Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Zimbabwe

Internet Service Provider: Telone Pvt Ltd

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
firewall-block, port(s): 1433/tcp
2019-11-20 00:40:13
Comments on same subnet:
IP Type Details Datetime
197.221.254.22 attack
Port Scan detected!
...
2020-07-14 08:05:45
197.221.254.235 attack
Logged onto my email
2020-07-05 03:55:10
197.221.254.235 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-29 06:30:57
197.221.254.79 attack
Fail2Ban - HTTP Auth Bruteforce Attempt
2020-05-12 05:24:46
197.221.254.176 attackbotsspam
2019-03-12 20:37:49 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25129 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-12 20:38:40 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25137 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-12 20:39:11 H=\(16.176.telone.co.zw\) \[197.221.254.176\]:25138 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...
2020-01-30 04:45:43
197.221.254.63 attack
Unauthorized connection attempt detected from IP address 197.221.254.63 to port 445
2019-12-11 21:32:25
197.221.254.96 attack
2019-11-20 14:13:49 H=(16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)
2019-11-20 14:13:49 unexpected disconnection while reading SMTP command from (16.96.telone.co.zw) [197.221.254.96]:6050 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-11-20 15:33:34 H=(16.96.telone.co.zw) [197.221.254.96]:6523 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.96)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.96
2019-11-21 00:42:21
197.221.254.6 attackspambots
2019-11-20 15:12:24 H=(16.6.telone.co.zw) [197.221.254.6]:31578 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.6)
2019-11-20 15:12:25 unexpected disconnection while reading SMTP command from (16.6.telone.co.zw) [197.221.254.6]:31578 I=[10.100.18.25]:25 (error: Connection reset by peer)
2019-11-20 15:29:34 H=(16.6.telone.co.zw) [197.221.254.6]:31622 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=197.221.254.6)

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.6
2019-11-20 22:54:01
197.221.254.172 attackspambots
Hello!

As you may have noticed, I sent you an email from your account.
This means that I have full access to your device.

I've been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.

If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.

I also have access to all your contacts and all your correspondence.

Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.

I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks...
2019-10-13 06:30:27
197.221.254.157 attack
Spam
2019-08-14 23:36:14
197.221.254.2 attackspambots
Lines containing failures of 197.221.254.2
Jul 13 16:57:36 mellenthin postfix/smtpd[5323]: connect from unknown[197.221.254.2]
Jul x@x
Jul 13 16:57:45 mellenthin postfix/smtpd[5323]: lost connection after DATA from unknown[197.221.254.2]
Jul 13 16:57:45 mellenthin postfix/smtpd[5323]: disconnect from unknown[197.221.254.2] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.221.254.2
2019-07-14 08:02:14
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.221.254.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13640
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;197.221.254.40.			IN	A

;; AUTHORITY SECTION:
.			454	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111900 1800 900 604800 86400

;; Query time: 879 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 20 00:40:07 CST 2019
;; MSG SIZE  rcvd: 118
Host info
40.254.221.197.in-addr.arpa domain name pointer 16.40.telone.co.zw.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
40.254.221.197.in-addr.arpa	name = 16.40.telone.co.zw.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
185.106.29.204 attackbotsspam
bruteforce detected
2020-08-18 04:00:16
125.214.249.53 attackbots
Unauthorized connection attempt from IP address 125.214.249.53 on Port 445(SMB)
2020-08-18 03:49:31
34.93.237.166 attackspambots
Aug 17 20:07:15 dhoomketu sshd[2429761]: Invalid user flex from 34.93.237.166 port 41944
Aug 17 20:07:15 dhoomketu sshd[2429761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.93.237.166 
Aug 17 20:07:15 dhoomketu sshd[2429761]: Invalid user flex from 34.93.237.166 port 41944
Aug 17 20:07:17 dhoomketu sshd[2429761]: Failed password for invalid user flex from 34.93.237.166 port 41944 ssh2
Aug 17 20:11:47 dhoomketu sshd[2429868]: Invalid user musikbot from 34.93.237.166 port 45434
...
2020-08-18 04:20:08
113.31.119.77 attack
Aug 17 19:31:08 h2427292 sshd\[7466\]: Invalid user etherpad from 113.31.119.77
Aug 17 19:31:08 h2427292 sshd\[7466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.119.77 
Aug 17 19:31:10 h2427292 sshd\[7466\]: Failed password for invalid user etherpad from 113.31.119.77 port 58428 ssh2
...
2020-08-18 04:02:33
202.143.111.42 attack
Aug 17 14:55:11 scw-focused-cartwright sshd[22560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.143.111.42
Aug 17 14:55:13 scw-focused-cartwright sshd[22560]: Failed password for invalid user bitrix from 202.143.111.42 port 50178 ssh2
2020-08-18 04:08:53
185.156.73.41 attackbots
firewall-block, port(s): 3339/tcp
2020-08-18 04:09:14
168.194.15.138 attackspambots
Aug 17 23:36:16 webhost01 sshd[7278]: Failed password for root from 168.194.15.138 port 60522 ssh2
...
2020-08-18 03:59:32
113.183.124.188 attackspam
20/8/17@08:00:14: FAIL: Alarm-Network address from=113.183.124.188
...
2020-08-18 04:13:32
109.116.41.170 attackspam
Bruteforce detected by fail2ban
2020-08-18 04:18:25
193.27.228.161 attackbotsspam
[Tue Aug 04 00:14:57 2020] - DDoS Attack From IP: 193.27.228.161 Port: 62000
2020-08-18 04:01:06
191.251.172.121 attackspam
Unauthorized connection attempt from IP address 191.251.172.121 on Port 445(SMB)
2020-08-18 03:48:55
200.73.128.181 attackspam
Aug 17 18:02:57 marvibiene sshd[8503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.73.128.181 
Aug 17 18:02:59 marvibiene sshd[8503]: Failed password for invalid user xrdp from 200.73.128.181 port 47540 ssh2
2020-08-18 04:06:43
134.209.155.186 attack
20 attempts against mh-ssh on cloud
2020-08-18 04:17:47
117.18.12.134 attackspambots
HP Universal CMDB Default Credentials Security Bypass Vulnerability
2020-08-18 03:54:27
89.248.160.150 attackspambots
 UDP 89.248.160.150:55669 -> port 3088, len 57
2020-08-18 04:24:58

Recently Reported IPs

119.110.83.60 185.32.122.235 101.108.190.56 60.190.125.54
1.179.234.94 59.94.250.89 3.80.45.242 46.242.61.12
42.58.178.25 180.246.6.165 103.207.0.150 146.0.77.83
125.27.212.96 67.205.153.94 183.81.120.182 200.93.101.176
46.221.3.98 123.19.164.178 156.204.122.40 189.91.238.221