JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.195.188.69

20.195.188.69 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 85%: ?

85%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.195.188.69

Whois 20.195.188.69

IP Abuse Reports for 20.195.188.69:

This IP address has been reported a total of 23 times from 18 distinct sources. 20.195.188.69 was first reported on August 24th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SLSLLC	2026-08-29 07:43:04 (3 days ago)	20.195.188.69 - - [29/Aug/2026:07:43:01 +0000] "GET /.env.local HTTP/1.1" 403 6103 "https://172.191. ... show more 20.195.188.69 - - [29/Aug/2026:07:43:01 +0000] "GET /.env.local HTTP/1.1" 403 6103 "https://172.191.20.23/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" ... show less	Brute-Force Web App Attack
🇫🇷 GabrielJST	2026-08-27 10:19:56 (5 days ago)	(PERMBLOCK) 20.195.188.69 (BR/Brazil/-) has had more than 1 temp blocks	Hacking
🇫🇷 dynamix	2026-08-27 06:18:35 (5 days ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-08-27 04:40:28 (5 days ago)	20.195.188.69 - - [27/Aug/2026:04:40:26 +0000] "GET /.env.local HTTP/1.1" 404 437 "-" "ExposureScann ... show more 20.195.188.69 - - [27/Aug/2026:04:40:26 +0000] "GET /.env.local HTTP/1.1" 404 437 "-" "ExposureScanner/1.0 (internal-security-audit)" ... show less	Bad Web Bot Web App Attack
🇫🇷 a.mohamed.go	2026-08-26 23:07:39 (6 days ago)	20.195.188.69 - - [26/Aug/2026:23:07:36 +0000] "GET /api/.env HTTP/1.1" 404 153 "-" "ExposureScanner ... show more 20.195.188.69 - - [26/Aug/2026:23:07:36 +0000] "GET /api/.env HTTP/1.1" 404 153 "-" "ExposureScanner/1.0 (internal-security-audit)" ... show less	Hacking Web App Attack
🇫🇷 masterguru	2026-08-26 14:21:08 (6 days ago)	Host header is a numeric IP address. Pattern match "^ (920350-135)	Hacking Bad Web Bot
🇵🇱 nfsec.pl	2026-08-26 07:58:30 (6 days ago)	20.195.188.69 - - [26/Aug/2026:07:58:13 +0000] "GET /.env.production HTTP/1.1" 403 443 "-" "Exposure ... show more 20.195.188.69 - - [26/Aug/2026:07:58:13 +0000] "GET /.env.production HTTP/1.1" 403 443 "-" "ExposureScanner/1.0 (internal-security-audit)" 20.195.188.69 - - [26/Aug/2026:07:58:14 +0000] "GET /.env.development HTTP/1.1" 403 443 "https://147.135.209.161/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 20.195.188.69 - - [26/Aug/2026:07:58:14 +0000] "GET //.env.staging HTTP/1.1" 403 443 "https://147.135.209.161/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" 20.195.188.69 - - [26/Aug/2026:07:58:18 +0000] "GET /%2F.env HTTP/1.1" 404 440 "https://147.135.209.161/" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.195.188.69 - - [26/Aug/2026:07:58:29 +0000] "GET /.env~/ HTTP/1.1" 403 443 "https://147.135.209.161/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" ... show less	Web App Attack Exploited Host
🇬🇧 f3sc	2026-08-26 06:52:22 (6 days ago)	20.195.188.69 - - [26/Aug/2026:08:52:21 +0200] "GET /.aws/config HTTP/1.1" 404 738 "-" "ExposureScan ... show more 20.195.188.69 - - [26/Aug/2026:08:52:21 +0200] "GET /.aws/config HTTP/1.1" 404 738 "-" "ExposureScanner/1.0 (internal-security-audit)" show less	Hacking Web App Attack
🇺🇸 HamSammich	2026-08-26 00:24:06 (6 days ago)	Automated sensor: 4 HTTP connection/probe attempts over the last 24h (latest 2026-08-26T00:24Z).	Brute-Force Web App Attack
🇫🇷 LRNP	2026-08-25 23:59:13 (1 week ago)	_:80 20.195.188.69 - - [25/Aug/2026:23:58:38 +0000] "GET /.env.old HTTP/1.1" 404 146 "-" "ExposureSc ... show more _:80 20.195.188.69 - - [25/Aug/2026:23:58:38 +0000] "GET /.env.old HTTP/1.1" 404 146 "-" "ExposureScanner/1.0 (internal-security-audit)" _:80 20.195.188.69 - - [25/Aug/2026:23:58:39 +0000] "GET /docker/config.json HTTP/1.1" 404 146 "-" "ExposureScanner/1.0 (internal-security-audit)" _:80 20.195.188.69 - - [25/Aug/2026:23:58:40 +0000] "GET /database.php HTTP/1.1" 404 146 "-" "ExposureScanner/1.0 (internal-security-audit)" _:80 20.195.188.69 - - [25/Aug/2026:23:58:41 +0000] "GET /instance/config.py HTTP/1.1" 404 146 "-" "ExposureScanner/1.0 (internal-security-audit)" _:80 20.195.188.69 - - [25/Aug/2026:23:58:43 +0000] "GET /terraform.tfvars HTTP/1.1" 404 146 "-" "ExposureScanner/1.0 (internal-security-audit)" _:80 20.195.188.69 - - [25/Aug/2026:23:58:45 +0000] "GET /php_info.php HTTP/1.1" 404 146 "-" "ExposureScanner/1.0 (internal-security-audit)" _:443 20.195.188.69 - - [25/Aug/2026:23:58:51 +0000] "GET /.env.backup HTTP/1.1" 404 146 "-" "ExposureScanner/1.0 (internal-security-audit)" _ ... show less	Bad Web Bot Web App Attack
🇳🇱 tpjg	2026-08-25 20:54:54 (1 week ago)	Automated: 15 requests with error status in 120s window from 20.195.188.69. Evidence: /.env.prod:301 ... show more Automated: 15 requests with error status in 120s window from 20.195.188.69. Evidence: /.env.prod:301,/.env.old:301,/.env.old:301,/.env.prod:301,/.env.prod;:301,/.env.bak:301,/.env.bak:301,/.env.swp:301,/.env.swp:301,//.env.swp:301,/.env.development/:301,/.env.save:301,//.env.local:301,/.env.development:301,/.env.staging%00:301 (+35 more) show less	Web App Attack
🇫🇷 masterguru	2026-08-25 19:59:20 (1 week ago)	Host header is a numeric IP address. Pattern match "^ (920350-131)	Hacking Bad Web Bot
🇫🇷 COMAITE	2026-08-25 14:07:46 (1 week ago)	Suspicious URL access.	Web App Attack
🇫🇷 GabrielJST	2026-08-25 13:40:25 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 20.195.188.69 (BR/Brazil/-): (CF_ENABL ... show more (mod_security) mod_security triggered on hostname [redacted] 20.195.188.69 (BR/Brazil/-): (CF_ENABLE) show less	SQL Injection
Anonymous	2026-08-25 13:16:34 (1 week ago)	Web App Attack	Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.183

🇲🇦 197.146.22.70

🇺🇸 2607:f8b0:4004:c1f::122

🇫🇷 185.177.72.30

🇺🇸 154.83.197.130

🇺🇸 136.52.36.42

🇮🇳 103.194.242.86

🇺🇸 64.236.143.210

🇨🇳 47.109.19.198

🇳🇱 45.148.10.151

🇹🇹 38.190.143.31

🇮🇳 34.180.9.131

🇺🇸 23.168.104.141

🇮🇳 4.240.112.173

🇨🇳 221.122.98.175

🇰🇷 218.149.228.141

🇨🇱 191.112.7.166

🇦🇷 190.183.245.66

🇺🇸 174.179.100.65

🇧🇷 164.163.21.168