161.22.33.85

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
71 reports
60 reporters · latest 39 minutes ago
ISP
THUNDERNET, C.A.
Usage Type
Fixed Line ISP
ASN
AS272809
Domain Name
thundernet.com.ve
Country
🇻🇪 Venezuela (Bolivarian Republic of)
City
Caracas, Distrito Federal
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
71 from 60 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 20 🇩🇪 Germany 15 🇫🇷 France 7
Most common categories Web App Attack 24 Port Scan 19 Brute-Force 17 Bad Web Bot 15 SSH 13
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇪🇸 librebit
Brute force
Brute-Force
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇲🇹 Malta
161.22.33.85 - - [14/Nov/2026:01:37:23 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" Brute-force password attempt
Hacking Web App Attack Brute-Force
🇩🇪 BlueWire Hosting
Probing websites for vulnerabilities
Web App Attack SQL Injection
🇫🇷 Sklurk
Web App Attack
Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 2 observed events targeting exposed network services.
Port Scan
🇧🇪 sid3windr
SSH port scan (Tarpitted for 10s, wasted 0B)
Port Scan SSH
Anonymous
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack Brute-Force Bad Web Bot
🇺🇸 justbible
Bad Web Bot
🇳🇱 IPCollective Intelligence
Residential Proxy - IPCollective Intelligence
Open Proxy
🇫🇷 j-tap
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇷🇴 Gigi
CrowdSec automatic ban | Scenario: local/pf-ssh-bf | Duration: 4h | Origin: crowdsec | Detected by OPNsense firewall (Beast home network security)
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 179.184.218.49
🇰🇷 175.209.156.146
🇺🇸 138.197.67.17
🇧🇷 136.248.127.194
🇺🇸 129.121.101.28
🇨🇳 111.9.22.102
🇧🇷 45.236.132.137
🇺🇸 44.217.177.142
🇬🇧 35.203.210.229
🇧🇷 191.243.24.60
🇨🇱 152.173.175.66
🇳🇱 77.239.124.38
🇸🇬 47.128.45.136
🇨🇦 37.19.211.83
🇸🇬 8.222.239.48
🇰🇷 220.76.82.123
🇲🇾 202.59.9.161
🇺🇸 167.99.51.23
🇺🇸 147.185.132.111
🇧🇷 45.175.111.110
feedback