JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.200.3.128

195.200.3.128 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 76%: ?

76%

ISP	Hostinger International Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Domain Name	hostinger.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.200.3.128

Whois 195.200.3.128

IP Abuse Reports for 195.200.3.128:

This IP address has been reported a total of 44 times from 22 distinct sources. 195.200.3.128 was first reported on May 31st 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-08-27 02:08:04 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 simsung	2026-08-26 18:14:27 (17 hours ago)	195.200.3.128 - - [26/Aug/2026:18:14:26 +0000] "GET /dev/.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Ma ... show more 195.200.3.128 - - [26/Aug/2026:18:14:26 +0000] "GET /dev/.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Bad Web Bot
🇧🇷 Peregrine	2026-08-26 03:13:21 (1 day ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /backend/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /member/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /backup/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /api/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /admin/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /core/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /dev/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /test/.env HTTP/1.1" 404 414 show less	Bad Web Bot
🇬🇧 consul.to	2026-08-25 21:13:22 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇷 Peregrine	2026-08-25 03:10:38 (2 days ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /backend/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /member/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /backup/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /api/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /admin/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /core/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /dev/.env HTTP/1.1" 404 414 - 195.200.3.128 - - [21/Aug/2026:10:44:01 -0300] "GET /test/.env HTTP/1.1" 404 414 show less	Bad Web Bot
Anonymous	2026-08-25 02:39:21 (2 days ago)	[25/Aug/2026:02:39:20 +0000] host=lovelyrender.app server=lovelyrender.app ip=195.200.3.128 method=G ... show more [25/Aug/2026:02:39:20 +0000] host=lovelyrender.app server=lovelyrender.app ip=195.200.3.128 method=GET req=/api/.env uri=/index.php status=302 bytes=5 rt=0.050 urt=0.050 ref="-" ua="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇩🇪 Guardian	2026-08-25 02:17:29 (2 days ago)	Unauthorized attempt to retrieve configuration file (x10) 195.200.3.128 [25/Aug/2026:04:17:28 +0200] ... show more Unauthorized attempt to retrieve configuration file (x10) 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /core/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /backup/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /test/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /dev/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /admin/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /member/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /app/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /backend/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /api/.env HTTP/1.1" 195.200.3.128 [25/Aug/2026:04:17:28 +0200] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack
🇩🇪 LRob	2026-08-24 21:06:21 (2 days ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /test/.env (+9 more) \| 2026-08-24 21:06 UTC show less	Hacking Web App Attack
🇬🇧 consul.to	2026-08-24 17:25:24 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇷 diego	2026-08-24 05:20:44 (3 days ago)	[probe-68-69] 2026-08-24 05:05:42, Client: 195.200.3.128, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-68-69] 2026-08-24 05:05:42, Client: 195.200.3.128, Protocol: 6, Unauthorized activity to HTTP: GET /core/.env show less	Web App Attack
🇧🇷 Halux	2026-08-23 15:05:31 (3 days ago)	195.200.3.128 Probing protected path or service	Web App Attack
Anonymous	2026-08-23 08:59:55 (4 days ago)	Sensitive Configuration File Disclosure.	Hacking
🇧🇷 diego	2026-08-23 08:33:49 (4 days ago)	[probe-44-49] 2026-08-23 08:17:01, Client: 195.200.3.128, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-44-49] 2026-08-23 08:17:01, Client: 195.200.3.128, Protocol: 6, Unauthorized activity to HTTP: GET /.env show less	Web App Attack
🇧🇷 diego	2026-08-23 04:51:29 (4 days ago)	[probe-168-134] 2026-08-23 04:32:41, Client: 195.200.3.128, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-08-23 04:32:41, Client: 195.200.3.128, Protocol: 6, Unauthorized activity to HTTP: GET /.env show less	Web App Attack
🇧🇷 diego	2026-08-23 03:46:29 (4 days ago)	[probe-168-134] 2026-08-23 03:28:38, Client: 195.200.3.128, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-08-23 03:28:38, Client: 195.200.3.128, Protocol: 6, Unauthorized activity to HTTP: GET /.env show less	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 216.244.224.178

🇺🇸 174.138.62.209

🇦🇹 68.210.120.110

🇴🇲 37.41.237.212

🇳🇱 204.137.14.92

🇺🇦 192.162.237.4

🇮🇹 172.253.12.220

🇻🇳 171.244.60.35

🇺🇸 136.66.237.110

🇲🇷 102.206.227.170

🇷🇺 91.144.158.231

🇺🇦 77.239.166.17

🇺🇸 72.215.33.16

🇨🇳 43.143.18.14

🇨🇦 38.49.212.42

🇪🇸 212.36.87.22

🇬🇧 193.163.125.188

🇫🇮 147.185.133.252

🇺🇸 136.38.164.6

🇨🇳 124.221.221.221