AbuseIPDB » 104.152.52.146

104.152.52.146 was found in our database!

This IP was reported 2,254 times. Confidence of Abuse is 100%: ?

100%
ISP Rethem Hosting LLC
Usage Type Data Center/Web Hosting/Transit
ASN AS14987
Hostname(s) internettl.org
Domain Name rethemhosting.net
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 104.152.52.146:

This IP address has been reported a total of 2,254 times from 561 distinct sources. 104.152.52.146 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Malicious activity detected
Port Scan Brute-Force Hacking
๐Ÿ‡น๐Ÿ‡ท neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ chronos
Brute-Force Email Spam Spoofing Phishing Hacking
๐Ÿ‡ฌ๐Ÿ‡ง andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ cwytech
Fleet-wide ban from the Ghostfleet ๐Ÿ‘ป. Triggered by scenario: cwy/tpot-web-high.
Bad Web Bot Web App Attack
๐Ÿ‡ฐ๐Ÿ‡ท 2048
Brute-Force IoT Targeted
๐Ÿ‡บ๐Ÿ‡ธ ras07
Brute force SSH login attempts.
Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 4083 with data transfer. Data preview: 
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ azminawwar
[104.152.52.146] triggered by honeypot on port [53], Timestamp [2026-08-23T03:53:43Z](no payload)
Port Scan Hacking
๐Ÿ‡จ๐Ÿ‡ฟ kronos
IDS: ET DROP Spamhaus DROP Listed Traffic Inbound group 23 | SID:2400022
Hacking
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[02:46] Port scanning. Port(s) scanned: TCP/5000
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท LRob
SMTP abuse: repeated rejected delivery attempts (spam or recipient guessing)
Email Spam
๐Ÿ‡น๐Ÿ‡ท neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ sandra361
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ HamSammich
Automated sensor: 1 telnet connection/probe attempts over the last 24h (latest 2026-08-22T23:28Z).
Brute-Force IoT Targeted

Showing 1 to 15 of 2254 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 73.43.184.216
๐Ÿ‡ฑ๐Ÿ‡น 213.176.26.69
๐Ÿ‡ง๐Ÿ‡ฆ 195.222.59.154
๐Ÿ‡จ๐Ÿ‡ฑ 190.196.168.218
๐Ÿ‡ธ๐Ÿ‡พ 185.225.41.192
๐Ÿ‡บ๐Ÿ‡ธ 173.245.202.52
๐Ÿ‡จ๐Ÿ‡ฟ 150.228.35.79
๐Ÿ‡ซ๐Ÿ‡ฎ 147.185.133.215
๐Ÿ‡ฐ๐Ÿ‡ท 141.101.84.132
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.56
๐Ÿ‡ธ๐Ÿ‡ฌ 47.237.103.155
๐Ÿ‡ฐ๐Ÿ‡ท 222.239.251.12
๐Ÿ‡ง๐Ÿ‡ท 200.155.66.2
๐Ÿ‡น๐Ÿ‡ผ 198.235.24.84
๐Ÿ‡จ๐Ÿ‡ณ 182.44.116.87
๐Ÿ‡ฉ๐Ÿ‡ช 167.94.146.36
๐Ÿ‡ฉ๐Ÿ‡ช 165.154.138.79
๐Ÿ‡บ๐Ÿ‡ธ 162.216.150.175
๐Ÿ‡ฌ๐Ÿ‡ง 154.16.44.155
๐Ÿ‡ฌ๐Ÿ‡ง 139.59.181.117