161.22.33.227

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
52 reports
39 reporters · latest 15 hours ago
ISP
THUNDERNET, C.A.
Usage Type
Fixed Line ISP
ASN
AS272809
Domain Name
thundernet.com.ve
Country
🇻🇪 Venezuela (Bolivarian Republic of)
City
Caracas, Distrito Federal
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
52 from 39 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 12 🇵🇱 Poland 9 🇩🇪 Germany 7
Most common categories Brute-Force 18 Bad Web Bot 17 Hacking 11 DDoS Attack 11 Web App Attack 10
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇵🇱 MatStef132
MatShield L7: blocked on unlocknow.cc (sec-fetch-referer-contradiction)
DDoS Attack
🇺🇸 justbible
Bad Web Bot
Anonymous
fail2ban: brute-force/credential spraying against mail (IMAP/POP/webmail) — rmnet.it
Brute-Force
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 satelliteproxy
DPI (Deep Packet Inspection) identified this source as an abusive automated web bot.
Bad Web Bot
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇹🇼 tyetriiix
Wazuh Alert Evidence: 2026/11/05 10:56:42 [error] 2825320#2825320: *8503 access forbidden by rule, client: 161.22.33.227, server: strapi.triiix.io, request: "GET / HTTP/1.1", host: "strapi.triiix.io"
Web App Attack
🇫🇷 adlp.org
Brute-Force
🇷🇴 clauss
IP reached maximum auth failures for a one day block
Brute-Force
🇬🇧 Andrew
2026-11-05T06:36:13.511581+00:00 Debian sshd-session[598747]: kex_exchange_identification: Connection closed by remote host 2026-11-05T06:36:13.511604+00:00 Debian sshd-session[598747]: Connection closed by 161.22.33.227 port 35486 ...
Port Scan Hacking Brute-Force SSH
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.
Hacking Exploited Host Web App Attack
🇫🇷 Tilellit.PRO
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack Bad Web Bot
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 161.22.33.227 2026-11-05T04:33:44+0100 vpn Access-Reject station: 161.22.33.227
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇷 190.113.115.107
🇺🇸 162.216.150.216
🇨🇳 121.43.117.244
🇫🇷 91.231.89.25
🇺🇸 70.184.172.229
🇺🇸 66.132.186.243
🇹🇭 43.128.212.102
🇺🇸 9.234.43.171
🇻🇳 210.245.30.140
🇧🇷 189.56.195.78
🇬🇧 178.62.79.234
🇩🇪 167.94.146.58
🇸🇬 152.42.221.98
🇫🇮 147.185.133.173
🇺🇸 147.185.132.147
🇺🇸 142.147.199.47
🇩🇪 92.208.180.97
🇫🇷 91.196.152.87
🇫🇷 91.196.152.86
🇺🇸 70.175.182.47
feedback