185.221.254.6

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
76% Critical
54 reports
32 reporters · latest 1 day ago
ISP
FASTNET ALBANIA Sh.p.k
Usage Type
Fixed Line ISP
ASN
AS209442
Domain Name
fastnet.al
Country
🇦🇱 Albania
City
Korce, Korce County
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
54 from 32 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 10 🇺🇸 United States of America 9 🇩🇪 Germany 6
Most common categories Port Scan 17 Bad Web Bot 10 Brute-Force 7 Web App Attack 4 Hacking 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇹 A000Z
Fail2Ban: 185.221.254.6 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47
Bad Web Bot
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host Web App Attack
🇩🇪 4server
Port Scan Brute-Force Web App Attack
🇺🇸 kosada.com
DDoS Attack Bad Web Bot
🇩🇪 nyuuzyou
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T10:43:12Z.
Bad Web Bot
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 185.221.254.6 2026-10-31T21:30:24+0100 vpn Access-Reject station: 185.221.254.6
Brute-Force Web App Attack
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇷🇴 Viperel
RouterOS: Repeated connections to sensitive (SSH/RDP/TELNET/DB/MGM) ports detected.
Port Scan Brute-Force
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:25028 dst:23
Port Scan
🇺🇸 schematics.cc
Blocked by on honeypot2 [23/tcp] | SPT: 24845 | TTL: 48 | LEN: 60 | TOS: 0x00 • Reported by: abuse.terraforge.fun
Port Scan IoT Targeted
🇺🇸 RAP
2026-10-27 06:08:03 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷 ipfyx
Port scanning
Port Scan
🇫🇷 ipfyx
Port scanning
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇪 200.90.55.169
🇰🇭 175.100.126.138
🇺🇸 167.172.211.251
🇺🇸 66.228.41.102
🇺🇸 192.81.129.158
🇵🇸 185.21.120.133
🇮🇳 150.241.244.61
🇺🇸 104.131.29.248
🇨🇮 102.67.245.223
🇪🇨 38.19.76.158
🇬🇧 35.203.210.15
🇳🇱 34.1.237.170
🇭🇰 8.217.212.139
🇷🇴 2.57.122.150
🇧🇷 177.204.53.209
🇩🇪 164.92.130.34
🇺🇸 142.93.26.183
🇭🇰 8.217.209.125
🇺🇸 192.101.66.157
🇲🇦 154.144.243.93
feedback