Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russia

Internet Service Provider: Infolink LLC

Hostname: unknown

Organization: OOO Network of data-centers Selectel

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt from IP address 81.22.45.70 on Port 3389(RDP)
2020-01-22 07:09:32
attack
Jan  7 17:24:18 debian-2gb-nbg1-2 kernel: \[673576.053239\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.70 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=15679 PROTO=TCP SPT=47781 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-08 05:00:51
attack
3389/tcp 3389/tcp 3389/tcp...
[2019-10-25/12-23]89pkt,1pt.(tcp)
2019-12-24 04:39:30
attackspambots
TCP 3389 (RDP)
2019-12-16 23:24:36
attack
2019-12-11T08:06:37.798335+01:00 lumpi kernel: [1337942.257349] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.70 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=14091 PROTO=TCP SPT=55633 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-12-11 18:05:12
attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-07 04:05:52
attackbotsspam
Portscan or hack attempt detected by psad/fwsnort
2019-10-28 07:11:15
attack
ET CINS Active Threat Intelligence Poor Reputation IP group 74 - port: 3389 proto: TCP cat: Misc Attack
2019-10-26 03:38:35
attackbotsspam
Port scan
2019-09-29 23:00:07
attackspam
Aug 30 21:26:58 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.70 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=44735 PROTO=TCP SPT=52728 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-08-31 03:49:11
attack
Aug 15 01:30:01 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.70 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=41818 PROTO=TCP SPT=51532 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-08-15 12:21:00
Comments on same subnet:
IP Type Details Datetime
81.22.45.71 attackspam
suspicious action Sat, 29 Feb 2020 11:28:01 -0300
2020-02-29 22:46:31
81.22.45.133 attack
2020-02-19T00:19:18.463055+01:00 lumpi kernel: [7357790.238387] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60679 PROTO=TCP SPT=50449 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-19 07:37:59
81.22.45.133 attack
2020-02-18T20:40:14.685548+01:00 lumpi kernel: [7344646.660249] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=12495 PROTO=TCP SPT=50449 DPT=7777 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-19 03:45:04
81.22.45.106 attackspam
02/17/2020-20:00:28.393431 81.22.45.106 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 83
2020-02-18 09:54:53
81.22.45.100 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 69 - port: 5322 proto: TCP cat: Misc Attack
2020-02-18 01:32:12
81.22.45.106 attackspam
Fail2Ban Ban Triggered
2020-02-17 05:29:15
81.22.45.100 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-11 01:03:51
81.22.45.182 attack
Feb  8 10:02:23 mail kernel: [562000.917378] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=56258 PROTO=TCP SPT=42357 DPT=16115 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-08 17:07:08
81.22.45.71 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 3389 proto: TCP cat: Misc Attack
2020-02-08 08:03:25
81.22.45.80 attack
3388/tcp 3377/tcp 3385/tcp...
[2019-12-09/2020-02-07]121pkt,33pt.(tcp)
2020-02-08 08:02:22
81.22.45.83 attack
Unauthorized connection attempt from IP address 81.22.45.83 on Port 3389(RDP)
2020-02-07 22:43:48
81.22.45.182 attackspam
Feb  6 17:32:05 mail kernel: [416183.709828] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=30608 PROTO=TCP SPT=50336 DPT=10904 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-07 00:32:25
81.22.45.182 attackspambots
Feb  6 08:44:36 mail kernel: [384534.949997] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=55760 PROTO=TCP SPT=50336 DPT=10994 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-06 15:48:06
81.22.45.104 attackbotsspam
Unauthorised access (Feb  6) SRC=81.22.45.104 LEN=40 TTL=249 ID=41689 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb  4) SRC=81.22.45.104 LEN=40 TTL=249 ID=63055 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb  2) SRC=81.22.45.104 LEN=40 TTL=248 ID=40974 TCP DPT=3389 WINDOW=1024 SYN
2020-02-06 08:35:53
81.22.45.182 attackspambots
Feb  6 01:19:32 mail kernel: [357831.266667] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40878 PROTO=TCP SPT=50336 DPT=10137 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-06 08:29:58
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.22.45.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3836
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.22.45.70.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 15 03:22:15 CST 2019
;; MSG SIZE  rcvd: 115

Host info
Host 70.45.22.81.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 70.45.22.81.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
37.49.231.104 attack
10/03/2019-11:51:13.687319 37.49.231.104 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 35
2019-10-03 20:16:08
123.206.186.69 attackspam
ICMP MP Probe, Scan -
2019-10-03 20:35:38
131.0.245.3 attackbots
2019-08-25 23:21:38,826 fail2ban.actions        [878]: NOTICE  [sshd] Ban 131.0.245.3
2019-08-26 02:34:46,437 fail2ban.actions        [878]: NOTICE  [sshd] Ban 131.0.245.3
2019-08-26 06:14:28,543 fail2ban.actions        [878]: NOTICE  [sshd] Ban 131.0.245.3
...
2019-10-03 20:13:41
131.221.97.206 attackspambots
2019-08-31 16:03:37,477 fail2ban.actions        [804]: NOTICE  [sshd] Ban 131.221.97.206
2019-08-31 19:11:04,136 fail2ban.actions        [804]: NOTICE  [sshd] Ban 131.221.97.206
2019-08-31 22:40:16,926 fail2ban.actions        [804]: NOTICE  [sshd] Ban 131.221.97.206
...
2019-10-03 20:08:22
103.85.229.203 attackspambots
Automatic report - Port Scan Attack
2019-10-03 20:14:08
150.255.120.66 attackspambots
Unauthorised access (Oct  3) SRC=150.255.120.66 LEN=40 TTL=48 ID=49757 TCP DPT=8080 WINDOW=14680 SYN 
Unauthorised access (Oct  2) SRC=150.255.120.66 LEN=40 TTL=48 ID=50811 TCP DPT=8080 WINDOW=14680 SYN 
Unauthorised access (Oct  2) SRC=150.255.120.66 LEN=40 TTL=48 ID=15158 TCP DPT=8080 WINDOW=23352 SYN 
Unauthorised access (Oct  1) SRC=150.255.120.66 LEN=40 TTL=48 ID=23113 TCP DPT=8080 WINDOW=23352 SYN
2019-10-03 20:38:45
92.124.128.100 attackbots
Attempt To login To email server On IMAP service On 03-10-2019 04:50:33.
2019-10-03 20:25:15
51.255.46.83 attack
Oct  2 22:26:45 hanapaa sshd\[21252\]: Invalid user anders from 51.255.46.83
Oct  2 22:26:45 hanapaa sshd\[21252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.ip-51-255-46.eu
Oct  2 22:26:47 hanapaa sshd\[21252\]: Failed password for invalid user anders from 51.255.46.83 port 50414 ssh2
Oct  2 22:30:41 hanapaa sshd\[21604\]: Invalid user 123 from 51.255.46.83
Oct  2 22:30:41 hanapaa sshd\[21604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.ip-51-255-46.eu
2019-10-03 20:21:09
123.125.44.253 attack
ICMP MP Probe, Scan -
2019-10-03 20:42:02
35.178.16.1 attack
35.178.16.1 - - [03/Oct/2019:12:29:59 +0000] "GET /wordpress/wp-login.php HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
2019-10-03 20:42:54
14.142.43.18 attack
Unauthorized connection attempt from IP address 14.142.43.18 on Port 445(SMB)
2019-10-03 20:34:41
211.104.171.239 attack
Oct  3 14:29:48 vps01 sshd[12298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.104.171.239
Oct  3 14:29:49 vps01 sshd[12298]: Failed password for invalid user team from 211.104.171.239 port 48378 ssh2
2019-10-03 20:50:38
79.137.84.144 attackspam
Invalid user sftp from 79.137.84.144 port 52242
2019-10-03 20:10:49
37.59.8.84 attack
WordPress wp-login brute force :: 37.59.8.84 0.136 BYPASS [03/Oct/2019:17:11:56  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-10-03 20:23:30
5.135.244.114 attackbotsspam
$f2bV_matches
2019-10-03 20:14:31

Recently Reported IPs

2.205.8.177 195.251.225.91 180.117.119.11 118.34.188.120
93.181.85.69 30.33.109.107 93.195.160.192 85.204.130.48
117.31.84.65 86.143.45.8 187.1.30.181 249.223.207.114
185.218.152.17 238.115.68.114 58.202.13.162 91.218.174.2
200.19.195.59 209.175.8.108 64.90.72.210 222.133.252.228