JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.33.223.242

161.33.223.242 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇯🇵 Japan
City	Inzai, Chiba

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.33.223.242

Whois 161.33.223.242

IP Abuse Reports for 161.33.223.242:

This IP address has been reported a total of 70 times from 55 distinct sources. 161.33.223.242 was first reported on August 20th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 cnaize	2026-08-21 13:57:23 (1 hour ago)	Malicious activity blocked by Meds firewall	Port Scan
🇺🇸 kosada.com	2026-08-21 13:45:05 (1 hour ago)	Web vulnerability probing: /index.php (bogus vhost/SNI)	Web App Attack
🇯🇵 Kinsei Engineering Inc.	2026-08-21 13:23:40 (1 hour ago)	UFW:High-frequency access to non-released SSH or Telnet ports	SSH Port Scan
🇫🇷 vtchost.com	2026-08-21 12:02:37 (2 hours ago)	2026-08-21T14:02:36.770176+02:00 vmi3491693 kernel: [170012.610296] PORTSCAN: IN=eth0 OUT= MAC=00:50 ... show more 2026-08-21T14:02:36.770176+02:00 vmi3491693 kernel: [170012.610296] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=161.33.223.242 DST=169.58.138.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=27260 PROTO=TCP SPT=37514 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 gcl046	2026-08-21 11:36:48 (3 hours ago)	2026-08-21T13:35:36.234478+02:00 zg0iiuob sshd-session[577802]: Invalid user admin from 161.33.223.2 ... show more 2026-08-21T13:35:36.234478+02:00 zg0iiuob sshd-session[577802]: Invalid user admin from 161.33.223.242 port 55294 2026-08-21T13:35:36.518542+02:00 zg0iiuob sshd-session[577802]: Connection closed by invalid user admin 161.33.223.242 port 55294 [preauth] 2026-08-21T13:36:10.610077+02:00 zg0iiuob sshd-session[577806]: Invalid user user from 161.33.223.242 port 55166 2026-08-21T13:36:10.898626+02:00 zg0iiuob sshd-session[577806]: Connection closed by invalid user user 161.33.223.242 port 55166 [preauth] 2026-08-21T13:36:47.255722+02:00 zg0iiuob sshd-session[577815]: Connection closed by authenticating user root 161.33.223.242 port 41272 [preauth] ... show less	Brute-Force SSH
🇺🇸 LSPCCU	2026-08-21 11:24:01 (3 hours ago)	TSEC Honeypot Network report. Threat score: 83/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 83/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH, IoT Targeted. Honeypot: ssh-telnet. Context: 161.33.223.242 classified as automated brute-force attacker targeting SSH/Telnet credentials (medium confidence). show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted
🇩🇪 Grossmann-Gruppe	2026-08-21 10:44:03 (4 hours ago)	Plesk Fail2Ban: plesk-modsecurity	Hacking Brute-Force
🇨🇭 flaus	2026-08-21 10:41:48 (4 hours ago)	$f2bV_matches	Hacking Bad Web Bot Web App Attack
🇫🇷 dwmp	2026-08-21 09:14:07 (5 hours ago)	[21/Aug/2026:11:14:05.921323 +0200] aogW3cMTOgBYIJnSfxczcgAAAEQ 161.33.223.242 45940 38.242.227.117 ... show more [21/Aug/2026:11:14:05.921323 +0200] aogW3cMTOgBYIJnSfxczcgAAAEQ 161.33.223.242 45940 38.242.227.117 7080 [21/Aug/2026:11:14:06.276985 +0200] aogW3rzGKZzO2l92_F95oQAAAIQ 161.33.223.242 45946 38.242.227.117 7080 [21/Aug/2026:11:14:06.737223 +0200] aogW3sMTOgBYIJnSfxczdwAAAEU 161.33.223.242 45948 38.242.227.117 7080 ... show less	Brute-Force SSH
🇫🇷 bazter.pro	2026-08-21 09:06:31 (5 hours ago)	Auto-Ban [2026-08-21T11:07:22]: CRITICAL: Exploit trap paths (25); DC: Oracle Corporation [Paths: 49 ... show more Auto-Ban [2026-08-21T11:07:22]: CRITICAL: Exploit trap paths (25); DC: Oracle Corporation [Paths: 49] show less	Web App Attack Hacking
🇮🇹 alph44	2026-08-21 08:57:49 (6 hours ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
Anonymous	2026-08-21 08:25:40 (6 hours ago)	161.33.223.242 - - [21/Aug/2026:03:25:38 -0500] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-s ... show more 161.33.223.242 - - [21/Aug/2026:03:25:38 -0500] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1288 "-" "libredtail-http" 161.33.223.242 - - [21/Aug/2026:03:25:39 -0500] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1288 "-" "libredtail-http" 161.33.223.242 - - [21/Aug/2026:03:25:40 -0500] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1288 "-" "libredtail-http" ... show less	Bad Web Bot
Anonymous	2026-08-21 08:04:24 (6 hours ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇬🇧 OptimusGO	2026-08-21 07:10:01 (7 hours ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-08-21 08:10:01 UTC Log evidence: 161.33.223.242 - - [21/Aug/2026:08:10:00 +0100] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" 08/21/2026-08:10:00.293183 [] [1:2011465:8] ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt [] [Classification: Web Application Attack] [Priority: 1] {TCP} 161.33.223.242:52128 -> 185.127.18.66:80 08/21/2026-08:10:00.293183 [] [1:2034125:5] ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2 [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 161.33.223.242:52128 -> 185.127.18.66:80 show less	Port Scan Brute-Force
🇨🇭 master.arknet.ch	2026-08-21 06:40:42 (8 hours ago)	2026-08-21T08:39:34.452572+02:00 cliff sshd-session[1682417]: Invalid user admin from 161.33.223.242 ... show more 2026-08-21T08:39:34.452572+02:00 cliff sshd-session[1682417]: Invalid user admin from 161.33.223.242 port 42606 2026-08-21T08:39:34.866671+02:00 cliff sshd-session[1682417]: Connection closed by invalid user admin 161.33.223.242 port 42606 [preauth] 2026-08-21T08:40:42.465902+02:00 cliff sshd-session[1683388]: Invalid user user from 161.33.223.242 port 57092 ... show less	Brute-Force SSH

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 178.62.67.151

🇨🇳 175.0.20.221

🇬🇧 35.203.210.135

🇳🇱 206.189.5.117

🇨🇳 202.101.73.81

🇳🇱 178.128.252.229

🇧🇷 168.194.107.71

🇺🇸 66.132.195.96

🇺🇸 40.77.178.4

🇺🇸 20.127.136.245

🇰🇷 1.209.110.147

🇫🇷 2400:cb00:987:1000:190b:a1d3:64c7:6a83

🇺🇸 216.73.161.214

🇩🇪 207.154.247.140

🇺🇿 185.74.7.77

🇩🇪 162.19.245.239

🇳🇱 157.245.77.45

🇨🇳 120.24.75.181

🇫🇷 85.217.140.42

🇸🇬 47.128.42.165