必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Infolink LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
3388/tcp 3377/tcp 3385/tcp...
[2019-12-09/2020-02-07]121pkt,33pt.(tcp)
2020-02-08 08:02:22
attackbotsspam
2019-12-27T16:53:31.738064+01:00 lumpi kernel: [2751929.625462] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.80 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=24105 PROTO=TCP SPT=55861 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-12-28 00:02:36
attackbotsspam
3389/tcp 3389/tcp 3389/tcp...
[2019-10-25/12-22]98pkt,1pt.(tcp)
2019-12-24 04:26:27
attack
TCP 3389 (RDP)
2019-12-16 23:23:45
attackspam
Dec 11 07:59:36 debian-2gb-nbg1-2 kernel: \[24329121.406117\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.80 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=24401 PROTO=TCP SPT=55629 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-11 15:46:10
attack
proto=tcp  .  spt=49395  .  dpt=3389  .  src=81.22.45.80  .  dst=xx.xx.4.1  .     (Found on   Alienvault Nov 21)     (45)
2019-11-22 09:24:51
attack
Unauthorised access (Nov 20) SRC=81.22.45.80 LEN=40 TTL=248 ID=36813 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Nov 17) SRC=81.22.45.80 LEN=40 TTL=248 ID=29204 TCP DPT=3389 WINDOW=1024 SYN
2019-11-20 08:52:44
attack
firewall-block, port(s): 3389/tcp
2019-11-07 04:02:13
attackbotsspam
2019-11-05T23:38:28.281010+01:00 lumpi kernel: [2815893.079627] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.80 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=7297 PROTO=TCP SPT=57470 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-11-06 07:19:05
attack
ET CINS Active Threat Intelligence Poor Reputation IP group 76 - port: 3389 proto: TCP cat: Misc Attack
2019-10-28 07:33:17
attackbots
ET DROP Dshield Block Listed Source group 1 - port: 3389 proto: TCP cat: Misc Attack
2019-10-26 07:32:21
attackspam
firewall-block, port(s): 3389/tcp
2019-10-15 04:35:23
attackspambots
proto=tcp  .  spt=57489  .  dpt=3389  .  src=81.22.45.80  .  dst=xx.xx.4.1  .     (CINS badguys  Sep 24)     (775)
2019-09-25 07:11:43
attack
Sep 22 23:32:22 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.80 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54848 PROTO=TCP SPT=59465 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-09-23 07:26:59
attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-09-22 09:22:26
attackspambots
Aug  5 02:47:09 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.80 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=57794 PROTO=TCP SPT=48217 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-08-05 13:47:06
相同子网IP讨论:
IP 类型 评论内容 时间
81.22.45.71 attackspam
suspicious action Sat, 29 Feb 2020 11:28:01 -0300
2020-02-29 22:46:31
81.22.45.133 attack
2020-02-19T00:19:18.463055+01:00 lumpi kernel: [7357790.238387] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=60679 PROTO=TCP SPT=50449 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-19 07:37:59
81.22.45.133 attack
2020-02-18T20:40:14.685548+01:00 lumpi kernel: [7344646.660249] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.133 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=12495 PROTO=TCP SPT=50449 DPT=7777 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-19 03:45:04
81.22.45.106 attackspam
02/17/2020-20:00:28.393431 81.22.45.106 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 83
2020-02-18 09:54:53
81.22.45.100 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 69 - port: 5322 proto: TCP cat: Misc Attack
2020-02-18 01:32:12
81.22.45.106 attackspam
Fail2Ban Ban Triggered
2020-02-17 05:29:15
81.22.45.100 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-11 01:03:51
81.22.45.182 attack
Feb  8 10:02:23 mail kernel: [562000.917378] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=56258 PROTO=TCP SPT=42357 DPT=16115 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-08 17:07:08
81.22.45.71 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 3389 proto: TCP cat: Misc Attack
2020-02-08 08:03:25
81.22.45.83 attack
Unauthorized connection attempt from IP address 81.22.45.83 on Port 3389(RDP)
2020-02-07 22:43:48
81.22.45.182 attackspam
Feb  6 17:32:05 mail kernel: [416183.709828] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=30608 PROTO=TCP SPT=50336 DPT=10904 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-07 00:32:25
81.22.45.182 attackspambots
Feb  6 08:44:36 mail kernel: [384534.949997] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=55760 PROTO=TCP SPT=50336 DPT=10994 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-06 15:48:06
81.22.45.104 attackbotsspam
Unauthorised access (Feb  6) SRC=81.22.45.104 LEN=40 TTL=249 ID=41689 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb  4) SRC=81.22.45.104 LEN=40 TTL=249 ID=63055 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Feb  2) SRC=81.22.45.104 LEN=40 TTL=248 ID=40974 TCP DPT=3389 WINDOW=1024 SYN
2020-02-06 08:35:53
81.22.45.182 attackspambots
Feb  6 01:19:32 mail kernel: [357831.266667] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=81.22.45.182 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40878 PROTO=TCP SPT=50336 DPT=10137 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-06 08:29:58
81.22.45.85 attackbots
2020-02-05T16:27:24.910370+01:00 lumpi kernel: [6206298.189738] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.85 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=19368 PROTO=TCP SPT=47987 DPT=43389 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-02-05 23:28:35
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.22.45.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5774
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.22.45.80.			IN	A

;; AUTHORITY SECTION:
.			1108	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080501 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 05 13:46:56 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
Host 80.45.22.81.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 80.45.22.81.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
89.248.160.178 attack
 TCP (SYN) 89.248.160.178:50056 -> port 7563, len 44
2020-08-01 01:07:59
45.95.168.154 attackspam
2020-07-31T16:35:17.006535dmca.cloudsearch.cf sshd[29117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.154  user=root
2020-07-31T16:35:19.376895dmca.cloudsearch.cf sshd[29117]: Failed password for root from 45.95.168.154 port 58462 ssh2
2020-07-31T16:35:33.896155dmca.cloudsearch.cf sshd[29122]: Invalid user oracle from 45.95.168.154 port 37870
2020-07-31T16:35:33.901713dmca.cloudsearch.cf sshd[29122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.154
2020-07-31T16:35:33.896155dmca.cloudsearch.cf sshd[29122]: Invalid user oracle from 45.95.168.154 port 37870
2020-07-31T16:35:35.800504dmca.cloudsearch.cf sshd[29122]: Failed password for invalid user oracle from 45.95.168.154 port 37870 ssh2
2020-07-31T16:35:49.876410dmca.cloudsearch.cf sshd[29128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.154  user=root
2020-07-31T16:35:52.3068
...
2020-08-01 00:40:09
180.101.248.148 attackspam
Brute-force attempt banned
2020-08-01 01:14:23
165.22.104.67 attackbotsspam
2020-07-31T15:00:10.656199lavrinenko.info sshd[17269]: Failed password for root from 165.22.104.67 port 44196 ssh2
2020-07-31T15:02:35.222672lavrinenko.info sshd[17377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.104.67  user=root
2020-07-31T15:02:37.042174lavrinenko.info sshd[17377]: Failed password for root from 165.22.104.67 port 50826 ssh2
2020-07-31T15:05:09.261590lavrinenko.info sshd[17479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.104.67  user=root
2020-07-31T15:05:11.222438lavrinenko.info sshd[17479]: Failed password for root from 165.22.104.67 port 57460 ssh2
...
2020-08-01 01:01:15
212.129.6.47 attack
Attempt to log in with non-existing username: admin
2020-08-01 01:15:46
177.67.176.173 attack
Automatic report - Banned IP Access
2020-08-01 00:45:47
187.149.226.127 attackspam
Automatic report - Port Scan Attack
2020-08-01 01:13:05
218.161.0.4 attackbots
Automatic report - Banned IP Access
2020-08-01 00:42:06
106.12.21.124 attackbots
20 attempts against mh-ssh on cloud
2020-08-01 00:44:39
187.162.33.163 attackbots
Automatic report - Port Scan Attack
2020-08-01 00:54:13
104.248.114.67 attack
(sshd) Failed SSH login from 104.248.114.67 (US/United States/-): 5 in the last 3600 secs
2020-08-01 01:16:57
217.21.193.74 attackbotsspam
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-08-01 00:46:40
51.104.242.17 attack
Jul 31 14:18:53 fhem-rasp sshd[30646]: Failed password for root from 51.104.242.17 port 52902 ssh2
Jul 31 14:18:53 fhem-rasp sshd[30646]: Disconnected from authenticating user root 51.104.242.17 port 52902 [preauth]
...
2020-08-01 01:15:17
192.99.212.132 attack
$f2bV_matches
2020-08-01 00:57:29
110.93.200.118 attack
Jul 31 16:25:25 fhem-rasp sshd[5676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.93.200.118  user=root
Jul 31 16:25:27 fhem-rasp sshd[5676]: Failed password for root from 110.93.200.118 port 27013 ssh2
...
2020-08-01 00:47:24

最近上报的IP列表

89.217.110.31 66.249.79.30 209.95.60.122 144.3.131.82
89.211.232.148 89.211.137.53 89.210.157.52 89.210.143.54
89.206.44.82 89.181.45.127 160.153.245.247 89.176.40.117
89.163.152.184 89.163.141.16 89.159.101.24 89.157.18.233
89.154.37.160 85.204.78.28 172.68.46.212 89.153.25.60