JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.204.34.245

185.204.34.245 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 7%: ?

ISP	ULTRANET sh.p.k
Usage Type	Fixed Line ISP
ASN	AS205832
Domain Name	ultranet.al
Country	🇦🇱 Albania
City	Shkoder, Shkoder County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.204.34.245

Whois 185.204.34.245

IP Abuse Reports for 185.204.34.245:

This IP address has been reported a total of 10 times from 10 distinct sources. 185.204.34.245 was first reported on August 27th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Aaaa Bbbb	2026-06-05 11:12:44 (1 week ago)		DNS Compromise DNS Poisoning Fraud Orders DDoS Attack FTP Brute-Force Ping of Death Phishing Fraud VoIP Open Proxy Web Spam Email Spam Blog Spam VPN IP Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇮🇹 A000Z	2026-05-05 15:55:15 (1 month ago)	Fail2Ban: 185.204.34.245 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 185.204.34.245 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.8952.1244 Safari/537.36 show less	Bad Web Bot
🇩🇪 HandyTreff.de	2026-04-09 02:40:45 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.12 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.12 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0. show less	Web App Attack Bad Web Bot
🇷🇴 INTEQ	2026-03-26 20:01:52 (2 months ago)	Web attack from 185.204.34.245	Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 00:21:41 (3 months ago)	(mod_security) mod_security (id:217210) triggered by 185.204.34.245 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 185.204.34.245 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 20:21:35.706187 2026] [security2:error] [pid 27511:tid 27511] [client 185.204.34.245:57618] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.ericgwin.com\|F\|4"] [data "GET http://www.ericgwin.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ericgwin.com"] [uri "/"] [unique_id "abSqDw3mxCnVB56Igp8qpgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-03-09 02:14:04 (3 months ago)	185.204.34.245 \| Port: 14125 \| DNS: 185.204.34.245 2026-03-09T10:14:03+08:00 Europe/Tirane \| IPs res ... show more 185.204.34.245 \| Port: 14125 \| DNS: 185.204.34.245 2026-03-09T10:14:03+08:00 Europe/Tirane \| IPs reserved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0 HTTP/1.1 443 GET \| URL: /3d-tiffany-themed-stacked-cake/?363c89f77b0d6b061ed=GBP&code=GBP \| Ref: https://xxxxxx/3d-tiffany-themed-stacked-cake/?b85ef00aa9c5f4d50799513eb=zh-cn&code=zh-cn \| Country: AL/Albania/+01:00 IP City: Vukatanë Windows 9d969058edde98cf-MXP/Milan, Italy 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 matt	2026-03-04 01:58:53 (3 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack
🇫🇷 ISPLtd	2026-02-27 01:22:26 (3 months ago)	Feb 26 21:22:23 185.204.34.245 TCP SPT=36976 DPT=8080 SYN Feb 26 21:22:24 185.204.34.245 TCP SPT=369 ... show more Feb 26 21:22:23 185.204.34.245 TCP SPT=36976 DPT=8080 SYN Feb 26 21:22:24 185.204.34.245 TCP SPT=36976 DPT=8080 SYN Feb 26 21:22:26 185.204.34.245 TCP SPT=36976 DPT=8080 ... show less	Port Scan
Anonymous	2026-02-26 18:53:11 (3 months ago)	scanning http requests from known botnet	Web App Attack
🇳🇱 exxos	2025-08-27 22:04:58 (9 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇳🇱 185.223.235.3

🇺🇸 162.216.150.4

🇺🇸 104.194.10.16

🇷🇺 95.107.7.103

🇪🇸 77.230.126.154

🇺🇸 47.251.127.130

🇧🇷 45.232.73.84

🇳🇱 45.148.10.151

🇬🇧 213.166.84.34

🇨🇿 213.155.224.171

🇩🇪 194.140.115.173

🇩🇪 185.242.3.226

🇸🇬 185.200.116.67

🇳🇬 165.154.11.225

🇫🇮 147.185.133.152

🇸🇬 101.47.156.170

🇺🇸 100.50.17.159

🇺🇸 98.89.204.118

🇺🇸 20.163.32.211