Check an IP Address, Domain Name, Subnet, or ASN

104.152.52.118 was found in our database!

$ whois 104.152.52.118

country·🇺🇸 United States

isp·Rethem Hosting LLC

asn·AS14987

network·Standard

$ sikker risk 104.152.52.118scoring →

confidence

48%Medium

first_seen·Jan 20, 2026

last_seen·1h ago

sessions·85

events·121

$ sikker protocols 104.152.52.118

SIP

19 / 28

SMTP

5 / 22

SMB

16 / 16

SSH

12 / 15

TELNET

9 / 13

POSTGRES

10 / 10

HTTP

5 / 5

HTTPS

4 / 4

MONGODB

1 / 4

RDP

2 / 2

FTP

1 / 1

REDIS

1 / 1

$ sikker summary 104.152.52.118

104.152.52.118 has a threat confidence score of 48%. This IP address from United States (AS14987, Rethem Hosting LLC) has been observed in 85 honeypot sessions targeting SIP, SMTP, SMB, SSH, TELNET and 7 other protocols. First observed on January 20, 2026, most recently active March 25, 2026.

$ sikker behaviors 104.152.52.118catalog →

infoHttps Root Path Request1x

Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration

$ sikker primitives 104.152.52.118

http_method_get3 https_path_root1 ftp_help_request1 mongodb_ismaster1 smtp_ehlo_greeting1 redis_info_uppercase1 ftp_system_type_request1 ftp_feature_list_request1 smtp_starttls_upgrade_request1 smtp_mail_from_envelope_sender1 sip_call_id_alphanumeric_entropy1 smtp_rcpt_to_recipient_declaration1

$ sikker related 104.152.52.118

Report IP WHOIS Lookup →

IP Address	Confidence	Events
104.152.52.121	75%	143
104.152.52.122	49%	129
104.152.52.100	65%	184
104.152.52.115	77%	160
104.152.52.107	50%	139

IP Address	Confidence	Events
20.163.5.58	72%	170
172.236.228.193	97%	1,852
208.3.195.65	100%	101,828
92.118.39.63	100%	56,915
172.206.243.183	72%	453