JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.245.243.150

104.245.243.150 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 11%: ?

11%

ISP	VitalKey
Usage Type	Fixed Line ISP
ASN	AS213954
Domain Name	vitalkey.io
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.245.243.150

Whois 104.245.243.150

IP Abuse Reports for 104.245.243.150:

This IP address has been reported a total of 15 times from 8 distinct sources. 104.245.243.150 was first reported on December 20th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-06-02 17:57:01 (2 days ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇨🇭 backslash	2026-04-19 05:18:00 (1 month ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-18 05:51:17 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 104.245.243.150 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 104.245.243.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 01:50:31.593461 2026] [security2:error] [pid 1320200:tid 1320200] [client 104.245.243.150:27483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.evolute.io"] [uri "/wp-config.php.back"] [unique_id "aeMbp--qw1iDLwtBsLZ19gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-03-02 16:52:07 (3 months ago)	WP Login Scan Activities: "2026-03-02T23:52:07.464+07:00" "/wp-login.php" "104.245.243.150" "Mozilla ... show more WP Login Scan Activities: "2026-03-02T23:52:07.464+07:00" "/wp-login.php" "104.245.243.150" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-03-02 12:34:15 (3 months ago)	WP Login Scan Activities: "2026-03-02T19:34:15.036+07:00" "/wp-login.php" "104.245.243.150" "Mozilla ... show more WP Login Scan Activities: "2026-03-02T19:34:15.036+07:00" "/wp-login.php" "104.245.243.150" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇩 Burayot	2026-02-26 04:21:12 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.245.243.150 (US/United States/- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.245.243.150 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇵🇱 cheatmaster.store	2026-02-25 23:29:09 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Finland Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇧🇪 voormedia	2026-02-25 12:17:13 (3 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇪🇸 el-brujo	2026-02-04 13:34:22 (4 months ago)	[Wed Feb 04 14:34:22.022211 2026] [proxy_fcgi:error] [pid 1554832:tid 1555505] [remote 104.245.243.1 ... show more [Wed Feb 04 14:34:22.022211 2026] [proxy_fcgi:error] [pid 1554832:tid 1555505] [remote 104.245.243.150:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com [Wed Feb 04 14:34:22.762833 2026] [proxy_fcgi:error] [pid 1554832:tid 1555577] [remote 104.245.243.150:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com ... show less	Hacking Web App Attack
🇺🇸 Psycho Solutions LLC	2026-02-03 15:19:44 (4 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 2/3/2026 3:19 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2025-12-31 17:53:58 (5 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 12/31/2025 5:53 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-26 23:39:17 (5 months ago)	WP Login Scan Activities	Web App Attack
🇮🇩 Burayot	2025-12-24 22:37:52 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.245.243.150 (US/United States/- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.245.243.150 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-21 04:20:57 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 104.245.243.150 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 104.245.243.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 23:20:47.805161 2025] [security2:error] [pid 9855:tid 9855] [client 104.245.243.150:63187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cydab.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cydab.com"] [uri "/"] [unique_id "aUd1n4O9X5bpDe29N5yZGAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-12-20 06:06:40 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.245.243.150 (US/United States/- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.245.243.150 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.236.228.39

🇨🇦 142.44.247.134

🇵🇰 119.155.35.97

🇨🇳 117.72.110.172

🇩🇿 105.96.13.6

🇷🇺 95.188.91.101

🇧🇾 87.232.65.102

🇺🇸 47.77.182.54

🇳🇱 45.156.87.204

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇨🇳 43.226.39.182

🇳🇱 31.42.176.142

🇨🇳 14.29.208.128

🇰🇿 176.124.88.29

🇩🇪 176.65.132.17

🇷🇺 109.174.104.74

🇿🇦 102.23.208.77

🇰🇷 59.24.133.197

🇳🇱 45.156.87.166