JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.245.241.178

104.245.241.178 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 20%: ?

20%

ISP	VitalKey
Usage Type	Fixed Line ISP
ASN	AS213954
Domain Name	vitalkey.io
Country	🇱🇻 Latvia
City	Riga, Riga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.245.241.178

Whois 104.245.241.178

IP Abuse Reports for 104.245.241.178:

This IP address has been reported a total of 7 times from 5 distinct sources. 104.245.241.178 was first reported on February 12th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-06-03 20:40:43 (8 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇨🇭 backslash	2026-05-21 20:27:11 (1 week ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-17 00:05:46 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 104.245.241.178 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 104.245.241.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 20:05:42.297939 2026] [security2:error] [pid 5033:tid 5033] [client 104.245.241.178:22485] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Horizon II/Horizon II/Stargo Black/originals/Thumbs.db"] [unique_id "agkGVrWLKb9jbCykho811gAAAA8"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Horizon%20II/Horizon%20II/Stargo%20Black/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-27 00:52:26 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 104.245.241.178 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 104.245.241.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 20:52:19.393965 2026] [security2:error] [pid 21525:tid 21525] [client 104.245.241.178:13261] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|goalsnet.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goalsnet.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ae6zQ7uTHQuUuOCISCuTUwAAABo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-19 05:15:15 (1 month ago)		Bad Web Bot
🇨🇦 ISPLtd	2026-02-21 03:55:17 (3 months ago)	Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config ... show more Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config or .env. Searching for web sites by IP address, bogus DNS entries, or unpublished/internal subdomains. Does not honour robots.txt. Vulnerability probe, 404s or other invalid requests, no referrer, null agent or fake antiquated desktop or mobile agents. show less	Hacking Web App Attack Port Scan Bad Web Bot
Anonymous	2026-02-12 10:55:58 (3 months ago)	[Tue Feb 10 03:51:48.661925 2026] [authz_core:error] [pid 901215] [client 104.245.241.178:41939] AH0 ... show more [Tue Feb 10 03:51:48.661925 2026] [authz_core:error] [pid 901215] [client 104.245.241.178:41939] AH01630: client denied by server configuration: /home/appowner/www/sec/+CSCOE+ [Thu Feb 12 00:32:25.138889 2026] [authz_core:error] [pid 1002219] [client 104.245.241.178:44173] AH01630: client denied by server configuration: /home/appowner/www/sec/global-protect [Thu Feb 12 00:40:04.033107 2026] [authz_core:error] [pid 1002217] [client 104.245.241.178:62315] AH01630: client denied by server configuration: /home/appowner/www/sec/+CSCOE+ [Thu Feb 12 02:55:57.261444 2026] [authz_core:error] [pid 1002232] [client 104.245.241.178:29075] AH01630: client denied by server configuration: /home/appowner/www/sec/remote [Thu Feb 12 02:55:57.819011 2026] [authz_core:error] [pid 1002215] [client 104.245.241.178:53859] AH01630: client denied by server configuration: /home/appowner/www/sec/login ... show less	Brute-Force SSH

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.154.229.122

🇺🇸 191.101.238.146

🇸🇬 165.232.169.124

🇫🇷 157.173.112.247

🇫🇮 147.185.133.40

🇨🇳 112.47.127.211

🇺🇸 20.65.194.121

🇩🇪 194.59.206.2

🇨🇳 144.123.76.192

🇨🇳 122.225.203.106

🇨🇳 116.248.172.18

🇮🇳 103.190.7.203

🇸🇬 47.128.54.94

🇧🇷 45.205.1.244

🇲🇾 211.25.241.153

🇲🇽 201.103.214.31

🇳🇱 195.62.32.180

🇻🇳 103.90.227.203

🇫🇷 91.231.89.225

🇺🇦 85.239.147.7