JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

194.104.11.245

Recent Activity

Abuse Confidence Score

17% Caution

10 reports

9 reporters · latest 1 hour ago

ISP: TrafficTransitSolution LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS26548
Domain Name: traffictransitsolution.us
Country: 🇺🇸 United States of America
City: New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

10 from 9 distinct reporters

First reported

March 19th 2022

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 2 🇨🇭 Switzerland 1 🇩🇪 Germany 1

Most common categories Bad Web Bot 4 Web App Attack 2 Brute-Force 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-28 22:54:09 (1 hour ago)	(mod_security) mod_security (id:210350) triggered by 194.104.11.245 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:54:01.192180 2026] [security2:error] [pid 3270:tid 3270] [client 194.104.11.245:50757] M ... show more (mod_security) mod_security (id:210350) triggered by 194.104.11.245 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:54:01.192180 2026] [security2:error] [pid 3270:tid 3270] [client 194.104.11.245:50757] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|briancastle.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "briancastle.com"] [uri "/bc_oculomotor_nuclei.php"] [unique_id "auJ9CVBv4k_-962YXuVfRgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-26 16:03:01 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 194.104.11.245 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:02:54.273402 2026] [security2:error] [pid 11404:tid 11404] [client 194.104.11.245:49007] ... show more (mod_security) mod_security (id:210350) triggered by 194.104.11.245 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:02:54.273402 2026] [security2:error] [pid 11404:tid 11404] [client 194.104.11.245:49007] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.niximperial.biz\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.niximperial.biz"] [uri "/c3s_11.html"] [unique_id "at95rnWEBmdKED4x9TGGcAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-09-18 00:09:09 (1 month ago)	block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56	Bad Web Bot
🇩🇪 Skyrider	2026-09-16 05:37:35 (1 month ago)	crowdsecurity/http-bad-user-agent	Bad Web Bot
🇳🇱 Savvii	2026-05-28 03:42:19 (5 months ago)	20 attempts against mh-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-05-27 23:03:13 (5 months ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN RU/Russia/-	Web App Attack
🇦🇺 oncord	2026-04-24 07:27:33 (6 months ago)	Form spam	Web Spam
Anonymous	2025-11-24 01:32:45 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇵🇱 sefinek.net	2024-08-29 23:31:04 (2 years ago)	This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (Linux; Android 10; SM-A315F/DS) AppleWebKit/537.36 (KHTML, like Gec ... show more This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (Linux; Android 10; SM-A315F/DS) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.81 Mobile Safari/537.36 - - show less	Bad Web Bot
Anonymous	2022-03-19 22:30:00 (4 years ago)	Password Spary Attack	Brute-Force Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇭 196.50.29.16

🇺🇸 184.105.139.83

🇺🇸 172.180.64.131

🇱🇹 141.98.10.43

🇰🇷 125.182.93.18

🇺🇸 102.129.177.46

🇺🇸 69.124.69.20

🇺🇸 66.132.224.226

🇺🇸 20.14.94.24

🇧🇷 16.5.0.145

🇷🇴 2.57.121.25

🇰🇷 220.118.190.204

🇨🇳 218.23.95.14

🇳🇱 192.42.116.48

🇲🇽 189.143.74.196

🇨🇳 182.92.194.238

🇳🇱 173.239.217.174

🇺🇸 170.106.37.134

🇯🇵 113.43.73.108

🇺🇸 107.170.78.43