必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Zimbabwe

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
197.221.254.22 attack
Port Scan detected!
...
2020-07-14 08:05:45
197.221.254.235 attack
Logged onto my email
2020-07-05 03:55:10
197.221.254.235 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-29 06:30:57
197.221.254.79 attack
Fail2Ban - HTTP Auth Bruteforce Attempt
2020-05-12 05:24:46
197.221.254.176 attackbotsspam
2019-03-12 20:37:49 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25129 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-12 20:38:40 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25137 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-12 20:39:11 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25138 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2020-01-30 04:45:43
197.221.254.63 attack
Unauthorized connection attempt detected from IP address 197.221.254.63 to port 445
2019-12-11 21:32:25
197.221.254.96 attack
2019-11-20 14:13:49 H=(16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)
2019-11-20 14:13:49 unexpected disconnection while reading SMTP command from (16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-11-20 15:33:34 H=(16.96.telone.co.zw) [197.221.254.96]:6523 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.96
2019-11-21 00:42:21
197.221.254.6 attackspambots
2019-11-20 15:12:24 H=(16.6.telone.co.zw) [197.221.254.6]:31578 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.6)
2019-11-20 15:12:25 unexpected disconnection while reading SMTP command from (16.6.telone.co.zw) [197.221.254.6]:31578 I=[10.100.18.25]:25 (error: Connection reset by peer)
2019-11-20 15:29:34 H=(16.6.telone.co.zw) [197.221.254.6]:31622 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.6)

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.6
2019-11-20 22:54:01
197.221.254.40 attack
firewall-block, port(s): 1433/tcp
2019-11-20 00:40:13
197.221.254.172 attackspambots
Hello!

As you may have noticed, I sent you an email from your account.
This means that I have full access to your device.

I've been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.

If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.

I also have access to all your contacts and all your correspondence.

Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.

I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks...
2019-10-13 06:30:27
197.221.254.157 attack
Spam
2019-08-14 23:36:14
197.221.254.2 attackspambots
Lines containing failures of 197.221.254.2
Jul 13 16:57:36 mellenthin postfix/smtpd[5323]: connect from unknown[197.221.254.2]
Jul x@x
Jul 13 16:57:45 mellenthin postfix/smtpd[5323]: lost connection after DATA from unknown[197.221.254.2]
Jul 13 16:57:45 mellenthin postfix/smtpd[5323]: disconnect from unknown[197.221.254.2] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.2
2019-07-14 08:02:14
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.221.254.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 272
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;197.221.254.102.		IN	A

;; AUTHORITY SECTION:
.			344	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022070200 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 02 18:35:16 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
102.254.221.197.in-addr.arpa domain name pointer 16.102.telone.co.zw.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
102.254.221.197.in-addr.arpa	name = 16.102.telone.co.zw.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
37.152.183.16 attackspam
May 13 11:35:53 prox sshd[1329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.152.183.16 
May 13 11:35:55 prox sshd[1329]: Failed password for invalid user darora from 37.152.183.16 port 36360 ssh2
2020-05-13 17:42:35
171.236.72.51 attackbots
20/5/12@23:52:41: FAIL: Alarm-Network address from=171.236.72.51
...
2020-05-13 17:44:40
185.107.96.190 attackspambots
TCP Xmas Tree Attack
2020-05-13 17:40:29
222.252.214.135 attackbotsspam
May 13 05:52:32 vps639187 sshd\[14598\]: Invalid user admina from 222.252.214.135 port 60333
May 13 05:52:32 vps639187 sshd\[14598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.214.135
May 13 05:52:34 vps639187 sshd\[14598\]: Failed password for invalid user admina from 222.252.214.135 port 60333 ssh2
...
2020-05-13 17:49:45
180.167.225.118 attackspambots
May 13 11:05:47 OPSO sshd\[18837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.225.118  user=root
May 13 11:05:49 OPSO sshd\[18837\]: Failed password for root from 180.167.225.118 port 43114 ssh2
May 13 11:06:05 OPSO sshd\[18957\]: Invalid user jill from 180.167.225.118 port 53470
May 13 11:06:05 OPSO sshd\[18957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.225.118
May 13 11:06:07 OPSO sshd\[18957\]: Failed password for invalid user jill from 180.167.225.118 port 53470 ssh2
2020-05-13 17:28:25
37.187.109.219 attack
detected by Fail2Ban
2020-05-13 17:10:08
145.239.2.231 attackspam
Chat Spam
2020-05-13 17:38:03
180.76.162.19 attackbotsspam
May 13 07:28:04 melroy-server sshd[8117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.162.19 
May 13 07:28:06 melroy-server sshd[8117]: Failed password for invalid user dell from 180.76.162.19 port 46452 ssh2
...
2020-05-13 17:17:04
94.177.214.200 attack
Invalid user rb from 94.177.214.200 port 37968
2020-05-13 17:11:13
86.57.234.172 attackspam
May 12 23:38:17 web1 sshd\[20139\]: Invalid user suporte from 86.57.234.172
May 12 23:38:17 web1 sshd\[20139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.57.234.172
May 12 23:38:19 web1 sshd\[20139\]: Failed password for invalid user suporte from 86.57.234.172 port 57274 ssh2
May 12 23:44:03 web1 sshd\[20678\]: Invalid user starbound from 86.57.234.172
May 12 23:44:03 web1 sshd\[20678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.57.234.172
2020-05-13 17:47:46
152.136.96.32 attack
May 13 10:53:50 pve1 sshd[26438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.96.32 
May 13 10:53:52 pve1 sshd[26438]: Failed password for invalid user dash from 152.136.96.32 port 58350 ssh2
...
2020-05-13 17:24:46
89.201.222.213 attackbots
May 13 05:53:15 debian-2gb-nbg1-2 kernel: \[11600855.156921\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.201.222.213 DST=195.201.40.59 LEN=193 TOS=0x00 PREC=0x00 TTL=116 ID=61406 PROTO=UDP SPT=52333 DPT=53528 LEN=173
2020-05-13 17:22:27
185.176.27.102 attackbots
[portscan] tcp/3389 [MS RDP]
*(RWIN=1024)(05131133)
2020-05-13 17:18:45
116.196.93.81 attackbots
May 13 07:20:39 vps sshd[485477]: Failed password for invalid user admin from 116.196.93.81 port 41406 ssh2
May 13 07:22:35 vps sshd[492786]: Invalid user wendi from 116.196.93.81 port 38826
May 13 07:22:35 vps sshd[492786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.93.81
May 13 07:22:37 vps sshd[492786]: Failed password for invalid user wendi from 116.196.93.81 port 38826 ssh2
May 13 07:24:30 vps sshd[499831]: Invalid user deploy from 116.196.93.81 port 36238
...
2020-05-13 17:15:55
129.204.74.158 attack
SSH login attempts.
2020-05-13 17:39:56

最近上报的IP列表

193.233.158.134 203.184.132.196 200.232.218.36 193.251.45.38
201.119.159.112 203.99.106.188 194.113.74.238 194.158.241.130
200.140.155.174 203.222.16.111 195.201.147.202 200.107.84.23
187.208.169.181 201.93.234.179 195.231.14.104 201.121.96.57
196.42.31.244 179.172.97.71 200.150.81.247 197.232.80.216