Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Infolink LLC

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Nov 15 20:15:52 mc1 kernel: \[5131619.997108\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.49 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=26811 PROTO=TCP SPT=40338 DPT=5073 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 15 20:19:02 mc1 kernel: \[5131810.413869\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.49 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=735 PROTO=TCP SPT=40338 DPT=4341 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 15 20:20:41 mc1 kernel: \[5131908.873904\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.49 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=7923 PROTO=TCP SPT=40338 DPT=5766 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-11-16 03:31:15
attackbots
Nov 14 19:23:42 h2177944 kernel: \[6631328.716201\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.49 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24235 PROTO=TCP SPT=40338 DPT=4639 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 14 19:25:37 h2177944 kernel: \[6631443.508986\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.49 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=46680 PROTO=TCP SPT=40338 DPT=4407 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 14 19:26:39 h2177944 kernel: \[6631504.974121\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.49 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=61212 PROTO=TCP SPT=40338 DPT=5521 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 14 19:28:56 h2177944 kernel: \[6631642.012982\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.49 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=8918 PROTO=TCP SPT=40338 DPT=5406 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 14 19:35:06 h2177944 kernel: \[6632011.946286\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.49 DST=85.214.117.9 LEN=40 TOS
2019-11-15 02:41:19
attack
11/14/2019-09:03:04.662363 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-14 16:03:19
attackspambots
11/12/2019-19:15:01.093504 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-13 02:20:29
attack
11/12/2019-10:50:59.430697 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-12 17:59:17
attackspam
Nov 12 00:21:48 mc1 kernel: \[4800789.455377\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.49 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=25864 PROTO=TCP SPT=40338 DPT=5571 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 12 00:27:49 mc1 kernel: \[4801150.023798\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.49 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=39896 PROTO=TCP SPT=40338 DPT=5108 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov 12 00:29:41 mc1 kernel: \[4801262.552946\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.49 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26065 PROTO=TCP SPT=40338 DPT=4091 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-11-12 07:37:50
attack
11/10/2019-13:34:32.110075 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-11 02:52:33
attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 74 - port: 4594 proto: TCP cat: Misc Attack
2019-11-09 18:14:27
attack
11/01/2019-12:46:12.578645 81.22.45.49 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-11-02 00:53:39
attack
10/27/2019-20:24:01.537471 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-28 08:27:39
attackbotsspam
10/26/2019-19:31:04.310594 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-27 08:16:38
attackspambots
10/25/2019-19:13:44.447484 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-26 08:15:25
attack
10/23/2019-02:46:08.626230 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-23 15:59:42
attackspam
10/20/2019-08:26:59.353890 81.22.45.49 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-20 20:30:10
attackspambots
ET DROP Dshield Block Listed Source group 1 - port: 7387 proto: TCP cat: Misc Attack
2019-10-18 00:13:58
attackspambots
10/15/2019-21:09:30.110598 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-16 09:26:16
attack
10/12/2019-13:32:26.978362 81.22.45.49 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-13 03:05:17
attackspambots
10/11/2019-06:30:46.503553 81.22.45.49 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-11 18:35:16
attackspam
10/09/2019-07:41:44.935260 81.22.45.49 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-10-09 20:00:43
attack
Port scan: Attack repeated for 24 hours
2019-10-08 15:50:49
Comments on same subnet:
IP Type Details Datetime
81.22.45.71 attackspam
suspicious action Sat, 29 Feb 2020 11:28:01 -0300
2020-02-29 22:46:31
81.22.45.133 attack
2020-02-19T00:19:18.463055+01:00 lumpi kernel: [7357790.238387] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60679 PROTO=TCP SPT=50449 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-19 07:37:59
81.22.45.133 attack
2020-02-18T20:40:14.685548+01:00 lumpi kernel: [7344646.660249] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=12495 PROTO=TCP SPT=50449 DPT=7777 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-19 03:45:04
81.22.45.106 attackspam
02/17/2020-20:00:28.393431 81.22.45.106 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 83
2020-02-18 09:54:53
81.22.45.100 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 69 - port: 5322 proto: TCP cat: Misc Attack
2020-02-18 01:32:12
81.22.45.106 attackspam
Fail2Ban Ban Triggered
2020-02-17 05:29:15
81.22.45.100 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-11 01:03:51
81.22.45.182 attack
Feb  8 10:02:23 mail kernel: [562000.917378] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=56258 PROTO=TCP SPT=42357 DPT=16115 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-08 17:07:08
81.22.45.71 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 3389 proto: TCP cat: Misc Attack
2020-02-08 08:03:25
81.22.45.80 attack
3388/tcp 3377/tcp 3385/tcp...
[2019-12-09/2020-02-07]121pkt,33pt.(tcp)
2020-02-08 08:02:22
81.22.45.83 attack
Unauthorized connection attempt from IP address 81.22.45.83 on Port 3389(RDP)
2020-02-07 22:43:48
81.22.45.182 attackspam
Feb  6 17:32:05 mail kernel: [416183.709828] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=30608 PROTO=TCP SPT=50336 DPT=10904 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-07 00:32:25
81.22.45.182 attackspambots
Feb  6 08:44:36 mail kernel: [384534.949997] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=55760 PROTO=TCP SPT=50336 DPT=10994 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-06 15:48:06
81.22.45.104 attackbotsspam
Unauthorised access (Feb  6) SRC=81.22.45.104 LEN=40 TTL=249 ID=41689 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb  4) SRC=81.22.45.104 LEN=40 TTL=249 ID=63055 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb  2) SRC=81.22.45.104 LEN=40 TTL=248 ID=40974 TCP DPT=3389 WINDOW=1024 SYN
2020-02-06 08:35:53
81.22.45.182 attackspambots
Feb  6 01:19:32 mail kernel: [357831.266667] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40878 PROTO=TCP SPT=50336 DPT=10137 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-06 08:29:58
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.22.45.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34995
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.22.45.49.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061002 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 11 07:53:52 CST 2019
;; MSG SIZE  rcvd: 115

Host info
Host 49.45.22.81.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 49.45.22.81.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
218.92.0.223 attack
Aug  7 22:06:26 ajax sshd[6968]: Failed password for root from 218.92.0.223 port 10678 ssh2
Aug  7 22:06:31 ajax sshd[6968]: Failed password for root from 218.92.0.223 port 10678 ssh2
2020-08-08 05:07:57
192.169.200.135 attackbotsspam
Attempt to hack Wordpress Login, XMLRPC or other login
2020-08-08 05:31:36
45.129.33.151 attackbots
slow and persistent scanner
2020-08-08 05:25:00
106.12.132.224 attackbots
Aug  7 17:14:02 ny01 sshd[23643]: Failed password for root from 106.12.132.224 port 35184 ssh2
Aug  7 17:17:01 ny01 sshd[24042]: Failed password for root from 106.12.132.224 port 51424 ssh2
2020-08-08 05:39:45
122.51.246.233 attack
Brute-force attempt banned
2020-08-08 05:36:01
85.209.0.102 attackbots
Aug  7 22:58:29 icinga sshd[41028]: Failed password for root from 85.209.0.102 port 47252 ssh2
Aug  7 22:58:31 icinga sshd[41029]: Failed password for root from 85.209.0.102 port 47246 ssh2
...
2020-08-08 05:13:38
103.127.67.11 attackbotsspam
Port Scan
...
2020-08-08 05:21:40
103.81.86.49 attack
Aug  7 23:10:23 mout sshd[16347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.81.86.49  user=root
Aug  7 23:10:26 mout sshd[16347]: Failed password for root from 103.81.86.49 port 11149 ssh2
2020-08-08 05:19:27
185.173.35.41 attackspam
port
2020-08-08 05:14:37
61.177.124.118 attackbotsspam
Aug  5 00:50:29 our-server-hostname sshd[23145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.124.118  user=r.r
Aug  5 00:50:31 our-server-hostname sshd[23145]: Failed password for r.r from 61.177.124.118 port 2140 ssh2
Aug  5 01:06:51 our-server-hostname sshd[26890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.124.118  user=r.r
Aug  5 01:06:54 our-server-hostname sshd[26890]: Failed password for r.r from 61.177.124.118 port 2141 ssh2
Aug  5 01:11:03 our-server-hostname sshd[27845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.124.118  user=r.r
Aug  5 01:11:04 our-server-hostname sshd[27845]: Failed password for r.r from 61.177.124.118 port 2142 ssh2
Aug  5 01:14:54 our-server-hostname sshd[28812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.124.118  user=r.r
Aug  5 01:14........
-------------------------------
2020-08-08 05:11:05
80.82.64.210 attackspam
Aug  7 23:14:49 debian-2gb-nbg1-2 kernel: \[19093338.301310\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.64.210 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=38023 PROTO=TCP SPT=56962 DPT=1722 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-08 05:19:46
45.145.66.120 attackspam
firewall-block, port(s): 3505/tcp, 3601/tcp, 3623/tcp
2020-08-08 05:29:32
113.57.109.73 attackbots
detected by Fail2Ban
2020-08-08 05:05:17
139.255.35.181 attack
Aug  7 22:28:15 rancher-0 sshd[890651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.255.35.181  user=root
Aug  7 22:28:17 rancher-0 sshd[890651]: Failed password for root from 139.255.35.181 port 54868 ssh2
...
2020-08-08 05:03:46
49.235.93.192 attackspam
Aug  7 23:19:49 v22019038103785759 sshd\[1536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.93.192  user=root
Aug  7 23:19:50 v22019038103785759 sshd\[1536\]: Failed password for root from 49.235.93.192 port 41428 ssh2
Aug  7 23:23:45 v22019038103785759 sshd\[1719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.93.192  user=root
Aug  7 23:23:47 v22019038103785759 sshd\[1719\]: Failed password for root from 49.235.93.192 port 46752 ssh2
Aug  7 23:27:56 v22019038103785759 sshd\[1861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.93.192  user=root
...
2020-08-08 05:33:09

Recently Reported IPs

123.1.151.101 37.252.79.192 54.37.136.183 124.6.14.65
113.161.64.106 202.119.101.211 185.36.81.242 94.225.209.201
117.20.117.174 109.198.9.194 45.66.9.92 203.156.178.8
164.132.122.244 209.17.96.162 65.141.148.124 115.174.227.60
82.193.227.99 71.16.217.158 31.172.117.108 111.33.20.52