JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.189.95.20

206.189.95.20 was found in our database!

This IP was reported 2,141 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.189.95.20

Whois 206.189.95.20

IP Abuse Reports for 206.189.95.20:

This IP address has been reported a total of 2,141 times from 636 distinct sources. 206.189.95.20 was first reported on July 30th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 zwebvigil	2026-03-26 15:21:13 (2 months ago)	206.189.95.20 [26/Mar/2026:08:21:01 -0700] "GET /.aws/credentials HTTP/1.1" 404 2697 "-" port=39832 ... show more 206.189.95.20 [26/Mar/2026:08:21:01 -0700] "GET /.aws/credentials HTTP/1.1" 404 2697 "-" port=39832 "Go-http-client/1.1" "-" "-" "<ipaddr>" 2102 206.189.95.20 [26/Mar/2026:08:21:02 -0700] "GET /.aws/credentials.gpg HTTP/1.1" 404 2705 "-" port=39832 "Go-http-client/1.1" "-" "-" "<ipaddr>" 1049 206.189.95.20 [26/Mar/2026:08:21:04 -0700] "GET /.s3cfg HTTP/1.1" 404 2677 "-" port=39832 "Go-http-client/1.1" "-" "-" "<ipaddr>" 1380 206.189.95.20 [26/Mar/2026:08:21:05 -0700] "GET /.passwd-s3fs HTTP/1.1" 404 2689 "-" port=39832 "Go-http-client/1.1" "-" "-" "<ipaddr>" 701 206.189.95.20 [26/Mar/2026:08:21:07 -0700] "GET /s3cmd.ini HTTP/1.1" 404 2683 "-" port=39832 "Go-http-client/1.1" "-" "-" "<ipaddr>" 735 206.189.95.20 [26/Mar/2026:08:21:09 -0700] "GET /.env HTTP/1.1" 404 2673 "-" port=39832 "Go-http-client/1.1" "-" "-" "<ipaddr>" 749 206.189.95.20 [26/Mar/2026:08:21:10 -0700] "GET /.env.backup HTTP/1.1" 404 2687 "-" port=39832 "Go-http show less	Web App Attack
🇺🇸 mashamal	2026-03-26 14:30:27 (2 months ago)	Vulnerability Probe ...	Web App Attack
🇳🇱 wlt-blocker	2026-03-26 07:59:23 (2 months ago)	Unauthorized access to webpage admin	Web App Attack
🇧🇪 voormedia	2026-03-25 11:42:05 (2 months ago)	Accessed trap at '/.aws/credentials'	Web App Attack
🇺🇸 lime	2026-03-18 10:43:37 (2 months ago)	[Wed Mar 18 10:43:35.819491 2026] [php7:error] [pid 3523025] [client 206.189.95.20:44604] script '/v ... show more [Wed Mar 18 10:43:35.819491 2026] [php7:error] [pid 3523025] [client 206.189.95.20:44604] script '/var/www/html/phpinfo.php' not found or unable to stat [Wed Mar 18 10:43:37.366237 2026] [php7:error] [pid 3523025] [client 206.189.95.20:44604] script '/var/www/html/info.php' not found or unable to stat show less	Hacking Web App Attack
🇺🇸 mnsf	2026-03-18 08:05:22 (2 months ago)	Too many Status 50X (15) Scanning/Probing (12)	Brute-Force Web App Attack
🇺🇸 ANTI SCANNER	2026-03-18 06:50:01 (2 months ago)	Scanner : /.env.backup	Web Spam
🇺🇦 exegoist	2026-03-13 07:42:00 (2 months ago)	multiple restricted files access (.env and such)	Web App Attack
🇷🇸 Smel	2026-03-12 08:22:09 (3 months ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇪🇸 loadsoporte	2026-03-12 06:39:19 (3 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 kosada.com	2026-03-12 05:41:20 (3 months ago)	Web vulnerability probing: /.env	Web App Attack
🇩🇪 Mr-Money	2026-03-12 01:35:58 (3 months ago)	scenario: crowdsecurity/http-sensitive-files - events: 5	Web App Attack Hacking
Anonymous	2026-03-12 01:32:38 (3 months ago)	206.189.95.20 - - [12/Mar/2026:02:32:38 +0100] "GET /.aws/credentials HTTP/2.0" 301 169 "-" "Go-http ... show more 206.189.95.20 - - [12/Mar/2026:02:32:38 +0100] "GET /.aws/credentials HTTP/2.0" 301 169 "-" "Go-http-client/2.0" show less	Bad Web Bot
🇺🇸 masterguru	2026-03-11 10:45:22 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-128) show less	Bad Web Bot
Anonymous	2026-03-11 03:28:34 (3 months ago)	206.189.95.20 - - [10/Mar/2026:22:28:16 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Go-http-client/1.1" ... show more 206.189.95.20 - - [10/Mar/2026:22:28:16 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 206.189.95.20 206.189.95.20 - - [10/Mar/2026:22:28:18 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 206.189.95.20 206.189.95.20 - - [10/Mar/2026:22:28:19 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 206.189.95.20 206.189.95.20 - - [10/Mar/2026:22:28:21 -0500] "GET /.env.config HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 206.189.95.20 206.189.95.20 - - [10/Mar/2026:22:28:23 -0500] "GET /.env.dev HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 206.189.95.20 206.189.95.20 - - [10/Mar/2026:22:28:25 -0500] "GET /.env.live HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 206.189.95.20 206.189.95.20 - - [10/Mar/2026:22:28:27 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 206.189.95.20 206.189.95.20 - - [10/Mar/2026:22:28:29 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 206.189.95.20 206.189.95.20 - - [10/Mar/2026:22:28:31 -05 ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 2141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:18c:0:192::e0:172

🇺🇸 209.90.232.249

🇨🇴 190.60.45.197

🇺🇸 163.192.217.140

🇫🇮 147.185.133.100

🇨🇳 113.116.247.168

🇧🇷 45.229.156.142

🇺🇸 18.213.27.222

🇺🇦 195.26.18.82

🇨🇴 190.65.59.53

🇨🇳 125.47.206.198

🇮🇳 122.187.227.198

🇦🇺 103.232.164.116

🇺🇸 52.176.211.73

🇨🇦 52.139.36.83

🇰🇿 37.151.58.74

🇸🇪 5.133.192.146

🇮🇷 2.180.194.23

🇰🇷 221.162.3.119

🇸🇪 213.66.197.199