JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.245.241.34

104.245.241.34 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 16%: ?

16%

ISP	VitalKey
Usage Type	Fixed Line ISP
ASN	AS213954
Domain Name	vitalkey.io
Country	🇱🇻 Latvia
City	Riga, Riga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.245.241.34

Whois 104.245.241.34

IP Abuse Reports for 104.245.241.34:

This IP address has been reported a total of 16 times from 14 distinct sources. 104.245.241.34 was first reported on March 24th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-05-21 07:05:14 (2 weeks ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 20:54:07 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.245.241.34 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.245.241.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 16:54:03.352604 2026] [security2:error] [pid 4340:tid 4358] [client 104.245.241.34:21397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sloveniaflyfishing.com"] [uri "/wp-config.php.orig"] [unique_id "ag4fa2ypN9svpit-8HPPrgAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-04-30 20:08:22 (1 month ago)	[ThuApr3022:08:18.7186122026][security2:error][pid4107214:tid4107950][client104.245.241.34:0]ModSecu ... show more [ThuApr3022:08:18.7186122026][security2:error][pid4107214:tid4107950][client104.245.241.34:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mondo-it.ch\"][uri\"/wp-json/oembed/1.0/proxy\"][unique_id\"afO2sv2TkPf0MlDvGtRvhwAAAMw\"] show less	Hacking Web App Attack
🇧🇪 voormedia	2025-04-02 21:05:39 (1 year ago)	Accessed trap at '/.git/config'	Web App Attack
🇷🇺 apitree	2025-04-02 19:37:48 (1 year ago)	suspicious behavior judging by the logs from the server	Phishing Port Scan Hacking Spoofing Bad Web Bot
🇫🇷 IRISIO	2025-03-31 07:05:14 (1 year ago)	scans/SQL injection/spam posts : 1 queries	SQL Injection Web App Attack
🇺🇸 mnsf	2025-03-30 11:06:29 (1 year ago)	Too many Status 40X (12)	Brute-Force Web App Attack
Anonymous	2025-03-30 11:03:33 (1 year ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-03-30 10:50:36 (1 year ago)	104.245.241.34 - - [30/Mar/2025:12:50:34 +0200] "GET /bitrix/components/bitrix/catalog/templates/.de ... show more 104.245.241.34 - - [30/Mar/2025:12:50:34 +0200] "GET /bitrix/components/bitrix/catalog/templates/.default/style.css HTTP/1.1" 404 2997 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36" ... show less	Web App Attack
🇺🇸 Ar1s	2025-03-30 10:39:17 (1 year ago)	[1:5000052] ETN AGGRESSIVE IPs Group 52 ::: Port: 80/TCP	Port Scan
🇸🇬 Cloudkul Cloudkul	2025-03-30 10:36:07 (1 year ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇮🇪 Jim Keir	2025-03-30 10:32:59 (1 year ago)	2025-03-30 10:32:58 104.245.241.34 File scanning, blocking 104.245.241.34 for 5 minutes	Web App Attack
🇮🇹 Progetto1	2025-03-30 10:23:01 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 niceshops.com	2025-03-26 12:49:47 (1 year ago)	Web Attack (26/Mar/2025:13:11:25.502", "frontend": "frontend_disco", "backend": "frontend_disco", "b ... show more Web Attack (26/Mar/2025:13:11:25.502", "frontend": "frontend_disco", "backend": "frontend_disco", "backend_server": "<NOSRV>", "time_request": 0, "time_wait": -1, "time_connect": -1, "time_response": -1, "time_active": 0, "status": 301, "bytes_read": 134, "termination_state": "LR--", "actconn": 108, "feconn": 107, "beconn": 0, "srv_conn": 0, "retries": 0, "srv_queue": 0, "backend_queue": 0, "capture_request": "{\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|\|}", "capture_response GET /.git/config) show less	Web App Attack
🇧🇪 voormedia	2025-03-26 11:14:50 (1 year ago)	Accessed trap at '/.git/config'	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:c84::279

🇺🇸 216.24.210.231

🇯🇵 203.138.203.198

🇱🇹 194.165.16.165

🇺🇸 165.154.135.215

🇺🇸 157.173.205.202

🇩🇪 144.31.16.121

🇻🇳 118.70.182.193

🇨🇳 113.124.95.123

🇺🇸 104.28.225.24

🇨🇦 85.217.149.10

🇺🇸 65.49.1.192

🇺🇸 65.49.1.44

🇸🇬 43.156.90.207

🇺🇸 40.124.184.7

🇰🇭 36.37.211.116

🇬🇧 31.14.254.31

🇺🇸 20.168.121.142

🇨🇳 14.29.240.154

🇺🇸 3.94.189.53