JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.152.52.115

104.152.52.115 was found in our database!

This IP was reported 1,701 times. Confidence of Abuse is 100%: ?

100%

ISP	Rethem Hosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14987
Hostname(s)	internettl.org
Domain Name	rethemhosting.net
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.152.52.115

Whois 104.152.52.115

IP Abuse Reports for 104.152.52.115:

This IP address has been reported a total of 1,701 times from 491 distinct sources. 104.152.52.115 was first reported on October 12th 2021, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 donarev419	2026-06-07 02:29:44 (1 hour ago)	Connection to port 3155 with data transfer. Data preview: �	Port Scan Hacking
🇬🇧 andypiper	2026-06-07 01:02:57 (2 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-06-06 23:33:28 (4 hours ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 gbzret4d	2026-06-06 20:58:08 (6 hours ago)	Honeypot [uk-production01]: HTTP/1.1 request on 2089 GET / User-Agent: curl/7.61.1 Accept: /; 208 ... show more Honeypot [uk-production01]: HTTP/1.1 request on 2089 GET / User-Agent: curl/7.61.1 Accept: /; 2089 [3], 49013 [3], 49331 [2], 2442 [2], 2542 [2], 2654 [2] TCP show less	Hacking Bad Web Bot
🇩🇪 David Ferneding	2026-06-06 19:53:43 (7 hours ago)	Blocked by UFW (TCP on 8176) Source port: 55614 TTL: 237 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 8176) Source port: 55614 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 104.152.52.115) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-06-06 18:37:11 (9 hours ago)	SRC=104.152.52.115, PROTO=TCP, SPT=51044, DPT=9101 SRC=104.152.52.115, PROTO=TCP, SPT=51028, DPT=530 ... show more SRC=104.152.52.115, PROTO=TCP, SPT=51044, DPT=9101 SRC=104.152.52.115, PROTO=TCP, SPT=51028, DPT=53000 SRC=104.152.52.115, PROTO=TCP, SPT=51028, DPT=4443 SRC=104.152.52.115, PROTO=TCP, SPT=51044, DPT=60000 SRC=104.152.52.115, PROTO=TCP, SPT=51044, DPT=54321 show less	Port Scan
🇺🇸 donarev419	2026-06-06 07:15:33 (20 hours ago)	Port scan detected on port 445 (connection without data transfer)	Port Scan
🇦🇹 Pingger Shikkoken	2026-06-06 04:30:51 (23 hours ago)	2026-06-06T04:30:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-06-06T04:30:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=104.152.52.115 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=59160 DF PROTO=TCP SPT=59417 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot
🇺🇸 jkhorvath.com	2026-06-06 03:34:17 (1 day ago)	Unknown SMTP Client 104.152.52.115	Email Spam Brute-Force
🇺🇸 sandra361	2026-06-06 02:09:05 (1 day ago)	Port scan detected: 54 attempts across 25 ports (149,2015,2422,2516,361,5112,5125,5396,5423,5509,559 ... show more Port scan detected: 54 attempts across 25 ports (149,2015,2422,2516,361,5112,5125,5396,5423,5509,5594,5665,5667,573,583,5929,71,714,728,782,8110,8356,8472,8602,8692). \| Evidence: REAPER_TARPIT:IN=enp1s0 OUT= SRC=104.152.52.115 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=27274 DF PROTO=TCP SPT=55401 DPT=2015 WINDOW=42340 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 Axel	2026-06-06 01:00:40 (1 day ago)	[2026-06-06 01:00:39 UTC] Honeypot ADB (Android Debug Bridge) connection attempt \| AXFRA HONEYPOT	IoT Targeted
🇺🇸 anon333	2026-06-05 22:33:07 (1 day ago)	Hacker syslog review 1780698786	Hacking
🇦🇺 LiftUp Hosting	2026-06-05 13:19:18 (1 day ago)	Honeypot hit: Unauthorized traffic on 135/epmapper	Port Scan
🇧🇷 diego	2026-06-05 05:30:41 (1 day ago)	[rede-arem1] 06/05/2026-02:30:40.872833, 104.152.52.115, Protocol: 6, ET DROP Spamhaus DROP Listed T ... show more [rede-arem1] 06/05/2026-02:30:40.872833, 104.152.52.115, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 21 show less	Hacking
🇮🇹 proNET 🚨	2026-06-05 01:01:03 (2 days ago)	Port TCP/8443 (HTTPS Alternate (Plesk Panel)) [Honeypot (B1)]	Web Spam

Showing 1 to 15 of 1701 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.255

🇳🇱 193.176.31.228

🇺🇸 162.216.150.154

🇷🇴 92.118.39.62

🇸🇪 81.170.248.221

🇺🇸 65.49.1.126

🇷🇺 45.91.64.6

🇺🇸 20.29.24.90

🇺🇸 2001:470:1:fb5::1c8

🇳🇱 176.65.139.56

🇸🇬 103.187.147.165

🇫🇷 82.25.113.246

🇺🇸 3.134.109.223

🇺🇸 146.88.241.104

🇳🇱 91.92.242.74

🇮🇷 84.47.253.146

🇺🇸 35.208.7.216

🇯🇵 8.216.16.112

🇧🇪 198.235.24.192

🇺🇸 135.237.123.227