JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.152.52.121

104.152.52.121 was found in our database!

This IP was reported 1,795 times. Confidence of Abuse is 100%: ?

100%

ISP	Rethem Hosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14987
Hostname(s)	internettl.org
Domain Name	rethemhosting.net
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.152.52.121

Whois 104.152.52.121

IP Abuse Reports for 104.152.52.121:

This IP address has been reported a total of 1,795 times from 517 distinct sources. 104.152.52.121 was first reported on October 11th 2021, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 TheWojtek	2026-06-04 15:30:10 (21 hours ago)	Jun 4 17:30:10 hq postfix/smtps/smtpd[3119176]: NOQUEUE: reject: RCPT from unknown[104.152.52.121]: ... show more Jun 4 17:30:10 hq postfix/smtps/smtpd[3119176]: NOQUEUE: reject: RCPT from unknown[104.152.52.121]: 554 5.7.1 <unknown[104.152.52.121]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<91.216.30.50> ... show less	Email Spam
🇳🇱 BIV	2026-06-04 13:09:04 (1 day ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 6443. Automated ti ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 6443. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇩🇪 zupan	2026-06-04 07:18:03 (1 day ago)	Blocked by UFW on vps [6443/tcp] \| SPT: 57496 \| TTL: 231 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [6443/tcp] \| SPT: 57496 \| TTL: 231 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 drewf.ink	2026-06-04 01:24:03 (1 day ago)	[01:24] Port scanning. Port(s) scanned: TCP/11211	Port Scan
🇬🇧 PeravixGroup	2026-06-03 23:19:03 (1 day ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-06-03 18:52:13 (1 day ago)	Jun 3 20:52:11 home postfix/postscreen[1669112]: PREGREET 3 after 0.01 from [104.152.52.121]:50019: ... show more Jun 3 20:52:11 home postfix/postscreen[1669112]: PREGREET 3 after 0.01 from [104.152.52.121]:50019: \005\001\000 Jun 3 20:52:11 home postfix/postscreen[1669112]: PREGREET 10 after 0 from [104.152.52.121]:38965: \004\001\000P\001\177\000\000\001\000 ... show less	Brute-Force
🇫🇷 security.rdmc.fr	2026-06-01 13:01:00 (4 days ago)	Port Scan Attack proto:TCP src:57225 dst:23	Port Scan
🇺🇸 drewf.ink	2026-06-01 12:35:46 (4 days ago)	[12:35] Port scanning. Port(s) scanned: TCP/6000, TCP/105	Port Scan
🇹🇷 Squearex	2026-06-01 05:35:43 (4 days ago)	Automated ban by SCUMUnified Shield. Subnet Flood Protection (Honeypot Trap Triggered (Decoy Port 92 ... show more Automated ban by SCUMUnified Shield. Subnet Flood Protection (Honeypot Trap Triggered (Decoy Port 9200)) show less	Brute-Force SSH
🇺🇸 sandra361	2026-06-01 02:56:06 (4 days ago)	Port scan detected: 5 attempts across 3 ports (2688,8198,8336). \| Evidence: REAPER_TARPIT:IN=enp1s0 ... show more Port scan detected: 5 attempts across 3 ports (2688,8198,8336). \| Evidence: REAPER_TARPIT:IN=enp1s0 OUT= SRC=104.152.52.121 LEN=56 TOS=0x00 PREC=0x00 TTL=56 ID=17081 DF PROTO=TCP SPT=34749 DPT=8336 WINDOW=42340 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇩🇪 femboy.cat	2026-06-01 00:56:11 (4 days ago)	Port scan to tcp/5902 from 104.152.52.121	Brute-Force
🇩🇪 Axel	2026-05-31 19:40:57 (4 days ago)	[2026-05-31 19:40:56 UTC] Honeypot Dev Web Server connection attempt \| AXFRA HONEYPOT	Web App Attack
🇩🇪 Justin F. \| AS204464	2026-05-31 15:28:37 (4 days ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 5661 [1], 8405 [1], 5980 [1] TCP ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 5661 [1], 8405 [1], 5980 [1] TCP Reported by: Justin F. show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-31 03:57:22 (5 days ago)	Honeypot [nx-infrastructure]: Large payload (1487 bytes); 5798 [3], 8215 [3], 5803 [3], 3283 [2], 49 ... show more Honeypot [nx-infrastructure]: Large payload (1487 bytes); 5798 [3], 8215 [3], 5803 [3], 3283 [2], 49845 [2], 49199 [2] TCP Reported by: Justin F. show less	Bad Web Bot
🇩🇪 Luhte	2026-05-31 03:26:03 (5 days ago)	Unsolicited TCP connection from 104.152.52.121 to port 0 at 2026-05-31T03:26:03Z. Source IP complete ... show more Unsolicited TCP connection from 104.152.52.121 to port 0 at 2026-05-31T03:26:03Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking

Showing 1 to 15 of 1795 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.176.29.27

🇬🇧 193.163.125.44

🇱🇰 124.43.10.224

🇷🇺 185.75.181.87

🇭🇰 152.32.128.214

🇺🇸 130.131.220.95

🇮🇳 125.20.247.194

🇷🇺 83.239.108.218

🇫🇮 80.223.186.171

🇺🇸 69.169.101.231

🇺🇸 49.51.243.95

🇺🇸 20.12.41.6

🇺🇸 4.246.61.185

🇲🇿 197.219.208.58

🇧🇷 177.61.176.110

🇨🇳 115.190.149.148

🇹🇼 110.25.112.145

🇫🇮 95.217.122.41

🇨🇳 36.249.60.142

🇬🇧 31.14.254.119