JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.221.254.239

185.221.254.239 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 32%: ?

32%

ISP	FASTNET ALBANIA Sh.p.k
Usage Type	Fixed Line ISP
ASN	AS209442
Domain Name	fastnet.al
Country	🇦🇱 Albania
City	Bucimas, Korce County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.221.254.239

Whois 185.221.254.239

IP Abuse Reports for 185.221.254.239:

This IP address has been reported a total of 189 times from 75 distinct sources. 185.221.254.239 was first reported on September 8th 2022, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-07-05 19:16:04 (10 hours ago)	NOQUEUE - IP: 185.221.254.239 - Jul 5 21:16:04 plesk postfix/smtpd[3419414]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.221.254.239 - Jul 5 21:16:04 plesk postfix/smtpd[3419414]: NOQUEUE: reject: RCPT from unknown[185.221.254.239]: 554 5.7.1 Service unavailable; Client host [185.221.254.239] blocked using dnsbl-2.uceprotect.net; Net 185.221.254.0/24 is UCEPROTECT-Level2 listed because 7 impacts are seen from FASTNET-KORCE, AL/AS209442 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.221.254.239 / Net 185.221.252.0/22 is UCEPROTECT-Level2 listed because 23 impacts are seen from FASTNET-KORCE, AL/AS209442 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.221.254.239; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<185.221.254.239> show less	Email Spam
🇺🇸 ras07	2026-06-28 21:34:16 (1 week ago)	Spam and phishing attempts.	Phishing Web Spam Exploited Host
🇨🇭 Origon	2026-06-28 18:48:46 (1 week ago)	NOQUEUE - IP: 185.221.254.239 - Jun 28 20:48:46 plesk postfix/smtpd[3610351]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.221.254.239 - Jun 28 20:48:46 plesk postfix/smtpd[3610351]: NOQUEUE: reject: RCPT from unknown[185.221.254.239]: 554 5.7.1 Service unavailable; Client host [185.221.254.239] blocked using dnsbl-1.uceprotect.net; IP 185.221.254.239 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.221.254.239; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<185.221.254.239> show less	Email Spam
🇷🇸 Smel	2026-06-16 03:19:19 (2 weeks ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
Anonymous	2026-06-09 21:21:31 (3 weeks ago)	2026-06-09T23:21:31.003590+02:00 soli-gate postfix/smtpd[2528139]: NOQUEUE: reject: RCPT from unknow ... show more 2026-06-09T23:21:31.003590+02:00 soli-gate postfix/smtpd[2528139]: NOQUEUE: reject: RCPT from unknown[185.221.254.239]: 554 5.7.25 Client host rejected: cannot find your hostname, [185.221.254.239]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<185.221.254.239> ... show less	Brute-Force
🇨🇭 Origon	2026-06-01 20:42:33 (1 month ago)	NOQUEUE - IP: 185.221.254.239 - Jun 1 22:42:33 plesk postfix/smtpd[3744994]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.221.254.239 - Jun 1 22:42:33 plesk postfix/smtpd[3744994]: NOQUEUE: reject: RCPT from unknown[185.221.254.239]: 554 5.7.1 Service unavailable; Client host [185.221.254.239] blocked using dnsbl-1.uceprotect.net; IP 185.221.254.239 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.221.254.239; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<185.221.254.239> show less	Email Spam
🇩🇪 Viveronese	2026-05-30 08:56:31 (1 month ago)	SASL LOGIN authentication failed	Brute-Force
🇨🇭 Origon	2026-05-29 20:10:05 (1 month ago)	NOQUEUE - IP: 185.221.254.239 - May 29 22:10:04 plesk postfix/smtpd[1456756]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.221.254.239 - May 29 22:10:04 plesk postfix/smtpd[1456756]: NOQUEUE: reject: RCPT from unknown[185.221.254.239]: 554 5.7.1 Service unavailable; Client host [185.221.254.239] blocked using dnsbl-1.uceprotect.net; IP 185.221.254.239 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.221.254.239; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<185.221.254.239> show less	Email Spam
🇩🇪 filstal.org	2026-05-28 11:25:18 (1 month ago)	CrowdSec-Report: crowdsecurity/postfix-helo-rejected	Email Spam Brute-Force
🇨🇭 Origon	2026-05-26 14:00:04 (1 month ago)	NOQUEUE - IP: 185.221.254.239 - May 26 15:58:58 plesk postfix/smtpd[3131574]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.221.254.239 - May 26 15:58:58 plesk postfix/smtpd[3131574]: NOQUEUE: reject: RCPT from unknown[185.221.254.239]: 554 5.7.1 Service unavailable; Client host [185.221.254.239] blocked using dnsbl-1.uceprotect.net; IP 185.221.254.239 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.221.254.239; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<185.221.254.239> show less	Email Spam
🇬🇧 transcom	2026-05-22 13:08:40 (1 month ago)	Spam #2 to aquilina.co.uk (trap_type=honeypot_direct, from=aquilina.co.uk)	Web Spam
🇬🇧 Ged	2026-05-06 15:17:01 (1 month ago)	Spam.	Email Spam
🇪🇸 librebit	2026-04-21 20:21:21 (2 months ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇪🇸 www.pk25.com	2026-04-21 18:42:40 (2 months ago)	2026-04-21 20:10:20 H=(185.221.254.239) [185.221.254.239] sender verify fail for <admin@adycoaduanas ... show more 2026-04-21 20:10:20 H=(185.221.254.239) [185.221.254.239] sender verify fail for <[email protected]>: Unrouteable address 2026-04-21 20:10:20 H=(185.221.254.239) [185.221.254.239] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-04-21 20:42:39 H=(185.221.254.239) [185.221.254.239] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force
Anonymous	2026-04-04 13:28:35 (3 months ago)	Dispatching spam/unsolicited email	Email Spam

Showing 1 to 15 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.134

🇮🇳 182.95.127.42

🇮🇳 103.47.170.6

🇺🇸 209.50.160.26

🇳🇱 193.176.31.239

🇳🇱 185.213.175.37

🇺🇸 173.239.214.76

🇭🇰 103.103.245.61

🇳🇱 91.92.40.31

🇺🇸 64.62.197.227

🇭🇰 52.184.100.96

🇲🇽 45.180.8.218

🇺🇸 45.33.2.27

🇵🇪 38.25.25.128

🇺🇸 20.65.193.152

🇲🇾 203.121.40.210

🇨🇳 202.46.62.20

🇮🇳 123.253.163.63

🇫🇷 91.231.89.241

🇹🇷 81.177.215.74