JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.221.254.21

185.221.254.21 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 32%: ?

32%

ISP	FASTNET ALBANIA Sh.p.k
Usage Type	Fixed Line ISP
ASN	AS209442
Domain Name	fastnet.al
Country	🇦🇱 Albania
City	Bucimas, Korce County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.221.254.21

Whois 185.221.254.21

IP Abuse Reports for 185.221.254.21:

This IP address has been reported a total of 16 times from 12 distinct sources. 185.221.254.21 was first reported on May 14th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-10-16 14:49:10 (12 hours ago)	185.221.254.21 \| Port: 10621 \| DNS: 185.221.254.21 2026-10-16T22:49:09+08:00 Europe/Tirane \| IPs res ... show more 185.221.254.21 \| Port: 10621 \| DNS: 185.221.254.21 2026-10-16T22:49:09+08:00 Europe/Tirane \| IPs res erved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1791961659&fdeadaefcebd92dffd=1261 \| Ref: - \| Country: AL/Albania/+01:00 IP City: Buçimas Windows a4b7de357b7a8ee1-SOF/Sofia, Bulgaria 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇫🇷 Tilellit.PRO	2026-09-28 01:09:08 (2 weeks ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-21 05:14:21 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 16:58:48 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 12:06:58 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 ALPHANET	2026-09-20 04:40:05 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
Anonymous	2026-09-06 10:43:34 (1 month ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp show less	Exploited Host Bad Web Bot
Anonymous	2026-09-01 11:34:10 (1 month ago)	Distributed web scraper targeting /store/filtered/ on www.mywineandspirits.com. Residential proxy - ... show more Distributed web scraper targeting /store/filtered/ on www.mywineandspirits.com. Residential proxy - IP+timestamp provided for ISP DHCP log attribution. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-26 11:24:19 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 FD-IX	2026-08-21 10:31:09 (1 month ago)	Fail2Ban: Automated WooCommerce filter abuse from distributed botnet activity.	Bad Web Bot
🇩🇪 LRob	2026-08-19 00:30:09 (1 month ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /7-velo-electrique-ville \| query: order=product.sales.desc&q=Famille-ADVENTR-Helix%2FType+de+cadre-Col+de+signe+%5C%2F+Wave show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-08-10 17:42:50 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-01 03:43:31 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 pixelmemory.us	2026-06-30 10:32:52 (3 months ago)	2026-06-30T10:31:14 185.221.254.21 GET /Photos/Vacation/2012-11-22%20Hwy%20108/raw/IMG_0788.CR2.xmp ... show more 2026-06-30T10:31:14 185.221.254.21 GET /Photos/Vacation/2012-11-22%20Hwy%20108/raw/IMG_0788.CR2.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-10 02:54:25 (4 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.185.36.44

🇹🇭 203.156.108.110

🇳🇱 195.178.110.227

🇺🇸 195.63.3.217

🇩🇪 194.88.98.91

🇪🇨 181.199.62.197

🇧🇷 170.247.29.209

🇧🇷 170.81.166.235

🇨🇳 106.59.139.167

🇨🇲 102.244.78.57

🇫🇷 85.217.140.29

🇳🇱 77.239.124.202

🇺🇸 67.167.175.142

🇺🇸 64.62.197.150

🇵🇸 24.42.88.149

🇳🇱 204.76.203.81

🇧🇴 166.114.186.246

🇺🇸 165.154.235.9

🇮🇳 139.59.16.152

🇰🇷 125.182.93.87