Elevated Risk
IP 147.185.132.12 is a maximum-threat-level address that has generated 305 abuse reports and is definitively associated with active hacking activity originating from Google Cloud Platform infrastructure in the United States. With a threat level of 10 out of 10 and a confidence rating of 77 percent, this IP represents one of the most reliably flagged malicious actors currently active in public threat intelligence feeds.
Analysis of the available data reveals sustained hostile activity spanning approximately nine months, from September 2025 through June 2026, with all 20 recent reports categorizing the behavior exclusively as hacking attempts. Every detection originated from automated honeypot sensors, indicating systematic, automated scanning and exploitation attempts rather than opportunistic or single-incident probes. The consistent volume of reports over this extended timeframe demonstrates persistent intent rather than transient or accidental misconfiguration.
The hacking classification encompasses intrusion attempts, vulnerability exploitation and unauthorized access scanning against exposed services. This activity poses a concrete risk to any publicly accessible system, particularly those running outdated software, exposed administrative interfaces or unpatched applications. The automated nature of these attacks means they can rapidly scale across millions of potential targets, making timely defensive action essential for any exposed infrastructure.
Site operators should immediately block this IP at the firewall or network edge layer, implement strict rate-limiting on authentication endpoints and ensure all systems are fully patched against known vulnerabilities. Deploying intrusion detection systems and enabling log monitoring will help identify any successful reconnaissance attempts. Additionally, enforcing strong, unique credentials and implementing multi-factor authentication across all remote-access services significantly reduces the effectiveness of the exploitation techniques associated with this threat actor.
JP 
BE 
GB 
TH 
HK 
FR 
CH