AbuseIPDB » 104.152.52.230

104.152.52.230 was found in our database!

This IP was reported 1,243 times. Confidence of Abuse is 100%: ?

100%

ISP	Rethem Hosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14987
Hostname(s)	internettl.org
Domain Name	rethemhosting.net
Country	United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 104.152.52.230

Whois 104.152.52.230

IP Abuse Reports for 104.152.52.230:

This IP address has been reported a total of 1,243 times from 422 distinct sources. 104.152.52.230 was first reported on September 5th 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
slartybartfast69420blazit	2025-06-14 20:18:50 (6 days ago)	Fail2ban picked up 104.152.52.230 attacking nginx	Web App Attack
webbfabriken	2025-06-14 05:36:58 (6 days ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
slartybartfast69420blazit	2025-06-13 20:15:46 (1 week ago)	Fail2ban picked up 104.152.52.230 attacking nginx	Web App Attack
Roper123	2025-06-13 18:43:52 (1 week ago)	Web app exploits	Web App Attack
slartybartfast69420blazit	2025-06-12 20:12:51 (1 week ago)	Fail2ban picked up 104.152.52.230 attacking nginx	Web App Attack
Charlesiv	2025-06-12 18:05:16 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14987 (RETHE ... show moreTriggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 14987 (RETHEMHOSTING) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-06-12T17:19:51Z Ray ID: 94eb03f85ee50ccc UA: curl/7.61.1 show less	Bad Web Bot
rtbh.com.tr	2025-06-12 00:07:04 (1 week ago)	list.rtbh.com.tr report: tcp/2222, udp/2222	Brute-Force
ras07	2025-06-11 23:00:05 (1 week ago)	SSH login attempts with user root.	Brute-Force SSH
bescared	2025-06-11 22:28:02 (1 week ago)	F2B - Malicious activity detected. URL Probing.	Hacking Web App Attack
slartybartfast69420blazit	2025-06-11 20:09:54 (1 week ago)	Fail2ban picked up 104.152.52.230 attacking nginx	Web App Attack
Study Bitcoin 🤗	2025-06-11 15:16:43 (1 week ago)	Port probe to tcp/80 (http) [srv125]	Port Scan Bad Web Bot Web App Attack
ThreatBook.io	2025-06-08 22:47:17 (1 week ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.152.52.230	SSH
as211431.net	2025-06-08 16:37:48 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1. ... show moreTriggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: curl/7.61.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Mantene	2025-06-07 22:41:31 (1 week ago)	I0607 18:41:25.820454 1 client.go:58] ACCEPT host=104.152.52.230 port=35879 n=3/4096 I06 ... show moreI0607 18:41:25.820454 1 client.go:58] ACCEPT host=104.152.52.230 port=35879 n=3/4096 I0607 18:41:27.862862 1 client.go:58] ACCEPT host=104.152.52.230 port=56691 n=4/4096 I0607 18:41:29.384227 1 client.go:58] ACCEPT host=104.152.52.230 port=40181 n=5/4096 I0607 18:41:29.822550 1 client.go:99] CLOSE host=104.152.52.230 port=35879 time=4.002054774 bytes=23 I0607 18:41:30.425097 1 client.go:58] ACCEPT host=104.152.52.230 port=60287 n=5/4096 ... show less	Brute-Force SSH
Anonymous	2025-06-07 05:52:40 (1 week ago)	$f2bV_matches	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩