AbuseIPDB » 104.152.52.232

104.152.52.232 was found in our database!

This IP was reported 2,491 times. Confidence of Abuse is 100%: ?

100%
ISP Rethem Hosting LLC
Usage Type Data Center/Web Hosting/Transit
ASN AS14987
Hostname(s) internettl.org
Domain Name rethemhosting.net
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 104.152.52.232:

This IP address has been reported a total of 2,491 times from 622 distinct sources. 104.152.52.232 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ sandra361
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ donarev419
Port scan detected on port 5900 (connection without data transfer)
Port Scan
๐Ÿ‡น๐Ÿ‡ท neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-08-25 10:11:54 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[07:48] Triggered SMB honeypot. Type: NetBIOS + SMB2/3. Dialect(s): SMB 2.0.2, SMB 2.1, SMB 3.0
Hacking Exploited Host
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 9002 with data transfer. Data preview:
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Port scan detected on port 4449 (connection without data transfer)
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ donarev419
Connection to port 8792 with data transfer. Data preview: ๏ฟฝ
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ sandra361
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ HamSammich
Brute-Force IoT Targeted
๐Ÿ‡ฉ๐Ÿ‡ช HoneyPotFRI
Bad Web Bot Web App Attack
๐Ÿ‡น๐Ÿ‡ท neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
๐Ÿ‡น๐Ÿ‡ท neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ donarev419
Connection to port 2909 with data transfer. Data preview: ๏ฟฝ
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ sandra361
Port Scan

Showing 1 to 15 of 2491 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ฉ๐Ÿ‡ช 2a01:4f8:150:13a5::100:2d
๐Ÿ‡ณ๐Ÿ‡ฑ 185.226.197.9
๐Ÿ‡ณ๐Ÿ‡ฑ 185.226.197.7
๐Ÿ‡ธ๐Ÿ‡ฌ 185.200.116.70
๐Ÿ‡น๐Ÿ‡ญ 182.53.223.245
๐Ÿ‡ซ๐Ÿ‡ฎ 172.217.37.154
๐Ÿ‡บ๐Ÿ‡ธ 162.216.150.170
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.248
๐Ÿ‡บ๐Ÿ‡ธ 91.230.168.115
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.124
๐Ÿ‡บ๐Ÿ‡ธ 66.132.186.160
๐Ÿ‡บ๐Ÿ‡ธ 65.49.20.68
๐Ÿ‡ฌ๐Ÿ‡ง 51.75.161.33
๐Ÿ‡จ๐Ÿ‡ณ 42.100.62.15
๐Ÿ‡ง๐Ÿ‡ช 35.241.214.41
๐Ÿ‡จ๐Ÿ‡ฑ 201.241.40.136
๐Ÿ‡บ๐Ÿ‡ธ 185.180.141.45
๐Ÿ‡ฒ๐Ÿ‡ณ 180.149.126.6
๐Ÿ‡ฎ๐Ÿ‡ณ 172.253.230.152
๐Ÿ‡บ๐Ÿ‡ธ 162.248.3.24