This IP address has been reported a total of
24
times from
17 distinct
sources.
47.85.13.157 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-07T10:17:44.802766+02:00 rev-crew.info sshd-session[339090]: Disconnected from invalid user ...
show more2026-06-07T10:17:44.802766+02:00 rev-crew.info sshd-session[339090]: Disconnected from invalid user sr 47.85.13.157 port 47718 [preauth]
2026-06-07T10:30:10.946103+02:00 rev-crew.info sshd-session[355818]: Disconnected from authenticating user root 47.85.13.157 port 35074 [preauth]
2026-06-07T10:30:55.615800+02:00 rev-crew.info sshd-session[356819]: Disconnected from authenticating user root 47.85.13.157 port 42486 [preauth]
2026-06-07T10:31:41.884727+02:00 rev-crew.info sshd-session[357845]: Disconnected from authenticating user root 47.85.13.157 port 60834 [preauth]
2026-06-07T10:32:25.338731+02:00 rev-crew.info sshd-session[358750]: Connection from 47.85.13.157 port 55076 on 5.9.102.165 port 2244 rdomain ""
2026-06-07T10:32:25.979139+02:00 rev-crew.info sshd-session[358750]: Invalid user f from 47.85.13.157 port 55076
...
show less
Jun 5 18:08:11 server sshd[272668]: Invalid user cae from 47.85.13.157 port 56616
Jun 5 18:18:44 s ...
show moreJun 5 18:08:11 server sshd[272668]: Invalid user cae from 47.85.13.157 port 56616
Jun 5 18:18:44 server sshd[274532]: Invalid user placement from 47.85.13.157 port 57328
Jun 5 18:19:25 server sshd[274565]: Invalid user europa from 47.85.13.157 port 52842
Jun 5 18:20:05 server sshd[274695]: Invalid user nextgen from 47.85.13.157 port 38278
Jun 5 18:20:43 server sshd[274702]: Invalid user callcenter from 47.85.13.157 port 46120
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-05T16:10:39Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-05T16:10:39Z and 2026-06-05T16:16:29Z
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T09:41:24Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T09:41:24Z and 2026-06-03T09:42:00Z
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-31T12:16:24Z and 2026-05-3 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-31T12:16:24Z and 2026-05-31T12:16:57Z
show less
SSH Brute force: 1 attempts were recorded from 47.85.13.157
2026-05-30T10:57:06+02:00 Disconnected f ...
show moreSSH Brute force: 1 attempts were recorded from 47.85.13.157
2026-05-30T10:57:06+02:00 Disconnected from authenticating user root 47.85.13.157 port 52278 [preauth]
show less
2026-05-30T11:13:58.535560+02:00 cho sshd[943945]: Failed password for root from 47.85.13.157 port 3 ...
show more2026-05-30T11:13:58.535560+02:00 cho sshd[943945]: Failed password for root from 47.85.13.157 port 37830 ssh2
2026-05-30T11:14:43.151951+02:00 cho sshd[943974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.85.13.157 user=root
2026-05-30T11:14:45.082435+02:00 cho sshd[943974]: Failed password for root from 47.85.13.157 port 45172 ssh2
2026-05-30T11:15:28.588148+02:00 cho sshd[944016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.85.13.157 user=root
2026-05-30T11:15:30.698866+02:00 cho sshd[944016]: Failed password for root from 47.85.13.157 port 48902 ssh2
...
show less
2026-05-29T21:34:53.987241+02:00 transfer-srv sshd[24579]: Failed password for invalid user rk from ...
show more2026-05-29T21:34:53.987241+02:00 transfer-srv sshd[24579]: Failed password for invalid user rk from 47.85.13.157 port 38160 ssh2
2026-05-29T21:35:33.524767+02:00 transfer-srv sshd[24908]: Connection from 47.85.13.157 port 58944 on 192.168.1.201 port 2221 rdomain ""
2026-05-29T21:35:34.156978+02:00 t
...
show less
Brute-Force
SSH
Anonymous
[KRONOS AutoBan] Automatisch erkannter Angriff auf Hetzner Server
Angriffstyp: SSH Brute-Force (5 Ve ...
show more[KRONOS AutoBan] Automatisch erkannter Angriff auf Hetzner Server
Angriffstyp: SSH Brute-Force (5 Versuche in 30min)
Angriffsversuche: 5
Genutzte Benutzernamen: admin, tempuser, sonarr, ftpUser
Erstes Auftreten: 2026-05-28T17:19:06.926Z
Server: Hetzner Dedicated, Ubuntu
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T17:00:57Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T17:00:57Z and 2026-05-28T17:01:22Z
show less
2026-05-27T08:09:15.940326-07:00 orcas sshd[14656]: Invalid user user from 47.85.13.157
2026-05-27T0 ...
show more2026-05-27T08:09:15.940326-07:00 orcas sshd[14656]: Invalid user user from 47.85.13.157
2026-05-27T08:15:17.075607-07:00 orcas sshd[34571]: Invalid user junyong from 47.85.13.157
2026-05-27T08:16:04.429712-07:00 orcas sshd[38562]: Invalid user sdtdserver from 47.85.13.157
2026-05-27T08:16:52.974666-07:00 orcas sshd[40851]: Invalid user deploy from 47.85.13.157
2026-05-27T08:17:39.075303-07:00 orcas sshd[43859]: Invalid user user8 from 47.85.13.157
...
show less
Brute-Force
SSH
Anonymous
sshd: Invalid user alex from 47.85.13.157 port 45650
sshd: Invalid user ubuntu from 47.85.13.157 por ...
show moresshd: Invalid user alex from 47.85.13.157 port 45650
sshd: Invalid user ubuntu from 47.85.13.157 port 38542
show less
Brute-Force
SSH
Showing 1 to
15
of 24 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩