IPLowSignal 45/100
104.152.52.89
Location
United StatesChicago, Illinois
ASN
AS51088
Rethem Hosting LLC
First Seen
Dec 7, 2024
Last Seen
Aug 6, 2025
Found in 2 reports. Confidence: low. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
45%
Signal Score
45 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryUnited States
United StatesRegionChicago, Illinois
ASNAS51088
OrganizationRethem Hosting LLC
Feed Intelligence Summary
2 reports45% confidence
2
Source reports
45%
Confidence score
Category tags
abuseaccess controlactive scanningbrute forcecommunication protocolcredential accesscredential stuffingdatabase securityftphttp scannerindicatornetworknetwork scanningnetwork securitynorth americaprotocol exploitationreconnaissanceremote accessremote servicesresearchedscannersecurity policyserver exploitationsql injectionssh attackt1021t1021.001t1040t1046t1056t1059t1059.003t1071.001t1078t1110t1110.002t1190t1499.002t1505.002t1595t1595.001t1595.002t1595.003telnet threatthreat preventionunauthorized accessunited statesvnc protocolweb traffic
Activity Timeline
Aug 6Aug 6
Threat Activity Heatmap
· Peak: 2025-08-06LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
45
SIGNAL
Signal Score
45%
Confidence
2
Reports
First seenDec 7, 2024
Last seenAug 6, 2025
GeolocationUS
CountryUnited States
LocationChicago, Illinois
ASNAS51088
OrgRethem Hosting LLC
Coords41.8911, -87.6246
VirusTotal
Not checked
WHOIS
- description
- 2 unauthorized connection attempts to ports 21, 5900 TCP/21 - 104[.]152[.]52[.]89:49389 - 2023-07-15T08:24:29 TCP/5900 - 104[.]152[.]52[.]89:49389 - 2023-07-15T08:25:06
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
lowFirst detected 1 year ago · Last seen 10 months ago
Appeared in 2 threat reports