JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.85.132.252

47.85.132.252

Recent Activity

109 reports found in our database

49% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

Alibaba Cloud LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS45102

Domain Name

alibaba-inc.com

Country

🇺🇸 United States of America

City

Virginia Beach, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 47.85.132.252:

This IP address has been reported a total of 109 times from 86 distinct sources. 47.85.132.252 was first reported on April 30th 2026, and the most recent report was 16 hours ago. In the last 60 days, the top reporter locations were: Germany with 2 reports; United States of America with 2 reports; Canada with 1 report. The most common categories in these recent reports were: Brute-Force 8 times; SSH 8 times; Port Scan 3 times; Exploited Host 2 times; Hacking 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 unsoft.dynu.net	2026-09-12 22:15:37 (16 hours ago)		Brute-Force SSH
🇫🇮 -SK-	2026-09-12 22:14:15 (16 hours ago)	FI - (fail2ban jail:sshd, failures:3)	Brute-Force SSH
🇩🇪 Luma	2026-09-08 14:33:45 (5 days ago)	2026-09-08T16:28:18.489680+02:00 sshadmin sshd-session[13853]: Invalid user lab from 47.85.132.252 p ... show more 2026-09-08T16:28:18.489680+02:00 sshadmin sshd-session[13853]: Invalid user lab from 47.85.132.252 port 51350 2026-09-08T16:29:10.073492+02:00 sshadmin sshd-session[13855]: Invalid user matt from 47.85.132.252 port 37684 2026-09-08T16:30:57.341857+02:00 sshadmin sshd-session[13863]: Invalid user user from 47.85.132.252 port 45834 2026-09-08T16:32:49.981687+02:00 sshadmin sshd-session[13877]: Invalid user gitlab-runner from 47.85.132.252 port 42084 2026-09-08T16:33:44.510923+02:00 sshadmin sshd-session[13880]: Invalid user odoo from 47.85.132.252 port 42896 ... show less	Brute-Force SSH
🇩🇪 Luma	2026-09-08 14:03:00 (5 days ago)	2026-09-08T15:55:11.029394+02:00 sshadmin sshd-session[13625]: Invalid user admin from 47.85.132.252 ... show more 2026-09-08T15:55:11.029394+02:00 sshadmin sshd-session[13625]: Invalid user admin from 47.85.132.252 port 37872 2026-09-08T15:58:38.835703+02:00 sshadmin sshd-session[13635]: Invalid user test1 from 47.85.132.252 port 59718 2026-09-08T16:00:25.404838+02:00 sshadmin sshd-session[13642]: Invalid user bitnami from 47.85.132.252 port 51506 2026-09-08T16:01:16.670973+02:00 sshadmin sshd-session[13650]: Invalid user user from 47.85.132.252 port 47570 2026-09-08T16:02:59.833428+02:00 sshadmin sshd-session[13672]: Invalid user checker from 47.85.132.252 port 51478 ... show less	Brute-Force SSH
🇳🇱 Savvii	2026-09-07 08:36:42 (6 days ago)	20 attempts against mh-ssh on rwl-focal-dev	Brute-Force SSH
🇨🇦 SSH-Admin	2026-09-04 09:00:04 (1 week ago)	Probing for Exploits on ns200	Exploited Host Web App Attack
🇺🇸 PKThai	2026-09-04 07:27:22 (1 week ago)	Brute force attempts against SSH on nonstandard port - Repeat offender 47.85.132.252 banned at least ... show more Brute force attempts against SSH on nonstandard port - Repeat offender 47.85.132.252 banned at least 2 times in the last 7 days show less	Port Scan Brute-Force SSH
🇺🇸 pablo	2026-09-02 12:00:01 (1 week ago)	SSH honeypot (Cowrie) recorded 162 events over 38m. Activity: /etc/hosts.deny overwritten; SSH conne ... show more SSH honeypot (Cowrie) recorded 162 events over 38m. Activity: /etc/hosts.deny overwritten; SSH connection to honeypot; SSH credential brute-force; SSH key persistence attempt; SSH key written via shell redirect; automated SSH client (scanner banner); crontab persistence installation; host access control cleared; post-auth command execution; root credential accepted. Usernames tried: 345gs5662d34, PlcmSpIp, admin, alumni, apolo, baba. Passwords tried: 111111, 123, 123.com, 1234. Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh \| cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1 \| cat /proc/cpuinfo \| grep name \| wc -l Files written/uploaded: /etc/hosts.deny, /root/.ssh/authorized_keys Wazuh rules: 100100,100101,100103,100106,100107,100112,100117,100124,100125,100126. show less	Port Scan Hacking Brute-Force Exploited Host SSH
🇨🇭 ScanThe.Net	2026-09-01 20:42:02 (1 week ago)	ID: 36460631 \| PORT: 51367 \| https://47-85-132-252.scanthe.net	Port Scan
Anonymous	2026-08-29 18:14:13 (2 weeks ago)	2026-08-29T18:13:24.736964+00:00 arrow-ro1 sshd[33967]: pam_unix(sshd:auth): authentication failure; ... show more 2026-08-29T18:13:24.736964+00:00 arrow-ro1 sshd[33967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.85.132.252 user=root 2026-08-29T18:13:27.027779+00:00 arrow-ro1 sshd[33967]: Failed password for root from 47.85.132.252 port 58220 ssh2 2026-08-29T18:14:11.916405+00:00 arrow-ro1 sshd[33969]: Invalid user zw from 47.85.132.252 port 60032 ... show less	Brute-Force SSH
🇧🇷 ICS Labs	2026-07-10 19:21:43 (2 months ago)	ICS Labs identified 47.85.132.252 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇪🇸 robotstxt	2026-06-15 13:00:17 (2 months ago)	2026-06-15T12:54:51.201702+00:00 ws sshd[1035848]: Invalid user mega from 47.85.132.252 port 56656 2 ... show more 2026-06-15T12:54:51.201702+00:00 ws sshd[1035848]: Invalid user mega from 47.85.132.252 port 56656 2026-06-15T12:58:46.512204+00:00 ws sshd[1035940]: Invalid user marcel from 47.85.132.252 port 54060 2026-06-15T13:00:17.231631+00:00 ws sshd[1036013]: Invalid user mt from 47.85.132.252 port 44724 ... show less	Brute-Force
🇺🇦 URAN Publishing Service	2026-06-14 07:56:13 (2 months ago)	2026-06-14T10:55:24.525233+03:00 journals sshd[714760]: pam_unix(sshd:auth): authentication failure; ... show more 2026-06-14T10:55:24.525233+03:00 journals sshd[714760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.85.132.252 2026-06-14T10:55:26.026034+03:00 journals sshd[714760]: Failed password for invalid user debian from 47.85.132.252 port 47328 ssh2 2026-06-14T10:55:24.525233+03:00 journals sshd[714760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.85.132.252 2026-06-14T10:55:26.026034+03:00 journals sshd[714760]: Failed password for invalid user debian from 47.85.132.252 port 47328 ssh2 2026-06-14T10:56:12.942102+03:00 journals sshd[714839]: Invalid user admin from 47.85.132.252 port 48644 ... show less	SSH
🇺🇦 URAN Publishing Service	2026-06-14 07:40:01 (2 months ago)	2026-06-14T10:39:09.224728+03:00 journals sshd[714366]: pam_unix(sshd:auth): authentication failure; ... show more 2026-06-14T10:39:09.224728+03:00 journals sshd[714366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.85.132.252 2026-06-14T10:39:10.870835+03:00 journals sshd[714366]: Failed password for invalid user lenovo from 47.85.132.252 port 41560 ssh2 2026-06-14T10:39:57.714848+03:00 journals sshd[714495]: Invalid user soma from 47.85.132.252 port 39430 2026-06-14T10:39:57.752570+03:00 journals sshd[714495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.85.132.252 2026-06-14T10:39:59.958895+03:00 journals sshd[714495]: Failed password for invalid user soma from 47.85.132.252 port 39430 ssh2 ... show less	SSH
Anonymous	2026-06-14 07:39:12 (2 months ago)	SSH brute force attempt	SSH Brute-Force

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 220.133.95.63

🇩🇪 154.222.8.141

🇨🇳 121.46.239.199

🇫🇷 85.217.140.45

🇺🇸 20.64.98.140

🇦🇪 213.42.31.237

🇺🇸 129.146.86.255

🇧🇩 103.244.49.185

🇲🇩 80.94.254.41

🇺🇸 40.71.90.11

🇰🇷 221.161.235.168

🇬🇧 167.71.138.9

🇺🇸 161.35.126.11

🇫🇮 147.185.133.62

🇨🇳 120.48.8.101

🇬🇷 31.152.149.128

🇫🇷 200.13.200.184

🇺🇸 156.232.13.218

🇨🇳 112.102.85.94

🇺🇸 104.131.55.126