JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.245.242.129

Recent Activity

Abuse confidence score ?

4% Caution

10 reports

6 reporters · latest 3 days ago

ISP	VitalKey
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	vitalkey.io
Country	🇸🇪 Sweden
City	Marsta, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.245.242.129

This IP address has been reported a total of 10 times from 6 distinct sources. 104.245.242.129 was first reported on January 5th 2026, and the most recent report was 3 days ago. In the last 60 days, the only reporter location was: France with 2 reports. The only category in these recent reports was: Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-09-23 11:59:52 (3 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.245.242.129 (UA/Ukraine/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.245.242.129 (UA/Ukraine/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-09-22 00:00:56 (5 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.245.242.129 (UA/Ukraine/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 104.245.242.129 (UA/Ukraine/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 Tilellit.PRO	2026-05-20 16:54:38 (4 months ago)	Fail2Ban banned 104.245.242.129 for security violations in jail wp-armour. Log: 2026/05/20 16:54:38 ... show more Fail2Ban banned 104.245.242.129 for security violations in jail wp-armour. Log: 2026/05/20 16:54:38 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.245.242.129 \| Target: wplogin" , client: 104.245.242.129, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://espsformacion.com/wp-login.php" ... show less	Web Spam
🇪🇸 el-brujo	2026-05-14 14:58:27 (4 months ago)	[Thu May 14 16:58:26.109830 2026] [proxy_fcgi:error] [pid 498370:tid 500331] [remote 104.245.242.129 ... show more [Thu May 14 16:58:26.109830 2026] [proxy_fcgi:error] [pid 498370:tid 500331] [remote 104.245.242.129:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com [Thu May 14 16:58:26.934728 2026] [proxy_fcgi:error] [pid 498370:tid 500551] [remote 104.245.242.129:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com ... show less	Hacking Web App Attack
🇧🇪 voormedia	2026-05-11 05:15:13 (4 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇧🇪 voormedia	2026-02-09 05:09:14 (7 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇪🇸 el-brujo	2026-02-05 13:35:47 (7 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:146.0) Gecko/20100101 Firefox/146.0 Action: managed_challenge Source: firewallManaged ASN Description: GTS-AS Country: FI Method: POST Timestamp: 2026-02-05T13:35:47Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇮🇩 sockominfo	2026-02-05 09:00:31 (7 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-05 08:19:32 (7 months ago)	[WAZUH] Mixed case extension detected (case variation bypass)	Hacking Web App Attack
Anonymous	2026-01-05 04:28:24 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 148.153.50.179

🇬🇧 206.189.118.69

🇺🇸 205.210.31.72

🇲🇾 203.99.148.69

🇺🇸 195.184.76.191

🇺🇸 195.184.76.185

🇪🇨 181.196.24.37

🇺🇸 147.185.132.169

🇺🇸 135.222.40.136

🇦🇪 135.136.48.32

🇺🇸 107.0.200.227

🇺🇸 103.4.251.97

🇫🇷 85.217.140.35

🇷🇴 82.79.225.54

🇺🇸 68.225.62.36

🇻🇳 221.133.3.83

🇬🇧 213.166.84.37

🇺🇸 205.210.31.53

🇹🇼 203.75.170.63

🇩🇪 194.88.98.86