必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Zimbabwe

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
197.221.254.22 attack
Port Scan detected!
...
2020-07-14 08:05:45
197.221.254.235 attack
Logged onto my email
2020-07-05 03:55:10
197.221.254.235 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-29 06:30:57
197.221.254.79 attack
Fail2Ban - HTTP Auth Bruteforce Attempt
2020-05-12 05:24:46
197.221.254.176 attackbotsspam
2019-03-12 20:37:49 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25129 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-12 20:38:40 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25137 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-12 20:39:11 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25138 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2020-01-30 04:45:43
197.221.254.63 attack
Unauthorized connection attempt detected from IP address 197.221.254.63 to port 445
2019-12-11 21:32:25
197.221.254.96 attack
2019-11-20 14:13:49 H=(16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)
2019-11-20 14:13:49 unexpected disconnection while reading SMTP command from (16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-11-20 15:33:34 H=(16.96.telone.co.zw) [197.221.254.96]:6523 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.96
2019-11-21 00:42:21
197.221.254.6 attackspambots
2019-11-20 15:12:24 H=(16.6.telone.co.zw) [197.221.254.6]:31578 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.6)
2019-11-20 15:12:25 unexpected disconnection while reading SMTP command from (16.6.telone.co.zw) [197.221.254.6]:31578 I=[10.100.18.25]:25 (error: Connection reset by peer)
2019-11-20 15:29:34 H=(16.6.telone.co.zw) [197.221.254.6]:31622 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.6)

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.6
2019-11-20 22:54:01
197.221.254.40 attack
firewall-block, port(s): 1433/tcp
2019-11-20 00:40:13
197.221.254.172 attackspambots
Hello!

As you may have noticed, I sent you an email from your account.
This means that I have full access to your device.

I've been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.

If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.

I also have access to all your contacts and all your correspondence.

Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.

I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks...
2019-10-13 06:30:27
197.221.254.157 attack
Spam
2019-08-14 23:36:14
197.221.254.2 attackspambots
Lines containing failures of 197.221.254.2
Jul 13 16:57:36 mellenthin postfix/smtpd[5323]: connect from unknown[197.221.254.2]
Jul x@x
Jul 13 16:57:45 mellenthin postfix/smtpd[5323]: lost connection after DATA from unknown[197.221.254.2]
Jul 13 16:57:45 mellenthin postfix/smtpd[5323]: disconnect from unknown[197.221.254.2] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.2
2019-07-14 08:02:14
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.221.254.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7863
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;197.221.254.166.		IN	A

;; AUTHORITY SECTION:
.			328	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 22:42:42 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
166.254.221.197.in-addr.arpa domain name pointer 16.166.telone.co.zw.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
166.254.221.197.in-addr.arpa	name = 16.166.telone.co.zw.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
106.12.196.118 attackspambots
Jul 14 21:31:04 nextcloud sshd\[22011\]: Invalid user erika from 106.12.196.118
Jul 14 21:31:04 nextcloud sshd\[22011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118
Jul 14 21:31:05 nextcloud sshd\[22011\]: Failed password for invalid user erika from 106.12.196.118 port 33948 ssh2
2020-07-15 04:07:46
185.143.73.175 attackbotsspam
Jul 14 20:30:11 blackbee postfix/smtpd[25094]: warning: unknown[185.143.73.175]: SASL LOGIN authentication failed: authentication failure
Jul 14 20:30:31 blackbee postfix/smtpd[25094]: warning: unknown[185.143.73.175]: SASL LOGIN authentication failed: authentication failure
Jul 14 20:30:57 blackbee postfix/smtpd[25102]: warning: unknown[185.143.73.175]: SASL LOGIN authentication failed: authentication failure
Jul 14 20:31:20 blackbee postfix/smtpd[25102]: warning: unknown[185.143.73.175]: SASL LOGIN authentication failed: authentication failure
Jul 14 20:31:43 blackbee postfix/smtpd[25012]: warning: unknown[185.143.73.175]: SASL LOGIN authentication failed: authentication failure
...
2020-07-15 03:37:48
13.78.149.65 attack
Brute-force attempt banned
2020-07-15 03:33:21
23.102.232.247 attackspambots
SSH Brute Force
2020-07-15 03:32:05
156.217.116.126 attackbots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-07-15 03:56:11
203.6.237.234 attackspambots
$f2bV_matches
2020-07-15 03:56:41
177.23.150.218 attackbots
Jul 14 15:21:43 ny01 sshd[27564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.23.150.218
Jul 14 15:21:45 ny01 sshd[27564]: Failed password for invalid user igs from 177.23.150.218 port 24929 ssh2
Jul 14 15:25:28 ny01 sshd[28481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.23.150.218
2020-07-15 03:38:04
62.210.141.218 attackbotsspam
xmlrpc attack
2020-07-15 03:33:52
118.25.144.133 attackspam
2020-07-14T20:27:52.049716+02:00  sshd[1982]: Failed password for invalid user enrico from 118.25.144.133 port 49290 ssh2
2020-07-15 03:29:31
191.233.198.50 attack
Jul 14 20:28:01 pve1 sshd[31922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.233.198.50 
Jul 14 20:28:02 pve1 sshd[31922]: Failed password for invalid user 123 from 191.233.198.50 port 16844 ssh2
...
2020-07-15 03:30:25
198.143.155.138 attackbotsspam
Unauthorized connection attempt detected from IP address 198.143.155.138 to port 7218
2020-07-15 03:55:51
52.188.153.190 attackspam
$f2bV_matches
2020-07-15 03:52:09
103.84.71.238 attackbots
Jul 14 21:32:39 vps639187 sshd\[6931\]: Invalid user varga from 103.84.71.238 port 60424
Jul 14 21:32:39 vps639187 sshd\[6931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.84.71.238
Jul 14 21:32:40 vps639187 sshd\[6931\]: Failed password for invalid user varga from 103.84.71.238 port 60424 ssh2
...
2020-07-15 04:04:39
195.154.42.43 attack
Jul 14 20:40:24 srv-ubuntu-dev3 sshd[68558]: Invalid user jack from 195.154.42.43
Jul 14 20:40:24 srv-ubuntu-dev3 sshd[68558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.42.43
Jul 14 20:40:24 srv-ubuntu-dev3 sshd[68558]: Invalid user jack from 195.154.42.43
Jul 14 20:40:26 srv-ubuntu-dev3 sshd[68558]: Failed password for invalid user jack from 195.154.42.43 port 38474 ssh2
Jul 14 20:43:37 srv-ubuntu-dev3 sshd[69044]: Invalid user wedding from 195.154.42.43
Jul 14 20:43:37 srv-ubuntu-dev3 sshd[69044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.42.43
Jul 14 20:43:37 srv-ubuntu-dev3 sshd[69044]: Invalid user wedding from 195.154.42.43
Jul 14 20:43:39 srv-ubuntu-dev3 sshd[69044]: Failed password for invalid user wedding from 195.154.42.43 port 35972 ssh2
Jul 14 20:46:47 srv-ubuntu-dev3 sshd[69660]: Invalid user test from 195.154.42.43
...
2020-07-15 04:07:01
222.186.30.57 attackbotsspam
Jul 14 21:26:01 v22018053744266470 sshd[1227]: Failed password for root from 222.186.30.57 port 42270 ssh2
Jul 14 21:26:09 v22018053744266470 sshd[1237]: Failed password for root from 222.186.30.57 port 58819 ssh2
...
2020-07-15 03:40:10

最近上报的IP列表

197.221.249.12 197.221.2.51 197.221.2.30 197.221.45.251
197.221.27.170 197.221.2.27 197.225.111.114 197.225.125.2
197.221.50.110 197.228.196.196 197.227.34.191 197.227.3.75
197.228.198.11 197.229.2.176 197.229.152.82 197.228.199.35
197.230.172.109 197.230.227.210 197.230.43.59 197.231.202.156