Check an IP Address, Domain Name, Subnet, or ASN

104.152.52.224 was found in our database!

$ whois 104.152.52.224

country·🇺🇸 United States

isp·Rethem Hosting LLC

asn·AS14987

network·Standard

$ sikker risk 104.152.52.224scoring →

confidence

51%Medium

first_seen·Jan 23, 2026

last_seen·2h ago

sessions·85

events·93

$ sikker protocols 104.152.52.224

SIP

22 / 22

POSTGRES

13 / 14

SSH

10 / 12

SMB

8 / 8

HTTPS

4 / 8

RDP

6 / 6

MSSQL

5 / 5

HTTP

4 / 4

TELNET

4 / 4

SMTP

3 / 3

IMAP

2 / 2

MONGODB

1 / 2

FTP

1 / 1

RTSP

1 / 1

REDIS

1 / 1

$ sikker summary 104.152.52.224

104.152.52.224 has a threat confidence score of 51%. This IP address from United States (AS14987, Rethem Hosting LLC) has been observed in 85 honeypot sessions targeting SIP, POSTGRES, SSH, SMB, HTTPS and 10 other protocols. First observed on January 23, 2026, most recently active April 1, 2026.

$ sikker behaviors 104.152.52.224catalog →

infoHttp Root Path Request1x

Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.

infoHttps Root Path Request1x

Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration

$ sikker primitives 104.152.52.224

http_method_get2 https_path_root1 ftp_help_request1 smtp_ehlo_greeting1 http_path_bad_request1 ftp_system_type_request1 ftp_feature_list_request1 smtp_starttls_upgrade_request1 smtp_mail_from_envelope_sender1 smtp_rcpt_to_recipient_declaration1

$ sikker related 104.152.52.224

Report IP WHOIS Lookup →

IP Address	Confidence	Events
104.152.52.131	78%	129
104.152.52.140	54%	169
104.152.52.223	55%	112
104.152.52.217	66%	88
104.152.52.220	56%	117

IP Address	Confidence	Events
154.16.112.232	100%	352,296
104.168.99.194	48%	6
65.49.1.112	52%	103
65.49.1.111	54%	97
65.49.1.119	51%	99