AbuseIPDB » 185.196.220.132

185.196.220.132 was found in our database!

This IP was reported 313 times. Confidence of Abuse is 100%: ?

100%
ISP Colocatel Inc.
Usage Type Data Center/Web Hosting/Transit
ASN AS213438
Domain Name colocatel.com
Country ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands
City Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 185.196.220.132:

This IP address has been reported a total of 313 times from 67 distinct sources. 185.196.220.132 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฟ๐Ÿ‡ฆ slartybartfast69420blazit
Fail2ban picked up 185.196.220.132 attacking nginx
Web App Attack
๐Ÿ‡ฟ๐Ÿ‡ฆ slartybartfast69420blazit
Fail2ban picked up 185.196.220.132 attacking nginx
Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ Neosmith20
Knock-Knock honeypot brute-force: RDP (7 total hits)
Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท โœจ
Rule : RDP Rule: RDP Event: RDP 185.196.220.132
SSH Brute-Force
๐Ÿ‡ฌ๐Ÿ‡ง andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ sargetun
Honeypot: RDP probe on port 3389 at 2026-06-24 23:57:49.598439. Automated report from VPS honeypot.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ sargetun
Honeypot: Auto-ban: 24 hour idle after honeypot interaction. Auto-reported from VPS honeypot.
Brute-Force SSH Hacking
๐Ÿ‡บ๐Ÿ‡ธ cwytech
Fleet-wide ban from the Ghostfleet ๐Ÿ‘ป. Triggered by scenario: cwy/global-exclusion-high.
Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ knock
Knock-Knock honeypot brute-force: RDP (12 total hits)
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ wristhulk
Honeypot: RDP brute-force on OpenCanary honeypot (port 3389). Username: 'Test'.
Brute-Force
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: RDP (19 total hits)
Brute-Force
๐Ÿ‡จ๐Ÿ‡ญ TOCE
8 hits seen on 2026-06-24, ports 3389 (RDP) on a honeypot from www.toce.ch
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 3389 with data transfer. Data preview: 
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 7863 with data transfer. Data preview: 
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 10187 with data transfer. Data preview: 
Port Scan Hacking

Showing 1 to 15 of 313 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ง๐Ÿ‡ช 198.235.24.215
๐Ÿ‡ง๐Ÿ‡ช 198.235.24.214
๐Ÿ‡ณ๐Ÿ‡ฌ 197.210.103.188
๐Ÿ‡ง๐Ÿ‡ท 186.233.118.22
๐Ÿ‡ป๐Ÿ‡ณ 171.231.190.102
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.240
๐Ÿ‡ธ๐Ÿ‡ฌ 35.240.168.160
๐Ÿ‡น๐Ÿ‡ผ 221.120.4.61
๐Ÿ‡ง๐Ÿ‡ช 198.235.24.211
๐Ÿ‡ง๐Ÿ‡ช 198.235.24.208
๐Ÿ‡ฎ๐Ÿ‡ณ 103.59.202.218
๐Ÿ‡บ๐Ÿ‡ธ 100.58.109.199
๐Ÿ‡ซ๐Ÿ‡ท 91.231.89.72
๐Ÿ‡ฌ๐Ÿ‡ง 81.19.219.208
๐Ÿ‡ง๐Ÿ‡ฌ 79.124.56.250
๐Ÿ‡ฎ๐Ÿ‡ณ 61.0.48.198
๐Ÿ‡บ๐Ÿ‡ธ 54.196.171.255
๐Ÿ‡ฉ๐Ÿ‡ช 51.75.64.35
๐Ÿ‡ฌ๐Ÿ‡ช 5.187.10.4
๐Ÿ‡ฎ๐Ÿ‡ท 5.117.113.220