IP address

Passive DNS

Tags: Scanner

IP blacklists

Echelon port scan

45.81.22.193 is listed on the Echelon port scan blacklist.

Description: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-05-06 09:25:01.322000
Was present on blacklist at: 2026-04-01 09:25, 2026-04-02 09:25, 2026-04-03 09:25, 2026-04-04 09:25, 2026-04-05 09:25, 2026-04-06 09:25, 2026-04-07 09:25, 2026-04-08 09:25, 2026-04-09 09:25, 2026-04-10 09:25, 2026-04-11 09:25, 2026-04-12 09:25, 2026-04-13 09:25, 2026-04-14 09:25, 2026-04-15 09:25, 2026-04-16 09:25, 2026-04-17 09:25, 2026-04-18 09:25, 2026-04-19 09:25, 2026-04-20 09:25, 2026-04-21 09:25, 2026-04-22 09:25, 2026-04-23 09:25, 2026-04-26 09:25, 2026-04-29 09:25, 2026-04-30 09:25, 2026-05-01 09:25, 2026-05-03 09:25, 2026-05-04 09:25, 2026-05-05 09:25, 2026-05-06 09:25

Echelon SSH bruteforce

45.81.22.193 is listed on the Echelon SSH bruteforce blacklist.

Description: Multiple SSH authentication attempts detected
Type of feed: primary (feed detail page)

Last checked at: 2026-04-11 09:35:00.658000
Was present on blacklist at: 2026-04-02 09:35, 2026-04-03 09:35, 2026-04-04 09:35, 2026-04-05 09:35, 2026-04-06 09:35, 2026-04-07 09:35, 2026-04-08 09:35, 2026-04-09 09:35, 2026-04-10 09:35, 2026-04-11 09:35

Echelon telnet bruteforce

45.81.22.193 is listed on the Echelon telnet bruteforce blacklist.

Description: Multiple telnet authentication attempts detected
Type of feed: primary (feed detail page)

Last checked at: 2026-04-12 09:45:00.591000
Was present on blacklist at: 2026-04-03 09:45, 2026-04-04 09:45, 2026-04-05 09:45, 2026-04-06 09:45, 2026-04-07 09:45, 2026-04-08 09:45, 2026-04-09 09:45, 2026-04-10 09:45, 2026-04-11 09:45, 2026-04-12 09:45

Echelon VNC login

45.81.22.193 is listed on the Echelon VNC login blacklist.

Description: VNC remote desktop login attempt on port 5900/5901
Type of feed: primary (feed detail page)

Last checked at: 2026-04-12 09:45:00.627000
Was present on blacklist at: 2026-04-07 09:45, 2026-04-08 09:45, 2026-04-09 09:45, 2026-04-10 09:45, 2026-04-11 09:45, 2026-04-12 09:45

Threat categories

TL	Role	Category	Details
36	src	scan

Warden events (6581)

2026-04-29: ReconScanning (node.f90c6b): 30; ReconScanning (node.86eb21): 31
2026-04-28: ReconScanning (node.f90c6b): 144; ReconScanning (node.86eb21): 144
2026-04-27: ReconScanning (node.f90c6b): 144; ReconScanning (node.86eb21): 144
2026-04-26: ReconScanning (node.f90c6b): 144; ReconScanning (node.86eb21): 144
2026-04-25: ReconScanning (node.f90c6b): 144; ReconScanning (node.86eb21): 85
2026-04-24: ReconScanning (node.f90c6b): 143; ReconScanning (node.86eb21): 47
2026-04-23: ReconScanning (node.f90c6b): 54; ReconScanning (node.86eb21): 53
2026-04-17: ReconScanning (node.f90c6b): 13; ReconScanning (node.86eb21): 12
2026-04-16: ReconScanning (node.f90c6b): 136; ReconScanning (node.86eb21): 136
2026-04-15: ReconScanning (node.86eb21): 140; ReconScanning (node.f90c6b): 143
2026-04-14: ReconScanning (node.86eb21): 143; ReconScanning (node.f90c6b): 144
2026-04-13: ReconScanning (node.86eb21): 140; ReconScanning (node.f90c6b): 144
2026-04-12: ReconScanning (node.86eb21): 136; ReconScanning (node.f90c6b): 143
2026-04-11: ReconScanning (node.f90c6b): 79; ReconScanning (node.86eb21): 75
2026-04-10: ReconScanning (node.f90c6b): 26; ReconScanning (node.86eb21): 21
2026-04-09: ReconScanning (node.86eb21): 41; ReconScanning (node.f90c6b): 46
2026-04-08: ReconScanning (node.f90c6b): 126; ReconScanning (node.86eb21): 120
2026-04-07: ReconScanning (node.86eb21): 23; ReconScanning (node.f90c6b): 25
2026-04-06: ReconScanning (node.86eb21): 134; ReconScanning (node.f90c6b): 143
2026-04-05: ReconScanning (node.86eb21): 136; ReconScanning (node.f90c6b): 142
2026-04-04: ReconScanning (node.86eb21): 138; ReconScanning (node.f90c6b): 142
2026-04-03: ReconScanning (node.f90c6b): 123; ReconScanning (node.86eb21): 116
2026-04-02: ReconScanning (node.86eb21): 85; ReconScanning (node.f90c6b): 89
2026-04-01: ReconScanning (node.86eb21): 109; ReconScanning (node.f90c6b): 113
2026-03-31: ReconScanning (node.86eb21): 143; ReconScanning (node.f90c6b): 144
2026-03-30: ReconScanning (node.86eb21): 138; ReconScanning (node.f90c6b): 143
2026-03-29: ReconScanning (node.f90c6b): 125; ReconScanning (node.86eb21): 120
2026-03-28: ReconScanning (node.86eb21): 26
2026-03-27: ReconScanning (node.86eb21): 76; ReconScanning (node.f90c6b): 77
2026-03-26: ReconScanning (node.86eb21): 141; ReconScanning (node.f90c6b): 143
2026-03-25: ReconScanning (node.86eb21): 98; ReconScanning (node.f90c6b): 48
2026-03-23: ReconScanning (node.86eb21): 57
2026-03-20: ReconScanning (node.86eb21): 55
2026-03-19: ReconScanning (node.86eb21): 16
2026-03-18: ReconScanning (node.86eb21): 15
2026-03-17: ReconScanning (node.86eb21): 63
2026-03-16: ReconScanning (node.86eb21): 9; ReconScanning (node.f90c6b): 9
2026-03-13: ReconScanning (node.86eb21): 2

DShield reports (IP summary, reports)

2026-03-09: Number of reports: 93186; Distinct targets: 59635
2026-03-10: Number of reports: 117883; Distinct targets: 75672
2026-03-12: Number of reports: 146833; Distinct targets: 95968
2026-03-13: Number of reports: 146833; Distinct targets: 95968
2026-03-16: Number of reports: 101532; Distinct targets: 66615
2026-03-17: Number of reports: 94540; Distinct targets: 60775
2026-03-18: Number of reports: 19305; Distinct targets: 12904
2026-03-19: Number of reports: 58825; Distinct targets: 35461
2026-03-20: Number of reports: 142412; Distinct targets: 93033
2026-03-23: Number of reports: 130471; Distinct targets: 84598
2026-03-24: Number of reports: 130471; Distinct targets: 84598
2026-03-25: Number of reports: 60751; Distinct targets: 44167
2026-03-26: Number of reports: 60751; Distinct targets: 44167
2026-03-27: Number of reports: 97842; Distinct targets: 95527
2026-03-28: Number of reports: 50479; Distinct targets: 50475
2026-03-29: Number of reports: 50479; Distinct targets: 50475
2026-03-30: Number of reports: 15868; Distinct targets: 15868
2026-03-31: Number of reports: 15868; Distinct targets: 15868
2026-04-01: Number of reports: 12598; Distinct targets: 11096
2026-04-02: Number of reports: 9148; Distinct targets: 8733
2026-04-03: Number of reports: 16248; Distinct targets: 9423
2026-04-04: Number of reports: 15669; Distinct targets: 13013
2026-04-05: Number of reports: 19655; Distinct targets: 18111
2026-04-06: Number of reports: 24103; Distinct targets: 22388
2026-04-07: Number of reports: 3661; Distinct targets: 3661
2026-04-08: Number of reports: 15996; Distinct targets: 15996
2026-04-09: Number of reports: 6412; Distinct targets: 6334
2026-04-10: Number of reports: 3043; Distinct targets: 3029
2026-04-11: Number of reports: 9821; Distinct targets: 9115
2026-04-12: Number of reports: 19300; Distinct targets: 19299
2026-04-13: Number of reports: 18777; Distinct targets: 18777
2026-04-14: Number of reports: 19492; Distinct targets: 19036
2026-04-15: Number of reports: 19492; Distinct targets: 19036
2026-04-16: Number of reports: 19053; Distinct targets: 19053
2026-04-17: Number of reports: 2088; Distinct targets: 2088
2026-04-18: Number of reports: 2088; Distinct targets: 2088
2026-04-22: Number of reports: 17; Distinct targets: 17
2026-04-23: Number of reports: 3099; Distinct targets: 3098
2026-04-24: Number of reports: 10911; Distinct targets: 10911
2026-04-25: Number of reports: 9934; Distinct targets: 9934
2026-04-26: Number of reports: 7119; Distinct targets: 6927
2026-04-27: Number of reports: 7119; Distinct targets: 6927
2026-04-28: Number of reports: 10295; Distinct targets: 10295
2026-04-29: Number of reports: 2343; Distinct targets: 2343
2026-04-30: Number of reports: 2343; Distinct targets: 2343

Origin AS: AS49870 - AS49870-BV
BGP Prefix: 45.81.22.0/23
geo: Netherlands, Amsterdam; 🕑 Europe/Amsterdam
hostname: s01.research.oasis-security.io
Address block ('inetnum' or 'NetRange' in whois database): 45.81.20.0 - 45.81.23.255
last_activity: 2026-04-29 04:53:04
last_warden_event: 2026-04-29 04:53:04
rep: 0.04285714285714285
reserved_range: 0
Shodan's InternetDB: Open ports: 80; Tags: eol-product; CPEs: cpe:/a:f5:nginx:1.22.1
ts_added: 2026-03-10 05:03:47.437000
ts_last_update: 2026-05-10 05:03:54.231000

Warden event timeline

DShield event timeline

Presence on blacklists