AbuseIPDB » 104.152.52.239

104.152.52.239 was found in our database!

This IP was reported 1,870 times. Confidence of Abuse is 100%: ?

100%
ISP Rethem Hosting LLC
Usage Type Data Center/Web Hosting/Transit
ASN AS14987
Hostname(s) internettl.org
Domain Name rethemhosting.net
Country πŸ‡ΊπŸ‡Έ United States of America
City Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 104.152.52.239:

This IP address has been reported a total of 1,870 times from 559 distinct sources. 104.152.52.239 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡«πŸ‡· GoodOldTOS
Connection to Oracle honeypot
Hacking
πŸ‡¬πŸ‡§ PeravixGroup
Brute-Force Hacking
πŸ‡©πŸ‡ͺ DerDoktor
I0602 15:50:24.08465 fail2ban action triggered
Port Scan Brute-Force SSH
πŸ‡©πŸ‡ͺ guldkage
Unauthorized connection attempt detected from IP address 104.152.52.239 to port 23 (ger-03) [C]
Brute-Force Exploited Host
πŸ‡©πŸ‡ͺ femboy.cat
Port scan to tcp/5903 from 104.152.52.239
Brute-Force
πŸ‡©πŸ‡ͺ EnthecSolutions
Detected by Enthec Solutions. | Attempts: 32 in 24h | Target port: 8962
Port Scan Hacking
πŸ‡©πŸ‡ͺ guldkage
Unauthorized connection attempt detected from IP address 104.152.52.239 to port 23 (ger-02) [TELNET]
Exploited Host
πŸ‡¦πŸ‡Ή Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-ams6-1)
Hacking Bad Web Bot
πŸ‡ΊπŸ‡Έ drewf.ink
[12:35] Port scanning. Port(s) scanned: TCP/3306
Port Scan
πŸ‡ΊπŸ‡Έ sandra361
Port Scan
πŸ‡©πŸ‡ͺ Axel
[2026-05-31 19:40:51 UTC] Honeypot SSH connection attempt | AXFRA HONEYPOT
SSH
πŸ‡©πŸ‡ͺ Justin F. | AS204464
Port Scan
πŸ‡©πŸ‡ͺ Lazentis
Unauthorized access attempt to port 3389 (tcp)
Brute-Force SSH
πŸ‡©πŸ‡ͺ Justin F. | AS204464
Hacking Bad Web Bot
πŸ‡¬πŸ‡§ PeravixGroup
IoT Targeted Brute-Force

Showing 1 to 15 of 1870 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡ΈπŸ‡¬ 54.169.223.200
πŸ‡ΊπŸ‡Έ 18.188.7.227
πŸ‡ΊπŸ‡Έ 216.172.190.116
πŸ‡ΉπŸ‡Ό 198.235.24.66
πŸ‡¨πŸ‡³ 115.190.211.2
πŸ‡ΊπŸ‡Έ 64.247.196.36
πŸ‡¦πŸ‡² 45.129.185.7
πŸ‡ΊπŸ‡Έ 23.22.42.34
πŸ‡©πŸ‡ͺ 18.192.49.189
πŸ‡¬πŸ‡§ 18.171.219.5
πŸ‡ΊπŸ‡Έ 13.57.56.32
πŸ‡¨πŸ‡³ 202.105.98.252
πŸ‡±πŸ‡Ή 195.12.191.130
πŸ‡©πŸ‡ͺ 176.65.132.119
πŸ‡©πŸ‡ͺ 64.89.163.83
πŸ‡ΊπŸ‡Έ 50.116.99.9
πŸ‡΅πŸ‡­ 49.146.226.97
πŸ‡·πŸ‡Ί 46.159.89.109
πŸ‡¬πŸ‡§ 35.203.210.69
πŸ‡ΊπŸ‡Έ 18.208.166.94