| 197.221.254.22 |
attack |
Port Scan detected!
... |
2020-07-14 08:05:45 |
| 197.221.254.235 |
attack |
Logged onto my email |
2020-07-05 03:55:10 |
| 197.221.254.235 |
attackspam |
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-05-29 06:30:57 |
| 197.221.254.79 |
attack |
Fail2Ban - HTTP Auth Bruteforce Attempt |
2020-05-12 05:24:46 |
| 197.221.254.176 |
attackbotsspam |
2019-03-12 20:37:49 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25129 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-12 20:38:40 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25137 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-12 20:39:11 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25138 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
... |
2020-01-30 04:45:43 |
| 197.221.254.96 |
attack |
2019-11-20 14:13:49 H=(16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)
2019-11-20 14:13:49 unexpected disconnection while reading SMTP command from (16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-11-20 15:33:34 H=(16.96.telone.co.zw) [197.221.254.96]:6523 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)
........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.96 |
2019-11-21 00:42:21 |
| 197.221.254.6 |
attackspambots |
2019-11-20 15:12:24 H=(16.6.telone.co.zw) [197.221.254.6]:31578 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.6)
2019-11-20 15:12:25 unexpected disconnection while reading SMTP command from (16.6.telone.co.zw) [197.221.254.6]:31578 I=[10.100.18.25]:25 (error: Connection reset by peer)
2019-11-20 15:29:34 H=(16.6.telone.co.zw) [197.221.254.6]:31622 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.6)
........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.6 |
2019-11-20 22:54:01 |
| 197.221.254.40 |
attack |
firewall-block, port(s): 1433/tcp |
2019-11-20 00:40:13 |
| 197.221.254.172 |
attackspambots |
Hello!
As you may have noticed, I sent you an email from your account.
This means that I have full access to your device.
I've been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.
If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.
I also have access to all your contacts and all your correspondence.
Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.
I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks... |
2019-10-13 06:30:27 |
| 197.221.254.157 |
attack |
Spam |
2019-08-14 23:36:14 |
| 197.221.254.2 |
attackspambots |
Lines containing failures of 197.221.254.2
Jul 13 16:57:36 mellenthin postfix/smtpd[5323]: connect from unknown[197.221.254.2]
Jul x@x
Jul 13 16:57:45 mellenthin postfix/smtpd[5323]: lost connection after DATA from unknown[197.221.254.2]
Jul 13 16:57:45 mellenthin postfix/smtpd[5323]: disconnect from unknown[197.221.254.2] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4
........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.2 |
2019-07-14 08:02:14 |