JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.85.212.192

47.85.212.192 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 58%: ?

58%

ISP	Alibaba Cloud LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45102
Domain Name	alibaba-inc.com
Country	🇺🇸 United States of America
City	Virginia Beach, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.85.212.192

Whois 47.85.212.192

IP Abuse Reports for 47.85.212.192:

This IP address has been reported a total of 23 times from 11 distinct sources. 47.85.212.192 was first reported on August 11th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-09-01 08:52:26 (4 hours ago)	Connection to port 8146 with data transfer. Data preview: GET / HTTP/1.0 Host: 198.23.188.201 Conn ... show more Connection to port 8146 with data transfer. Data preview: GET / HTTP/1.0 Host: 198.23.188.201 Connection:Close show less	Port Scan Hacking
🇺🇸 HamSammich	2026-08-31 11:14:55 (1 day ago)	Automated sensor: 3 SMTP-AUTH, SMTP-submission brute-force attempts over the last 24h (latest 2026-0 ... show more Automated sensor: 3 SMTP-AUTH, SMTP-submission brute-force attempts over the last 24h (latest 2026-08-31T11:14Z). show less	Email Spam Brute-Force
🇺🇸 sandra361	2026-08-31 06:03:52 (1 day ago)	Port scan detected: 6 attempts across 1 port (2048). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.85. ... show more Port scan detected: 6 attempts across 1 port (2048). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.85.212.192 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=32667 DF PROTO=TCP SPT=40686 DPT=2048 WINDOW=64240 RES=0x00 ACK URGP=0 show less	Port Scan
🇺🇸 donarev419	2026-08-30 04:54:26 (2 days ago)	Connection to port 14863 with data transfer. Data preview: GET / HTTP/1.0 Host: 107.175.212.44 Con ... show more Connection to port 14863 with data transfer. Data preview: GET / HTTP/1.0 Host: 107.175.212.44 Connection:Close show less	Port Scan Hacking
🇺🇸 donarev419	2026-08-30 04:38:37 (2 days ago)	Connection to port 5061 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 sandra361	2026-08-29 19:55:49 (2 days ago)	Port scan detected: 47 attempts across 1 port (13871). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.8 ... show more Port scan detected: 47 attempts across 1 port (13871). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.85.212.192 LEN=63 TOS=0x00 PREC=0x00 TTL=50 ID=13182 DF PROTO=TCP SPT=48926 DPT=13871 WINDOW=64240 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇺🇸 donarev419	2026-08-29 00:31:56 (3 days ago)	Connection to port 990 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 withfallback.com	2026-08-28 22:59:04 (3 days ago)	sends \r\n\r\n and waits; probably looking for telnet	Port Scan
🇺🇸 drewf.ink	2026-08-28 21:50:10 (3 days ago)	[21:50] Probed an open proxy (direct request to the proxy port)	Open Proxy
🇺🇸 jfz-abuse	2026-08-28 21:23:42 (3 days ago)	fail2ban: apache-proxy ...	Web App Attack
🇺🇸 sandra361	2026-08-28 10:45:50 (4 days ago)	Port scan detected: 173 attempts across 4 ports (179,8180,9306,9876). \| Evidence: REAPER_TARPIT: IN= ... show more Port scan detected: 173 attempts across 4 ports (179,8180,9306,9876). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=47.85.212.192 LEN=79 TOS=0x00 PREC=0x00 TTL=50 ID=36342 DF PROTO=TCP SPT=46424 DPT=9876 WINDOW=64240 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇺🇸 pablo	2026-08-22 23:00:05 (1 week ago)	SSH honeypot (Cowrie) recorded 12 events over 1m. Activity: SSH connection to honeypot; SSH credenti ... show more SSH honeypot (Cowrie) recorded 12 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; connection flood. Usernames tried: Connection:Close. Wazuh rules: 100100,100101,100113. show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-08-20 19:41:51 (1 week ago)	[19:41] Port scanning. Port(s) scanned: TCP/8001	Port Scan
Anonymous	2026-08-17 21:34:38 (2 weeks ago)	47.85.212.192 - - [17/Aug/2026:21:34:38 +0000] "\x16\x03\x01\x00\xFE\x01\x00\x00\xFA\x03\x03\xA4Je\x ... show more 47.85.212.192 - - [17/Aug/2026:21:34:38 +0000] "\x16\x03\x01\x00\xFE\x01\x00\x00\xFA\x03\x03\xA4Je\x12\xA5\xC3\xFE\xECM\x00\|\xB4\xAB: :\xDA\xCD\x07\xA7\x8A:\x89\xDD\x9A\x89\xA59q\x96]\xF8 0\xC4E\x07=\xDFQ\x16\xAE?\xFE\xDC\xA0\xEA\x0E\xEAE\xA9}\xB4\x98\xB0\xA7\xBCB\xC8\xE1" 400 150 "-" "-" "-" 47.85.212.192 - - [17/Aug/2026:21:34:38 +0000] "\x00\x00\x00\xA4\xFFSMBr\x00\x00\x00\x00\x08\x01@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x06\x00\x00\x01\x00\x00\x81\x00\x02PC NETWORK PROGRAM 1.0\x00\x02MICROSOFT NETWORKS 1.03\x00\x02MICROSOFT NETWORKS 3.0\x00\x02LANMAN1.0\x00\x02LM1.2X002\x00\x02Samba\x00\x02NT LANMAN 1.0\x00\x02NT LM 0.12\x00" 400 150 "-" "-" "-" ... show less	Port Scan Brute-Force
🇺🇸 John moore	2026-08-17 05:50:12 (2 weeks ago)	Bruteforce attempt by 47.85.212.192: Aug 17 03:50:12 * sshd[2588]: Connection closed by 47.85.212. ... show more Bruteforce attempt by 47.85.212.192: Aug 17 03:50:12 * sshd[2588]: Connection closed by 47.85.212.192 port 55634 show less	Brute-Force SSH

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.205

🇹🇼 111.70.14.135

🇺🇸 65.49.1.170

🇨🇳 58.47.137.190

🇹🇷 45.15.41.70

🇯🇵 2a01:111:f403:dc05::3

🇮🇩 180.254.65.159

🇺🇸 173.236.251.231

🇺🇸 159.89.38.12

🇨🇳 140.237.48.55

🇩🇪 131.159.24.205

🇨🇳 125.74.55.217

🇺🇸 72.217.41.239

🇻🇳 42.117.67.250

🇰🇿 217.196.26.102

🇵🇰 202.141.254.254

🇳🇱 195.178.110.137

🇨🇳 182.43.235.218

🇺🇸 172.208.127.33

🇵🇭 119.92.170.34