Is 157.22.47.133 a scam?

Our automated security review flags 157.22.47.133 as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is 157.22.47.133 safe to use?

No — 157.22.47.133 scored 11/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Has 157.22.47.133 been flagged by antivirus engines?

2 out of 92 antivirus engines in our malware network flagged 157.22.47.133 as malicious or suspicious (2 outright malicious). Even one detection is a meaningful signal.

Is 157.22.47.133 on any phishing or malware blacklists?

No. 157.22.47.133 is not currently listed on the major browser blocklist feeds that modern browsers use.

How often is the 157.22.47.133 report updated?

This is a permanent record of the scan run on June 28, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around 157.22.47.133 have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is 157.22.47.133 legit or a scam?

Our verdict:Dangerous· 11/100

SafeSuspiciousDangerous

This Seychelles-based IP is a confirmed source of automated forum spam and malicious activity flagged by multiple security engines.

Top reasons

Flagged as malicious by MalwareURL and SOCRadar.Listed in multiple spam databases for automated forum abuse.Associated with known spam tools like XRumer.

157.22.47.133Scanned 2h ago

Post Facebook

Trust score

DANGEROUS

Heuristics 10·MT 12

Category tags

spammalware90% MT confidence

Technical red flags (1)

2 of 92 engines flagged

Positive signals (1)

Not on major blacklists

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

2/92

Engines flagged this URL

Domain Age

—

Registration date unknown

MT Intelligence

Dangerous

Critical likelihood · 90% confidence

DANGEROUS

Critical risk detected

2 of 92 antivirus engines flag this page. Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.

Website Preview

LIVE RENDER

157.22.47.133

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Critical scam likelihoodengineMT · Guardiantrust12/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

Our analysis identifies this IP address as a source of aggressive automated spam campaigns. MalwareURL and SOCRadar both flag the address as malicious. Research shows it is actively listed on global spam databases with multiple reports of abuse involving automated tools like XRumer. The activity is linked to spamming WordPress sites and forums with deceptive links. Because there is no legitimate business associated with this IP, it should be treated as a threat.

Full dossier

Analysis complete

Page Content

The address does not host a standard website but appears to function as a backend for automated scripts. There is no evidence of a legitimate storefront or service for users.

Infrastructure

The IP is geolocated to the Seychelles and lacks any SSL encryption or valid security certificates. It is not indexed in global traffic rankings, which is typical for infrastructure used for automated attacks rather than public browsing.

Domain History

There is no WHOIS data available for this IP, suggesting it is being used as a raw server address to bypass domain-level protections. Recent activity logs from June 2026 show it was used to target various Russian and international domains.

Web Reputation

The reputation is extremely poor across security feeds. It is currently included in active blocklists designed to stop forum and comment spam. Multiple independent reports link this IP to automated 'XRumer' spam bots.

Risk Factors

Flagged as malicious by MalwareURL and SOCRadar.
Listed in multiple spam databases for automated forum abuse.
Associated with known spam tools like XRumer.
No SSL certificate or encryption present.
Geolocated to a high-risk jurisdiction with no business registration.
Linked to multiple spam attack logs on WordPress sites.

AI Recommendation

Avoid visiting this IP address or clicking any links associated with it. Block this IP in your firewall if you manage a website to prevent automated spam attacks.

Scam network detected

3 linked domains correlated

This IP is part of a wider spam network using various .ru domains to spread deceptive content.

eurogal-surveys.ruпроктолог-эксперт.рфbez-gemorroya.ru

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for 157.22.47.133, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

3 scam reports · 4 complaints

Key findings

6 headline facts from open-web research

IP 157.22.47.133 is located in Seychelles according to multiple geolocation sources.
Listed on StopForumSpam with 4 abuse reports in June 2026, associated with domains such as eurogal-surveys.ru, проктолог-эксперт.рф, bez-gemorroya.ru and emails containing 'xrumer'.
Frequently appears in CleanTalk spam attack logs (multiple entries in June 2026) linked to WordPress comment/spam attempts using XRumer-like tools.
Included in FireHOL blocklist-ipsets stopforumspam_1d.ipset, indicating recent forum spam activity.
No reports found on AbuseIPDB, VirusTotal, or major scam review sites; no positive reviews or legitimate business association identified.
Activity pattern strongly indicates use for automated forum/blog spam rather than hosting a specific phishing or malware site.

Scam reports (3)

Direct quotes from public scam databases, forums, and news.

StopForumSpamopen
"157.22.47.133 appears in our database 4 times"
StopForumSpamopen
"Abuse History: 26-Jun-26 eurogal-surveys.ru freds@gmail.com; 24-Jun-26 проктолог-эксперт.рф xrumer23moids@gmail.com (multiple); 19-Jun-26 bez-gemorroya.ru zathonytts@vip.163.com"
CleanTalkopen
"157.22.47.133 listed in multiple spam attack logs associated with emails like xrumer23* and bez-gemo* on WordPress sites"

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases and spam-tracking sites for 157.22.47.133. The IP appears in database logs for StopForumSpam and CleanTalk with multiple entries from June 2026. These reports link the address to automated spam tools and 'XRumer' activity targeting various websites. No positive reviews or legitimate business associations were found.

Antivirus Engines

Detection matrix · live

2 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

2Malicious0Suspicious56Harmless92Engines

of 92

MalwareURL

Malicious· malware

SOCRadar

Malicious· malicious

2 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

Do not interact with 157.22.47.133
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags 157.22.47.133 as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — 157.22.47.133 scored 11/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
2 out of 92 antivirus engines in our malware network flagged 157.22.47.133 as malicious or suspicious (2 outright malicious). Even one detection is a meaningful signal.
No. 157.22.47.133 is not currently listed on the major browser blocklist feeds that modern browsers use.
This is a permanent record of the scan run on June 28, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around 157.22.47.133 have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·157.22.47.133

DANGEROUS

This IP address is a known source of automated spam and malicious activity. Multiple security engines and spam databases have flagged it for hosting automated attack tools. Do not interact with this address or provide any information.

Avoid visiting this IP address or clicking any links associated with it. Block this IP in your firewall if you manage a website to prevent automated spam attacks.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

robuxhackgenerator.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

Scanned by

harlan4096Staff

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.