AbuseIPDB » 104.152.52.129
104.152.52.129 was found in our database!
This IP was reported 2,222 times. Confidence of Abuse is 100%: ?
| ISP | Rethem Hosting LLC |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS14987 |
| Hostname(s) |
internettl.org |
| Domain Name | rethemhosting.net |
| Country | πΊπΈ United States of America |
| City | Chicago, Illinois |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 104.152.52.129:
This IP address has been reported a total of 2,222 times from 543 distinct sources. 104.152.52.129 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| ππ° www.winos.me |
Shield: Layer4 Port 9 Trap
|
Port Scan Hacking | ||
| π³π± donarev419 |
Port scan detected on port 10002 (connection without data transfer)
|
Port Scan | ||
| πΊπΈ sandra361 |
|
Port Scan | ||
| Anonymous |
|
Email Spam | ||
| πΊπΈ drewf.ink |
[08:26] Port scanning. Port(s) scanned: TCP/84, TCP/502, TCP/2040
|
Port Scan | ||
| πΊπΈ donarev419 |
Connection to port 9091 with data transfer.
Data preview: SSH-2.0-Go
|
Port Scan Hacking | ||
| π³π± donarev419 |
Connection to port 7443 with data transfer.
Data preview: οΏ½
|
Port Scan Hacking | ||
| πΊπ¦ TawnyBalfour |
SMB/RPC/MSSQL honeypot. Target ports: 445. Window: 2026-08-20 03:25 to 2026-08-20 03:25 UTC.
|
Exploited Host | ||
| πΉπ· neron |
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
|
Hacking Web App Attack | ||
| πΊπΈ sandra361 |
|
Brute-Force | ||
| πΈπ¬ drewf.ink |
[22:26] Port scanning. Port(s) scanned: TCP/8081
|
Port Scan | ||
| πΊπΈ SecondBanana |
|
Brute-Force SSH | ||
| π¬π§ NotCool |
|
Brute-Force | ||
| π³π± ras07 |
Brute force SSH login attempts.
|
Brute-Force SSH | ||
| πΊπΈ drewf.ink |
|
Port Scan |
Showing 1 to 15 of 2222 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown π©