Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russia

Internet Service Provider: Infolink LLC

Hostname: unknown

Organization: OOO Network of data-centers Selectel

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
ET DROP Dshield Block Listed Source group 1 - port: 3402 proto: TCP cat: Misc Attack
2019-11-21 00:14:35
attackspambots
81.22.45.162 was recorded 10 times by 8 hosts attempting to connect to the following ports: 3363,3361,3364,3366. Incident counter (4h, 24h, all-time): 10, 31, 221
2019-11-12 14:15:42
attackspambots
81.22.45.162 was recorded 15 times by 10 hosts attempting to connect to the following ports: 3358,3359,3356,3357,3360. Incident counter (4h, 24h, all-time): 15, 55, 151
2019-11-11 02:03:11
Comments on same subnet:
IP Type Details Datetime
81.22.45.71 attackspam
suspicious action Sat, 29 Feb 2020 11:28:01 -0300
2020-02-29 22:46:31
81.22.45.133 attack
2020-02-19T00:19:18.463055+01:00 lumpi kernel: [7357790.238387] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60679 PROTO=TCP SPT=50449 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-19 07:37:59
81.22.45.133 attack
2020-02-18T20:40:14.685548+01:00 lumpi kernel: [7344646.660249] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=12495 PROTO=TCP SPT=50449 DPT=7777 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-19 03:45:04
81.22.45.106 attackspam
02/17/2020-20:00:28.393431 81.22.45.106 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 83
2020-02-18 09:54:53
81.22.45.100 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 69 - port: 5322 proto: TCP cat: Misc Attack
2020-02-18 01:32:12
81.22.45.106 attackspam
Fail2Ban Ban Triggered
2020-02-17 05:29:15
81.22.45.100 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-11 01:03:51
81.22.45.182 attack
Feb  8 10:02:23 mail kernel: [562000.917378] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=56258 PROTO=TCP SPT=42357 DPT=16115 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-08 17:07:08
81.22.45.71 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 3389 proto: TCP cat: Misc Attack
2020-02-08 08:03:25
81.22.45.80 attack
3388/tcp 3377/tcp 3385/tcp...
[2019-12-09/2020-02-07]121pkt,33pt.(tcp)
2020-02-08 08:02:22
81.22.45.83 attack
Unauthorized connection attempt from IP address 81.22.45.83 on Port 3389(RDP)
2020-02-07 22:43:48
81.22.45.182 attackspam
Feb  6 17:32:05 mail kernel: [416183.709828] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=30608 PROTO=TCP SPT=50336 DPT=10904 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-07 00:32:25
81.22.45.182 attackspambots
Feb  6 08:44:36 mail kernel: [384534.949997] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=55760 PROTO=TCP SPT=50336 DPT=10994 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-06 15:48:06
81.22.45.104 attackbotsspam
Unauthorised access (Feb  6) SRC=81.22.45.104 LEN=40 TTL=249 ID=41689 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb  4) SRC=81.22.45.104 LEN=40 TTL=249 ID=63055 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb  2) SRC=81.22.45.104 LEN=40 TTL=248 ID=40974 TCP DPT=3389 WINDOW=1024 SYN
2020-02-06 08:35:53
81.22.45.182 attackspambots
Feb  6 01:19:32 mail kernel: [357831.266667] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40878 PROTO=TCP SPT=50336 DPT=10137 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-06 08:29:58
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.22.45.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63382
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.22.45.162.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 13 10:22:27 +08 2019
;; MSG SIZE  rcvd: 116

Host info
Host 162.45.22.81.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 162.45.22.81.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
106.13.54.106 attack
Jul  3 22:02:58 vmd17057 sshd[25933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.54.106 
Jul  3 22:03:00 vmd17057 sshd[25933]: Failed password for invalid user ftpuser from 106.13.54.106 port 24611 ssh2
...
2020-07-04 04:55:44
138.197.189.136 attackbotsspam
Jul  3 20:57:11 django-0 sshd[10529]: Invalid user abcdef from 138.197.189.136
...
2020-07-04 05:04:46
45.55.231.94 attack
Jul  3 01:44:01 main sshd[6861]: Failed password for invalid user ip from 45.55.231.94 port 52340 ssh2
2020-07-04 04:51:31
76.127.17.138 attackbots
Jul  3 12:37:40 main sshd[17464]: Failed password for invalid user pi from 76.127.17.138 port 59822 ssh2
Jul  3 12:37:41 main sshd[17466]: Failed password for invalid user pi from 76.127.17.138 port 59823 ssh2
2020-07-04 04:36:02
138.197.217.164 attack
$f2bV_matches
2020-07-04 04:49:27
138.197.180.102 attack
Invalid user srm from 138.197.180.102 port 49568
2020-07-04 05:07:59
202.29.14.43 attackbotsspam
Automatic report - XMLRPC Attack
2020-07-04 04:53:49
180.76.105.81 attackbotsspam
$f2bV_matches
2020-07-04 04:47:03
73.116.58.188 attackbotsspam
SSH/22 MH Probe, BF, Hack -
2020-07-04 04:50:44
120.92.11.9 attack
Brute force attempt
2020-07-04 04:55:25
128.116.169.210 attack
Automatic report - Port Scan Attack
2020-07-04 04:45:54
194.143.250.145 attack
DATE:2020-07-03 22:03:02, IP:194.143.250.145, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-07-04 04:37:06
84.167.151.25 attackspam
SSH/22 MH Probe, BF, Hack -
2020-07-04 04:41:16
111.229.45.38 attackbotsspam
2020-07-03T15:28:05.514956ts3.arvenenaske.de sshd[21105]: Invalid user atg from 111.229.45.38 port 58622
2020-07-03T15:28:05.522459ts3.arvenenaske.de sshd[21105]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.45.38 user=atg
2020-07-03T15:28:05.523707ts3.arvenenaske.de sshd[21105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.45.38
2020-07-03T15:28:05.514956ts3.arvenenaske.de sshd[21105]: Invalid user atg from 111.229.45.38 port 58622
2020-07-03T15:28:07.341553ts3.arvenenaske.de sshd[21105]: Failed password for invalid user atg from 111.229.45.38 port 58622 ssh2
2020-07-03T15:30:32.038572ts3.arvenenaske.de sshd[21108]: Invalid user otk from 111.229.45.38 port 49588
2020-07-03T15:30:32.049151ts3.arvenenaske.de sshd[21108]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.45.38 user=otk
2020-07-03T15:30:32.050387ts3.arvenenaske.de........
------------------------------
2020-07-04 04:48:08
138.197.221.114 attack
$f2bV_matches
2020-07-04 04:47:46

Recently Reported IPs

198.108.67.51 45.77.77.79 27.131.209.242 198.211.107.151
188.166.58.40 216.245.196.222 188.165.250.228 203.81.71.71
176.98.42.67 64.62.194.19 222.187.239.133 123.18.101.21
113.87.118.195 82.85.143.181 115.47.160.22 91.23.37.68
178.128.202.35 177.138.111.155 93.157.63.7 41.215.60.126