JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.152.52.44

104.152.52.44 was found in our database!

This IP was reported 641 times. Confidence of Abuse is 14%: ?

14%

ISP	Rethem Hosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14987
Hostname(s)	internettl.org
Domain Name	rethemhosting.net
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.152.52.44

Whois 104.152.52.44

IP Abuse Reports for 104.152.52.44:

This IP address has been reported a total of 641 times from 62 distinct sources. 104.152.52.44 was first reported on October 18th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Mario Bretscher	2026-05-15 01:09:08 (3 weeks ago)	15-May-2026 03:09:03.905 security: info: client @0x74ae3404b458 104.152.52.44#37672 (www.letsbuild.c ... show more 15-May-2026 03:09:03.905 security: info: client @0x74ae3404b458 104.152.52.44#37672 (www.letsbuild.ch): view Extern: query 'www.letsbuild.ch/NS/IN' denied 15-May-2026 03:09:04.282 security: info: client @0x74ae200db968 104.152.52.44#43085 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 15-May-2026 03:09:04.407 security: info: client @0x74ae3404b458 104.152.52.44#58157 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied 15-May-2026 03:09:04.653 security: info: client @0x74ae3404b458 104.152.52.44#50339 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 15-May-2026 03:09:04.782 security: info: client @0x74ae3404b458 104.152.52.44#35734 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied ... show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 01:16:25 (3 weeks ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/104.152.52.44	SSH
🇹🇷 LiterallyEthical	2026-05-08 05:39:00 (1 month ago)	Port scanning	Port Scan
🇨🇳 ThreatBook.io	2026-05-06 03:23:10 (1 month ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/104.152.52.44	SSH
🇨🇳 ThreatBook.io	2026-04-28 01:03:47 (1 month ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/104.152.52.44	SSH
🇨🇳 ThreatBook.io	2026-04-23 00:53:23 (1 month ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/104.152.52.44	SSH
🇨🇳 ThreatBook.io	2026-04-13 00:52:54 (1 month ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/104.152.52.44	SSH
🇩🇪 N2N	2026-03-28 02:14:01 (2 months ago)	IP performed HTTP Null Session reconnaissance scan detected and blocked, indicating potential hackin ... show more IP performed HTTP Null Session reconnaissance scan detected and blocked, indicating potential hacking and web application attack preparation. show less	Port Scan Web App Attack Hacking
🇨🇭 Mario Bretscher	2026-03-11 12:39:58 (2 months ago)	11-Mar-2026 13:39:56.092 security: info: client @0x70889407b758 104.152.52.44#60568 (lb.letsbuild.ch ... show more 11-Mar-2026 13:39:56.092 security: info: client @0x70889407b758 104.152.52.44#60568 (lb.letsbuild.ch): view Extern: query 'lb.letsbuild.ch/NS/IN' denied 11-Mar-2026 13:39:56.398 security: info: client @0x708878016528 104.152.52.44#52116 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/NS/IN' denied 11-Mar-2026 13:39:56.547 security: info: client @0x70887c14ea38 104.152.52.44#53937 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 11-Mar-2026 13:39:56.701 security: info: client @0x70889407b758 104.152.52.44#51041 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied 11-Mar-2026 13:39:57.169 security: info: client @0x70887c14ea38 104.152.52.44#34650 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied ... show less	Web App Attack
🇨🇭 Mario Bretscher	2026-02-10 16:14:42 (3 months ago)	10-Feb-2026 17:14:39.585 security: info: client @0x7e4749d297d8 104.152.52.44#33202 (imap.letsbuild. ... show more 10-Feb-2026 17:14:39.585 security: info: client @0x7e4749d297d8 104.152.52.44#33202 (imap.letsbuild.ch): view Extern: query 'imap.letsbuild.ch/NS/IN' denied 10-Feb-2026 17:14:39.746 security: info: client @0x7e474000af58 104.152.52.44#52705 (imap.letsbuild.ch): view Extern: query 'imap.letsbuild.ch/A/IN' denied 10-Feb-2026 17:14:39.910 security: info: client @0x7e4738027788 104.152.52.44#50662 (imap.letsbuild.ch): view Extern: query 'imap.letsbuild.ch/AAAA/IN' denied 10-Feb-2026 17:14:40.702 security: info: client @0x7e4738027788 104.152.52.44#44279 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 10-Feb-2026 17:14:40.856 security: info: client @0x7e4749d297d8 104.152.52.44#60033 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied ... show less	Web App Attack
🇨🇭 Mario Bretscher	2026-02-09 21:08:50 (3 months ago)	09-Feb-2026 22:08:48.558 security: info: client @0x7c08f80f8dc8 104.152.52.44#50804 (mail.letsbuild. ... show more 09-Feb-2026 22:08:48.558 security: info: client @0x7c08f80f8dc8 104.152.52.44#50804 (mail.letsbuild.ch): view Extern: query 'mail.letsbuild.ch/NS/IN' denied 09-Feb-2026 22:08:48.963 security: info: client @0x7c08f407d5a8 104.152.52.44#44957 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 09-Feb-2026 22:08:49.110 security: info: client @0x7c08f80f8dc8 104.152.52.44#46212 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied 09-Feb-2026 22:08:49.363 security: info: client @0x7c0904000e98 104.152.52.44#39168 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 09-Feb-2026 22:08:49.519 security: info: client @0x7c08f80f8dc8 104.152.52.44#42001 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied ... show less	Web App Attack
🇨🇭 Mario Bretscher	2026-02-07 12:11:55 (4 months ago)	07-Feb-2026 13:11:52.309 security: info: client @0x7e19edd4b258 104.152.52.44#53224 (lb.letsbuild.ch ... show more 07-Feb-2026 13:11:52.309 security: info: client @0x7e19edd4b258 104.152.52.44#53224 (lb.letsbuild.ch): view Extern: query 'lb.letsbuild.ch/NS/IN' denied 07-Feb-2026 13:11:52.769 security: info: client @0x7e19dc0a21c8 104.152.52.44#46699 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 07-Feb-2026 13:11:52.915 security: info: client @0x7e19edd4b258 104.152.52.44#43731 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied 07-Feb-2026 13:11:53.208 security: info: client @0x7e19e80dd688 104.152.52.44#53257 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/A/IN' denied 07-Feb-2026 13:11:53.358 security: info: client @0x7e19dc0a21c8 104.152.52.44#36080 (hades.letsbuild.ch): view Extern: query 'hades.letsbuild.ch/AAAA/IN' denied ... show less	Web App Attack
🇹🇷 muratkaya665	2026-01-21 06:19:44 (4 months ago)	IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: Nmap.Script.Scanner. Dest ... show more IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: Nmap.Script.Scanner. Dest Port: 80. Service: HTTP. Message: tools: Nmap.Script.Scanner. show less	Hacking
🇳🇱 VMHeaven.io	2026-01-14 17:28:05 (4 months ago)	Blocked by UFW [22/tcp] Source port: 57168 TTL: 56 Packet length: 60	Port Scan Brute-Force SSH
🇵🇱 swiszczu	2025-11-28 19:58:08 (6 months ago)	Fail2Ban automatic report: SSH brute-force: Nov 28 20:58:07 serw sshd[1648329]: Connection closed by ... show more Fail2Ban automatic report: SSH brute-force: Nov 28 20:58:07 serw sshd[1648329]: Connection closed by 104.152.52.44 port 36256 [preauth] Nov 28 20:58:07 serw sshd[1648326]: Unable to negotiate with 104.152.52.44 port 36234: no matching host key type found. Their offer: ssh-dss [preauth] Nov 28 20:58:08 serw sshd[1648328]: Connection closed by 104.152.52.44 port 36242 [preauth] show less	Brute-Force SSH

Showing 1 to 15 of 641 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5::280

🇧🇬 91.191.209.98

🇰🇪 41.215.9.250

🇺🇸 2620:18c:0:192::e0:188

🇦🇷 190.110.113.37

🇨🇳 183.232.212.207

🇺🇸 178.128.148.166

🇫🇮 176.126.111.123

🇺🇸 147.185.132.33

🇩🇪 138.124.55.12

🇮🇹 93.33.3.18

🇺🇸 91.230.168.9

🇳🇱 86.54.31.32

🇺🇸 66.132.186.231

🇳🇱 51.158.205.203

🇫🇷 51.68.236.68

🇭🇳 45.234.232.26

🇺🇸 44.203.219.108

🇧🇪 34.79.128.3

🇧🇪 34.14.29.249