197.221.2.30 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
197.221.227.126	attack	Unauthorized connection attempt from IP address 197.221.227.126 on Port 445(SMB)	2020-08-19 06:18:47
197.221.254.22	attack	Port Scan detected! ...	2020-07-14 08:05:45
197.221.254.235	attack	Logged onto my email	2020-07-05 03:55:10
197.221.226.2	attack	(smtpauth) Failed SMTP AUTH login from 197.221.226.2 (ZW/Zimbabwe/mail.arrupe.co.zw): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-04 08:25:34 plain authenticator failed for ([197.221.226.2]) [197.221.226.2]: 535 Incorrect authentication data (set_id=training@nazeranyekta.com)	2020-06-04 14:25:11
197.221.254.235	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-05-29 06:30:57
197.221.230.118	attackspam	Honeypot attack, port: 445, PTR: 19.118.telone.co.zw.	2020-05-21 00:18:06
197.221.254.79	attack	Fail2Ban - HTTP Auth Bruteforce Attempt	2020-05-12 05:24:46
197.221.249.20	attackbots	Invalid user lifferay from 197.221.249.20 port 44536	2020-04-22 16:43:54
197.221.251.10	attackspambots	445/tcp [2020-03-04]1pkt	2020-03-04 22:33:39
197.221.230.118	attack	Unauthorized connection attempt from IP address 197.221.230.118 on Port 445(SMB)	2020-02-22 06:22:25
197.221.234.62	attack	2019-10-23 08:49:39 1iNASf-00021G-5R SMTP connection from \(16.62.telone.co.zw\) \[197.221.234.62\]:61955 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-10-23 08:50:12 1iNATA-00023U-3A SMTP connection from \(16.62.telone.co.zw\) \[197.221.234.62\]:62776 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-10-23 08:50:27 1iNATR-000241-8L SMTP connection from \(16.62.telone.co.zw\) \[197.221.234.62\]:61381 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 04:48:54
197.221.251.13	attack	2019-03-11 19:32:32 1h3Piw-0004gQ-C0 SMTP connection from \(16.13.telone.co.zw\) \[197.221.251.13\]:5977 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-11 19:33:18 1h3Pjh-0004hC-2o SMTP connection from \(16.13.telone.co.zw\) \[197.221.251.13\]:5978 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-11 19:33:50 1h3Pk7-0004hl-2K SMTP connection from \(16.13.telone.co.zw\) \[197.221.251.13\]:5979 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 04:47:41
197.221.251.27	attackbots	2019-03-11 18:57:49 H=\(16.27.telone.co.zw\) \[197.221.251.27\]:18075 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 18:57:56 H=\(16.27.telone.co.zw\) \[197.221.251.27\]:18076 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 18:58:02 H=\(16.27.telone.co.zw\) \[197.221.251.27\]:18077 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-01-30 04:46:05
197.221.254.176	attackbotsspam	2019-03-12 20:37:49 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25129 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-12 20:38:40 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25137 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-12 20:39:11 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25138 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-01-30 04:45:43
197.221.234.154	attackbotsspam	Unauthorized connection attempt detected, IP banned.	2020-01-26 21:07:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.221.2.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50541
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;197.221.2.30.			IN	A

;; AUTHORITY SECTION:
.			407	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 22:42:37 CST 2022
;; MSG SIZE  rcvd: 105

Host info

30.2.221.197.in-addr.arpa domain name pointer www30.cpt1.host-h.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
30.2.221.197.in-addr.arpa	name = www30.cpt1.host-h.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.21.122.189	attackbotsspam	SpamReport	2019-12-03 04:38:19
222.186.175.161	attack	Dec 2 23:28:12 server sshd\[24165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161 user=root Dec 2 23:28:13 server sshd\[24165\]: Failed password for root from 222.186.175.161 port 3952 ssh2 Dec 2 23:28:17 server sshd\[24165\]: Failed password for root from 222.186.175.161 port 3952 ssh2 Dec 2 23:28:20 server sshd\[24165\]: Failed password for root from 222.186.175.161 port 3952 ssh2 Dec 2 23:28:23 server sshd\[24165\]: Failed password for root from 222.186.175.161 port 3952 ssh2 ...	2019-12-03 04:36:45
71.6.199.23	attack	12/02/2019-19:34:21.021049 71.6.199.23 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 71	2019-12-03 04:21:41
14.169.134.48	attackspambots	SpamReport	2019-12-03 04:24:38
117.254.155.21	attack	Unauthorized connection attempt from IP address 117.254.155.21 on Port 445(SMB)	2019-12-03 04:11:25
47.47.49.42	attackspambots	2019-12-02T09:51:35.463869ns547587 sshd\[2555\]: Invalid user ben from 47.47.49.42 port 46279 2019-12-02T09:51:35.470381ns547587 sshd\[2555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.47.49.42 2019-12-02T09:51:37.253045ns547587 sshd\[2555\]: Failed password for invalid user ben from 47.47.49.42 port 46279 ssh2 2019-12-02T09:59:14.541003ns547587 sshd\[5887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.47.49.42 user=root ...	2019-12-03 04:42:55
114.5.12.186	attack	Dec 2 18:57:17 server sshd\[17746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.5.12.186 user=root Dec 2 18:57:20 server sshd\[17746\]: Failed password for root from 114.5.12.186 port 44605 ssh2 Dec 2 19:10:54 server sshd\[21461\]: Invalid user dieudefeu from 114.5.12.186 Dec 2 19:10:54 server sshd\[21461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.5.12.186 Dec 2 19:10:56 server sshd\[21461\]: Failed password for invalid user dieudefeu from 114.5.12.186 port 53999 ssh2 ...	2019-12-03 04:42:33
1.238.117.37	attackspambots	SpamReport	2019-12-03 04:25:10
179.216.25.89	attackspam	2019-12-02T14:40:49.179157abusebot-2.cloudsearch.cf sshd\[27822\]: Invalid user astri from 179.216.25.89 port 46966	2019-12-03 04:07:30
223.93.188.234	attack	Exploit Attempt	2019-12-03 04:23:46
113.172.52.35	attack	SpamReport	2019-12-03 04:39:54
43.225.193.109	attackspambots	Unauthorized connection attempt from IP address 43.225.193.109 on Port 445(SMB)	2019-12-03 04:22:00
185.209.0.90	attack	12/02/2019-21:07:00.394808 185.209.0.90 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-12-03 04:19:07
82.200.156.82	attackspambots	Unauthorized connection attempt from IP address 82.200.156.82 on Port 445(SMB)	2019-12-03 04:37:22
221.195.189.144	attackspambots	Dec 2 15:40:23 sso sshd[4507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.195.189.144 Dec 2 15:40:25 sso sshd[4507]: Failed password for invalid user root333 from 221.195.189.144 port 39860 ssh2 ...	2019-12-03 04:33:52

Recently Reported IPs

197.221.2.51	197.221.45.251	197.221.27.170	197.221.2.27
197.225.111.114	197.225.125.2	197.221.50.110	197.228.196.196
197.227.34.191	197.227.3.75	197.228.198.11	197.229.2.176
197.229.152.82	197.228.199.35	197.230.172.109	197.230.227.210
197.230.43.59	197.231.202.156	197.230.55.9	197.232.100.150