AbuseIPDB » 104.245.242.154
104.245.242.154 was found in our database!
This IP was reported 10 times. Confidence of
Abuse
is 28% : ?
ISP
VitalKey
Usage Type
Data Center/Web Hosting/Transit
ASN
AS213954
Domain Name
vitalkey.io
Country
๐ซ๐ฎ
Finland
City
Helsinki, Uusimaa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 104.245.242.154 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
104.245.242.154 was first reported on
December 10th 2025 , and the most recent report was
1 day ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-07-04 00:32:34
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 104.245.242.154 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 104.245.242.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:32:28.043621 2026] [security2:error] [pid 15751:tid 15751] [client 104.245.242.154:34493] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Horizon II/Horizon II/Stargo Black/originals/Thumbs.db"] [unique_id "akhUnG2ouAY9D4Kpwv9SGAAAAA4"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Horizon%20II/Horizon%20II/Stargo%20Black/originals/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-19 19:06:43
(2 weeks ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐ฆ๐บ
MAGIC
2026-06-13 01:20:09
(3 weeks ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-12 04:34:00
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 104.245.242.154 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 104.245.242.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:33:53.109340 2026] [security2:error] [pid 20824:tid 20824] [client 104.245.242.154:51233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kountz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kountz.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aiuMMa4gThN9K6VRAlupfQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
HandyTreff.de
2026-06-05 01:34:00
(1 month ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.992 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.992 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4913.3
show less
Web App Attack
Bad Web Bot
๐จ๐ญ
backslash
2026-06-04 19:21:02
(1 month ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
Anonymous
2026-04-28 08:58:58
(2 months ago)
Forum/form spam
Web Spam
๐จ๐ญ
backslash
2026-04-19 05:15:18
(2 months ago)
Bad Web Bot
Anonymous
2026-01-04 23:32:23
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-10 06:33:28
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 104.245.242.154 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 104.245.242.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 01:33:17.474220 2025] [security2:error] [pid 28772:tid 28772] [client 104.245.242.154:49025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thestardance.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thestardance.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTkULamUXHoYxbWSba2e3gAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: