81.22.45.59 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
81.22.45.71	attackspam	suspicious action Sat, 29 Feb 2020 11:28:01 -0300	2020-02-29 22:46:31
81.22.45.133	attack	2020-02-19T00:19:18.463055+01:00 lumpi kernel: [7357790.238387] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60679 PROTO=TCP SPT=50449 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2020-02-19 07:37:59
81.22.45.133	attack	2020-02-18T20:40:14.685548+01:00 lumpi kernel: [7344646.660249] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=12495 PROTO=TCP SPT=50449 DPT=7777 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2020-02-19 03:45:04
81.22.45.106	attackspam	02/17/2020-20:00:28.393431 81.22.45.106 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 83	2020-02-18 09:54:53
81.22.45.100	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 69 - port: 5322 proto: TCP cat: Misc Attack	2020-02-18 01:32:12
81.22.45.106	attackspam	Fail2Ban Ban Triggered	2020-02-17 05:29:15
81.22.45.100	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-11 01:03:51
81.22.45.182	attack	Feb 8 10:02:23 mail kernel: [562000.917378] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=56258 PROTO=TCP SPT=42357 DPT=16115 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2020-02-08 17:07:08
81.22.45.71	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 3389 proto: TCP cat: Misc Attack	2020-02-08 08:03:25
81.22.45.80	attack	3388/tcp 3377/tcp 3385/tcp... [2019-12-09/2020-02-07]121pkt,33pt.(tcp)	2020-02-08 08:02:22
81.22.45.83	attack	Unauthorized connection attempt from IP address 81.22.45.83 on Port 3389(RDP)	2020-02-07 22:43:48
81.22.45.182	attackspam	Feb 6 17:32:05 mail kernel: [416183.709828] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=30608 PROTO=TCP SPT=50336 DPT=10904 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2020-02-07 00:32:25
81.22.45.182	attackspambots	Feb 6 08:44:36 mail kernel: [384534.949997] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=55760 PROTO=TCP SPT=50336 DPT=10994 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2020-02-06 15:48:06
81.22.45.104	attackbotsspam	Unauthorised access (Feb 6) SRC=81.22.45.104 LEN=40 TTL=249 ID=41689 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 4) SRC=81.22.45.104 LEN=40 TTL=249 ID=63055 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (Feb 2) SRC=81.22.45.104 LEN=40 TTL=248 ID=40974 TCP DPT=3389 WINDOW=1024 SYN	2020-02-06 08:35:53
81.22.45.182	attackspambots	Feb 6 01:19:32 mail kernel: [357831.266667] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40878 PROTO=TCP SPT=50336 DPT=10137 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2020-02-06 08:29:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.22.45.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15449
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;81.22.45.59.			IN	A

;; AUTHORITY SECTION:
.			463	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 11:26:43 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 59.45.22.81.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 59.45.22.81.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
220.134.218.112	attackspam	$f2bV_matches	2020-02-05 04:16:13
213.32.22.239	attackbotsspam	Unauthorized connection attempt detected from IP address 213.32.22.239 to port 2220 [J]	2020-02-05 03:49:35
93.174.93.123	attackbotsspam	Feb 4 20:46:22 debian-2gb-nbg1-2 kernel: \[3104831.563118\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.93.123 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=37674 PROTO=TCP SPT=49993 DPT=14541 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-05 04:11:48
93.62.51.103	attack	Unauthorized connection attempt detected from IP address 93.62.51.103 to port 2220 [J]	2020-02-05 04:14:23
134.209.121.118	attackspambots	2019-03-15 13:12:30 1h4lhO-00010K-Id SMTP connection from bent.coldcaseforums.com $becauseof.mebgazete.icu$ \[134.209.121.118\]:36382 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-15 13:12:55 1h4lhn-00010n-Kl SMTP connection from bent.coldcaseforums.com $scam.mebgazete.icu$ \[134.209.121.118\]:48635 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-15 13:13:21 1h4liD-00011A-3Y SMTP connection from bent.coldcaseforums.com $underwear.mebgazete.icu$ \[134.209.121.118\]:40746 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-17 12:41:27 1h5UAR-0005yq-AE SMTP connection from bent.coldcaseforums.com $shiver.mebgazete.icu$ \[134.209.121.118\]:38053 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-17 12:41:27 1h5UAR-0005yr-AR SMTP connection from bent.coldcaseforums.com $metricton.mebgazete.icu$ \[134.209.121.118\]:46314 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-17 12:43:09 1h5UC5-000611-Nl SMTP connection from bent.coldcaseforums.com \(fang.mebgazete ...	2020-02-05 03:58:00
192.223.125.20	attackspam	Feb 4 14:48:07 grey postfix/smtpd\[27051\]: NOQUEUE: reject: RCPT from unknown\[192.223.125.20\]: 554 5.7.1 Service unavailable\; Client host \[192.223.125.20\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=192.223.125.20\; from=\ to=\ proto=ESMTP helo=\<\[192.223.125.20\]\> ...	2020-02-05 03:48:25
132.157.66.17	attackbotsspam	2019-09-23 14:53:02 1iCNps-0001wU-1U SMTP connection from $\[132.157.66.17\]$ \[132.157.66.17\]:59691 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-23 14:53:22 1iCNqC-0001x2-Eo SMTP connection from $\[132.157.66.17\]$ \[132.157.66.17\]:60373 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-23 14:53:31 1iCNqM-0001xC-Oz SMTP connection from $\[132.157.66.17\]$ \[132.157.66.17\]:60676 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-05 04:19:40
154.91.200.177	attack	Feb 4 09:07:53 hpm sshd\[8907\]: Invalid user ocitest from 154.91.200.177 Feb 4 09:07:53 hpm sshd\[8907\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.91.200.177 Feb 4 09:07:55 hpm sshd\[8907\]: Failed password for invalid user ocitest from 154.91.200.177 port 43842 ssh2 Feb 4 09:11:23 hpm sshd\[9433\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.91.200.177 user=root Feb 4 09:11:25 hpm sshd\[9433\]: Failed password for root from 154.91.200.177 port 45934 ssh2	2020-02-05 03:49:18
42.116.163.199	attackspambots	Feb 4 14:47:57 grey postfix/smtpd\[17116\]: NOQUEUE: reject: RCPT from unknown\[42.116.163.199\]: 554 5.7.1 Service unavailable\; Client host \[42.116.163.199\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?42.116.163.199\; from=\ to=\ proto=ESMTP helo=\<\[42.116.163.199\]\> ...	2020-02-05 04:05:49
89.248.168.87	attackbotsspam	Feb 4 18:30:33 debian-2gb-nbg1-2 kernel: \[3096682.986089\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.168.87 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=53390 PROTO=TCP SPT=45582 DPT=33899 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-05 03:44:50
222.186.30.35	attackspambots	Feb 4 20:41:19 MK-Soft-VM5 sshd[3432]: Failed password for root from 222.186.30.35 port 64612 ssh2 Feb 4 20:41:22 MK-Soft-VM5 sshd[3432]: Failed password for root from 222.186.30.35 port 64612 ssh2 ...	2020-02-05 03:41:50
196.189.89.240	attack	Feb 4 14:48:07 grey postfix/smtpd\[10806\]: NOQUEUE: reject: RCPT from unknown\[196.189.89.240\]: 554 5.7.1 Service unavailable\; Client host \[196.189.89.240\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=196.189.89.240\; from=\ to=\ proto=ESMTP helo=\<\[196.189.89.240\]\> ...	2020-02-05 03:53:35
5.180.137.201	attack	Feb 4 21:59:05 hosting sshd[7465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.180.137.201 user=root Feb 4 21:59:07 hosting sshd[7465]: Failed password for root from 5.180.137.201 port 32874 ssh2 Feb 4 21:59:08 hosting sshd[7468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.180.137.201 user=root Feb 4 21:59:09 hosting sshd[7468]: Failed password for root from 5.180.137.201 port 34680 ssh2 Feb 4 21:59:10 hosting sshd[7471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.180.137.201 user=root Feb 4 21:59:11 hosting sshd[7471]: Failed password for root from 5.180.137.201 port 36198 ssh2 ...	2020-02-05 03:38:36
182.61.41.203	attack	Feb 4 19:31:19 game-panel sshd[772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.41.203 Feb 4 19:31:21 game-panel sshd[772]: Failed password for invalid user sinus from 182.61.41.203 port 57102 ssh2 Feb 4 19:34:29 game-panel sshd[970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.41.203	2020-02-05 03:38:08
66.70.178.55	attack	Feb 4 18:34:21 ns382633 sshd\[7499\]: Invalid user legion from 66.70.178.55 port 44746 Feb 4 18:34:21 ns382633 sshd\[7499\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.178.55 Feb 4 18:34:22 ns382633 sshd\[7499\]: Failed password for invalid user legion from 66.70.178.55 port 44746 ssh2 Feb 4 18:42:07 ns382633 sshd\[9159\]: Invalid user nexus from 66.70.178.55 port 41292 Feb 4 18:42:07 ns382633 sshd\[9159\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.178.55	2020-02-05 04:09:18

Recently Reported IPs

185.10.68.13	185.10.68.98	185.10.68.205	185.10.68.78
93.174.89.205	185.10.68.18	165.227.94.118	167.94.146.231
93.174.92.5	93.174.92.28	93.174.92.60	93.174.92.91
93.174.89.177	93.174.89.238	93.174.89.251	92.118.160.34
85.62.188.107	85.62.188.23	93.174.93.174	185.10.68.127