Jun/2020 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=175.200.110.224
2020-06-09 23:46:24
137.164.40.162 attack
[portscan] Port scan
2020-06-10 00:23:23
46.10.20.12 attack
[09/Jun/2020 x@x
[09/Jun/2020 x@x
[09/Jun/2020 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=46.10.20.12
2020-06-09 23:50:52
78.128.113.114 attack
2020-06-09 17:49:50 dovecot_plain authenticator failed for \(\[78.128.113.114\]\) \[78.128.113.114\]: 535 Incorrect authentication data \(set_id=ms@opso.it\)
2020-06-09 17:49:57 dovecot_plain authenticator failed for \(\[78.128.113.114\]\) \[78.128.113.114\]: 535 Incorrect authentication data
2020-06-09 17:50:06 dovecot_plain authenticator failed for \(\[78.128.113.114\]\) \[78.128.113.114\]: 535 Incorrect authentication data
2020-06-09 17:50:12 dovecot_plain authenticator failed for \(\[78.128.113.114\]\) \[78.128.113.114\]: 535 Incorrect authentication data
2020-06-09 17:50:25 dovecot_plain authenticator failed for \(\[78.128.113.114\]\) \[78.128.113.114\]: 535 Incorrect authentication data
2020-06-09 23:56:14
122.51.86.120 attackbots
2020-06-09T14:02:04.854183vps751288.ovh.net sshd\[13908\]: Invalid user teste from 122.51.86.120 port 60224
2020-06-09T14:02:04.863100vps751288.ovh.net sshd\[13908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.86.120
2020-06-09T14:02:07.569739vps751288.ovh.net sshd\[13908\]: Failed password for invalid user teste from 122.51.86.120 port 60224 ssh2
2020-06-09T14:05:32.974839vps751288.ovh.net sshd\[13934\]: Invalid user admin from 122.51.86.120 port 46570
2020-06-09T14:05:32.982019vps751288.ovh.net sshd\[13934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.86.120
2020-06-09 23:59:50
118.25.194.250 attackbots
Jun  9 17:47:52 serwer sshd\[24945\]: Invalid user po from 118.25.194.250 port 46410
Jun  9 17:47:52 serwer sshd\[24945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.194.250
Jun  9 17:47:54 serwer sshd\[24945\]: Failed password for invalid user po from 118.25.194.250 port 46410 ssh2
...
2020-06-10 00:12:54
187.14.185.4 attack
Jun  9 11:43:18 Server1 sshd[20769]: Invalid user test from 187.14.185.4 port 57185
Jun  9 11:43:18 Server1 sshd[20769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.14.185.4
Jun  9 11:43:20 Server1 sshd[20769]: Failed password for invalid user test from 187.14.185.4 port 57185 ssh2
Jun  9 11:43:23 Server1 sshd[20769]: Received disconnect from 187.14.185.4 port 57185:11: Bye Bye [preauth]
Jun  9 11:43:23 Server1 sshd[20769]: Disconnected from invalid user test 187.14.185.4 port 57185 [preauth]
Jun  9 11:44:07 Server1 sshd[20771]: Invalid user gpadmin from 187.14.185.4 port 46369
Jun  9 11:44:07 Server1 sshd[20771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.14.185.4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=187.14.185.4
2020-06-10 00:12:10
164.51.31.6 attack
Jun  9 17:10:56 web01.agentur-b-2.de postfix/smtpd[256321]: NOQUEUE: reject: RCPT from ccrcmiddle01.ccmr.state.fl.us[164.51.31.6]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  9 17:11:33 web01.agentur-b-2.de postfix/smtpd[256319]: NOQUEUE: reject: RCPT from ccrcmiddle01.ccmr.state.fl.us[164.51.31.6]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  9 17:11:33 web01.agentur-b-2.de postfix/smtpd[256319]: NOQUEUE: reject: RCPT from ccrcmiddle01.ccmr.state.fl.us[164.51.31.6]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  9 17:12:05 web01.agentur-b-2.de postfix/smtpd[256321]: NOQUEUE: reject: RCPT from ccrcmiddle01.ccmr
2020-06-09 23:54:25

最近上报的IP列表

201.219.216.131 103.20.191.242 109.245.240.153 96.77.77.53
84.51.56.123 64.246.165.200 139.255.108.114 95.181.45.234
114.35.118.48 103.197.93.2 81.177.6.117 185.36.81.173
216.244.66.233 37.49.227.124 189.116.83.46 206.214.143.120
37.252.73.141 84.132.20.74 91.238.243.215 171.246.250.21