185.221.254.8
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- FASTNET ALBANIA Sh.p.k
- Usage Type
- Fixed Line ISP
- ASN
- AS209442
- Domain Name
- fastnet.al
- Country
- 🇦🇱 Albania
- City
- Korce, Korce County
Abuse Reports
Total reports
44 from
33 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇵🇱 bmino.pl |
Autoban IP(2): 185.221.254.8 - Hostname: FASTNET ALBANIA Sh.p.k - City: Korçë - Country: Albania - Organization: AS209442 FASTNET ALBANIA Sh.p.k - Reason: GET /?m=ptt190yy26046wsicegziu HTTP/1.1
|
Web App Attack | |
| 🇵🇱 Budyn |
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_2 | Action: AWS API Call | Token ID: tu8jkpvo92f821qykacxbbvok | Client tool: silentvs-hitworker/1
|
Hacking Bad Web Bot Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇺🇸 justbible |
|
Bad Web Bot | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:45644 dst:23
|
Port Scan | |
| 🇫🇷 Hiigara |
connection attempt : 185.221.254.8 on port : tcp/23 (Telnet)
|
Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
|
Brute-Force | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| 🇩🇪 throny |
|
Web App Attack | |
| 🇩🇪 LRob |
Calendar filter flood (L7 DDoS) | host: escrime-auvergnerhonealpes.fr | path: http://escrime-auvergnerhonealpes.fr/calendrier-2/action~agenda/cat_ids~172,561/tag_ids~344,583,606,791,489/request_format~json/ | src_port: 41303
|
DDoS Attack Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:17881 dst:23
|
Port Scan | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (64, Abuse: 58)
|
Hacking Exploited Host Web App Attack | |
| 🇺🇸 OceanTreasure |
tcp/23; Legacy Telnet remote access probe @ 2026-10-10T17:27:15Z
|
IoT Targeted Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown