必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Rethem Hosting LLC

主机名(hostname): unknown

机构(organization): Rethem Hosting LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
May  7 03:58:00 *** sshd[3964]: Did not receive identification string from 104.152.52.34
2020-05-07 12:44:35
attack
tcp        0      0 103.6.144.10:10000      104.152.52.34:48127     ESTABLISHED 7830/perl
unix  3      [ ]         STREAM     CONNECTED     15783    1/systemd           /run/systemd/journal/stdout

has some how infected my server with a python script
2019-08-24 18:49:51
相同子网IP讨论:
IP 类型 评论内容 时间
104.152.52.231 botsattackproxy
Bot attacker IP
2025-03-25 13:44:38
104.152.52.145 botsattackproxy
Vulnerability Scanner
2025-03-20 13:41:36
104.152.52.100 spamattackproxy
VoIP blacklist IP
2025-03-14 22:09:59
104.152.52.139 attack
Brute-force attacker IP
2025-03-10 13:45:36
104.152.52.219 botsattackproxy
Bot attacker IP
2025-03-04 13:55:48
104.152.52.124 botsattackproxy
Vulnerability Scanner
2025-02-26 17:12:59
104.152.52.146 botsattackproxy
Bot attacker IP
2025-02-21 12:31:03
104.152.52.161 botsattackproxy
Vulnerability Scanner
2025-02-05 14:00:57
104.152.52.176 botsattackproxy
Botnet DB Scanner
2025-01-20 14:03:26
104.152.52.141 botsattack
Vulnerability Scanner
2025-01-09 22:45:15
104.152.52.165 botsattackproxy
Bot attacker IP
2024-09-24 16:44:08
104.152.52.226 botsattackproxy
Vulnerability Scanner
2024-08-28 12:46:53
104.152.52.142 spambotsattack
Vulnerability Scanner
2024-08-26 12:47:13
104.152.52.116 spamattack
Compromised IP
2024-07-06 14:07:26
104.152.52.204 attack
Bad IP
2024-07-01 12:36:27
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.152.52.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26143
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.152.52.34.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 02 19:38:12 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:
34.52.152.104.in-addr.arpa domain name pointer internettl.org.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
34.52.152.104.in-addr.arpa	name = internettl.org.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
187.145.212.56 attackspam
Lines containing failures of 187.145.212.56
Aug  2 21:23:15 server-name sshd[18684]: Connection closed by 187.145.212.56 port 51324 [preauth]
Aug  2 21:23:50 server-name sshd[18686]: Connection closed by 187.145.212.56 port 53736 [preauth]
Aug  2 21:24:26 server-name sshd[18707]: Connection closed by 187.145.212.56 port 56148 [preauth]
Aug  2 21:25:00 server-name sshd[18763]: Connection closed by 187.145.212.56 port 58566 [preauth]
Aug  2 21:25:40 server-name sshd[18788]: Invalid user hinfo from 187.145.212.56 port 60980
Aug  2 21:25:40 server-name sshd[18788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.145.212.56 
Aug  2 21:25:41 server-name sshd[18788]: Failed password for invalid user hinfo from 187.145.212.56 port 60980 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=187.145.212.56
2019-08-03 16:36:19
176.122.177.84 attack
$f2bV_matches
2019-08-03 17:13:55
5.135.182.84 attackbotsspam
Aug  3 04:43:26 plusreed sshd[21657]: Invalid user tao from 5.135.182.84
...
2019-08-03 16:56:24
179.52.32.64 attackspam
SSH/22 MH Probe, BF, Hack -
2019-08-03 17:07:04
54.38.47.28 attack
Aug  3 10:32:56 SilenceServices sshd[9241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.47.28
Aug  3 10:32:58 SilenceServices sshd[9241]: Failed password for invalid user pang from 54.38.47.28 port 33792 ssh2
Aug  3 10:37:05 SilenceServices sshd[12186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.47.28
2019-08-03 16:51:19
117.3.249.108 attack
Netgear DGN Device Remote Command Execution Vulnerability, PTR: PTR record not found
2019-08-03 16:43:26
13.73.105.124 attackspam
Aug  3 11:23:03 tuotantolaitos sshd[22014]: Failed password for root from 13.73.105.124 port 59408 ssh2
...
2019-08-03 16:35:15
106.13.5.170 attackbotsspam
2019-08-03T04:55:44.789136mizuno.rwx.ovh sshd[14052]: Connection from 106.13.5.170 port 35464 on 78.46.61.178 port 22
2019-08-03T04:55:46.229043mizuno.rwx.ovh sshd[14052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.5.170  user=root
2019-08-03T04:55:48.578058mizuno.rwx.ovh sshd[14052]: Failed password for root from 106.13.5.170 port 35464 ssh2
2019-08-03T04:57:29.323664mizuno.rwx.ovh sshd[14414]: Connection from 106.13.5.170 port 50192 on 78.46.61.178 port 22
2019-08-03T04:57:30.725176mizuno.rwx.ovh sshd[14414]: Invalid user cosmo from 106.13.5.170 port 50192
...
2019-08-03 16:47:52
187.120.132.225 attackbotsspam
$f2bV_matches
2019-08-03 17:03:48
79.175.42.221 attackspambots
Aug  3 08:45:11 intra sshd\[55316\]: Invalid user vidya from 79.175.42.221Aug  3 08:45:13 intra sshd\[55316\]: Failed password for invalid user vidya from 79.175.42.221 port 53298 ssh2Aug  3 08:49:51 intra sshd\[55350\]: Invalid user user from 79.175.42.221Aug  3 08:49:53 intra sshd\[55350\]: Failed password for invalid user user from 79.175.42.221 port 47128 ssh2Aug  3 08:54:19 intra sshd\[55412\]: Invalid user canecall from 79.175.42.221Aug  3 08:54:21 intra sshd\[55412\]: Failed password for invalid user canecall from 79.175.42.221 port 41018 ssh2
...
2019-08-03 17:38:19
112.252.18.140 attack
Port Scan: TCP/80
2019-08-03 17:51:08
2.176.96.73 attackspam
Aug  3 06:28:22 fwservlet sshd[14965]: Invalid user admin from 2.176.96.73
Aug  3 06:28:22 fwservlet sshd[14965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.176.96.73
Aug  3 06:28:24 fwservlet sshd[14965]: Failed password for invalid user admin from 2.176.96.73 port 60661 ssh2
Aug  3 06:28:27 fwservlet sshd[14965]: Failed password for invalid user admin from 2.176.96.73 port 60661 ssh2
Aug  3 06:28:29 fwservlet sshd[14965]: Failed password for invalid user admin from 2.176.96.73 port 60661 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=2.176.96.73
2019-08-03 17:05:43
46.3.96.67 attackbots
Scanning (more than 2 packets) random ports - tries to find possible vulnerable services
2019-08-03 16:44:36
178.21.164.100 attack
$f2bV_matches
2019-08-03 17:04:26
220.142.26.108 attackbots
[portscan] tcp/23 [TELNET]
*(RWIN=32768)(08031054)
2019-08-03 16:56:45

最近上报的IP列表

14.177.215.204 78.85.138.22 164.77.52.227 154.180.179.11
217.107.198.146 23.224.112.2 91.202.222.45 45.40.194.24
42.236.78.10 193.112.0.62 5.188.210.17 87.106.34.39
190.144.79.102 179.97.168.36 177.103.220.193 217.182.72.60
159.253.47.219 5.108.40.205 106.13.46.114 59.32.37.108