Maximum Danger
IP 147.185.132.111 is a maximum-threat-risk address operating from Google Cloud Platform infrastructure in the United States, with 182 abuse reports logged by automated honeypot sensors over approximately seven months. The IP's 10/10 threat rating combined with a 78% confidence score reflects sustained, high-volume malicious activity dominated by general hacking operations, with evidence of host compromise serving as an active attack platform.
Community reporting and automated honeypot sensors recorded 182 distinct abuse incidents attributed to 147.185.132.111 between November 2025 and May 2026, sourced from 20 separate detection points. This Google Cloud Platform address (AS396982) demonstrates activity frequency rated at 5 out of 10, indicating consistent rather than burst-pattern behaviour over the seven-month observation window. The dominant reported threat category is hacking activity at 19 recent reports, supplemented by a single exploited host classification, suggesting this IP functions either as a dedicated attack resource or a compromised cloud instance being weaponized by threat actors. Observed network anomalies include broken TCP acknowledgment patterns in stream traffic and invalid TLS record types, both indicators of automated exploitation tooling or malware communication attempts.
The hacking classification encompasses vulnerability exploitation, intrusion attempts, and unauthorized access campaigns targeting exposed services, while the exploited host designation indicates the possibility that this IP is enrolled in a botnet or being used as a relay without the legitimate cloud customer's knowledge. The TLS protocol anomalies detected suggest the host may be attempting to establish encrypted command-and-control channels or performing man-in-the-middle interception, raising the threat profile beyond simple scanning. Organizations with publicly accessible services face direct risk of compromise if this address is not blocked, as the attack patterns indicate sophisticated, automated exploitation toolchains rather than opportunistic noise.
JP 
BE 
SG 
MY 
CA 
GB 
KR