AbuseIPDB » 104.152.52.42

104.152.52.42 was found in our database!

This IP was reported 621 times. Confidence of Abuse is 0%: ?

0%

ISP	Rethem Hosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14987
Hostname(s)	internettl.org
Domain Name	rethemhosting.net
Country	United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 104.152.52.42

Whois 104.152.52.42

IP Abuse Reports for 104.152.52.42:

This IP address has been reported a total of 621 times from 56 distinct sources. 104.152.52.42 was first reported on March 15th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
syokadmin	2025-03-03 16:46:56 (3 months ago)	*Port Scan* detected from 104.152.52.42 (US/United States/internettl.org). 11 hits in the last 20 se ... show more*Port Scan* detected from 104.152.52.42 (US/United States/internettl.org). 11 hits in the last 20 seconds show less	Port Scan Brute-Force
Anonymous	2025-03-03 10:25:27 (3 months ago)	Port Scanner	Port Scan
abusiveIntelligence	2025-03-02 15:00:00 (3 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
Anonymous	2025-03-01 12:42:56 (3 months ago)	Port Scanner	Port Scan
abusiveIntelligence	2025-03-01 05:50:00 (3 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
cybertailor	2025-03-01 02:58:11 (3 months ago)	104.152.52.42 - - [01/Mar/2025:07:58:03 +0500] "GET / HTTP/1.0" 404 146 "-" "-" 104.152.52.42 ... show more104.152.52.42 - - [01/Mar/2025:07:58:03 +0500] "GET / HTTP/1.0" 404 146 "-" "-" 104.152.52.42 - - [01/Mar/2025:07:58:09 +0500] "GET / HTTP/1.0" 404 146 "-" "-" 104.152.52.42 - - [01/Mar/2025:07:58:09 +0500] "GET / HTTP/1.0" 404 146 "-" "-" 104.152.52.42 - - [01/Mar/2025:07:58:10 +0500] "GET / HTTP/1.0" 404 146 "-" "-" ... show less	Port Scan
abusiveIntelligence	2025-02-28 17:00:00 (3 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
Emil Petrakov	2025-02-28 15:53:08 (3 months ago)	2025-02-28T18:53:07.451018+03:00 srv44 fail2ban[1242]: [postfix] Ban 104.152.52.42 ...	Brute-Force
abusiveIntelligence	2025-02-27 14:50:00 (3 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
llighthunter	2025-02-27 10:27:12 (3 months ago)	Feb 20 21:45:42 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show moreFeb 20 21:45:42 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=104.152.52.42, lip=192.168.1.80, session=<GjqDHpguModomDQq> Feb 20 21:45:42 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=104.152.52.42, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<HEeLHpguMMhomDQq> Feb 20 21:45:42 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=104.152.52.42, lip=192.168.1.80, session=<7Z6NHpgulo1omDQq> show less	Port Scan Hacking Spoofing
Lat31320	2025-02-27 07:41:09 (3 months ago)	gate - SSH brute force ...	Brute-Force SSH
abusiveIntelligence	2025-02-27 03:00:00 (3 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
SWF	2025-02-26 21:41:03 (3 months ago)	Port scanning	Port Scan Hacking
abusiveIntelligence	2025-02-26 16:30:00 (3 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
ThreatBook.io	2025-02-26 03:06:42 (3 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/104.152.52.42	SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩