JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 69.5.20.189

69.5.20.189 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇮🇩 Indonesia
City	Sewon, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 69.5.20.189

Whois 69.5.20.189

IP Abuse Reports for 69.5.20.189:

This IP address has been reported a total of 37 times from 31 distinct sources. 69.5.20.189 was first reported on July 24th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 natdem.org	2026-07-25 08:01:31 (18 hours ago)	Web: Config file probe, .env file probe, Automated (python)	Web App Attack Hacking
🇮🇳 evicky2002	2026-07-25 06:00:00 (20 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 CollideTech	2026-07-25 02:57:24 (23 hours ago)	probing for vulnerabilities	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-07-24 21:15:42 (1 day ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇺🇸 uchat-ai.com	2026-07-24 15:58:08 (1 day ago)	IP 69.5.20.189 在过去24小时内进行了 67 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data ... show more IP 69.5.20.189 在过去24小时内进行了 67 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No show less	Web App Attack
Anonymous	2026-07-24 13:00:08 (1 day ago)	Attack detected: 69.5.20.189 [2026-07-24] Categories: 18 --- xmlrpc abuse (30 hits) --- 69.5.20.189 ... show more Attack detected: 69.5.20.189 [2026-07-24] Categories: 18 --- xmlrpc abuse (30 hits) --- 69.5.20.189 - - [24/Jul/2026:12:35:00 +0000] "GET /xmlrpc.php.bak HTTP/2.0" 404 85771 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 882923 69.5.20.189 - - [24/Jul/2026:12:35:07 +0000] "GET /xmlrpc.php.old HTTP/2.0" 404 85763 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 925632 69.5.20.189 - - [24/Jul/2026:12:35:09 +0000] "GET /xmlrpc.php.txt HTTP/2.0" 404 85759 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 1012258 69.5.20.189 - - [24/Jul/2026:12:35:12 +0000] "GET /xmlrpc.php;.js HTTP/2.0" 404 85759 "-" "curl/7.68.0" 909415 69.5.20.189 - - [24/Jul/2026:12:35:14 +0000] "GET /xmlrpc.php::$DATA HTTP/2.0" 404 85763 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 850263 show less	Brute-Force
🇺🇸 antlac1	2026-07-24 12:54:55 (1 day ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 Rayulcifer	2026-07-24 12:20:32 (1 day ago)	69.5.20.189 - - [24/Jul/2026:07:20:31 -0500] "GET /.env.staging HTTP/1.1" 403 6732 "-" "curl/7.68.0" ... show more 69.5.20.189 - - [24/Jul/2026:07:20:31 -0500] "GET /.env.staging HTTP/1.1" 403 6732 "-" "curl/7.68.0" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇩🇪 konseptit	2026-07-24 11:35:20 (1 day ago)	(CT) IP 69.5.20.189 (ID/Indonesia/-) found to have 526 connections	DDoS Attack
🇮🇪 AutosOnShow	2026-07-24 11:27:05 (1 day ago)	blocked for webapp attack \| path requested: / \| seen at 2026-07-24 11:26:38.394 \|	Web App Attack
🇺🇸 ne1for23	2026-07-24 11:26:06 (1 day ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 69.5.20.189 - - [24/Jul/2026:11:26:06 +0000] "GET / HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "-" show less	Hacking
🇺🇸 Bro Charlie	2026-07-24 10:45:32 (1 day ago)	69.5.20.189 - - [24/Jul/2026:18:45:30 +0800] "GET / HTTP/1.1" 200 130 "-" "python-requests/2.28.0" " ... show more 69.5.20.189 - - [24/Jul/2026:18:45:30 +0800] "GET / HTTP/1.1" 200 130 "-" "python-requests/2.28.0" "-" 69.5.20.189 - - [24/Jul/2026:18:45:30 +0800] "GET / HTTP/1.1" 200 130 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "-" 69.5.20.189 - - [24/Jul/2026:18:45:30 +0800] "GET /config.json HTTP/1.1" 404 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "-" 69.5.20.189 - - [24/Jul/2026:18:45:30 +0800] "GET /.env HTTP/1.1" 404 150 "-" "python-requests/2.28.0" "-" 69.5.20.189 - - [24/Jul/2026:18:45:30 +0800] "GET /.git/config HTTP/1.1" 404 150 "-" "python-requests/2.28.0" "-" 69.5.20.189 - - [24/Jul/2026:18:45:30 +0800] "GET /.env.local HTTP/1.1" 404 150 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" 69.5.20.189 - - [24/Jul/2026:18:45:30 +0800] "GET /credentials.json HTTP/1.1" 404 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120 ... show less	DDoS Attack
🇮🇪 AutosOnShow	2026-07-24 10:43:05 (1 day ago)	blocked for webapp attack \| path requested: / \| seen at 2026-07-24 10:42:53.180 \|	Web App Attack
🇨🇳 Peter Yu	2026-07-24 10:39:19 (1 day ago)		Bad Web Bot Web App Attack
🇨🇦 Aleigo Abuse	2026-07-24 09:47:00 (1 day ago)	[nginx-404] Ban 69.5.20.189	DDoS Attack Brute-Force Exploited Host Hacking

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 210.245.20.230

🇧🇷 186.235.163.212

🇳🇱 185.223.235.19

🇧🇷 177.37.149.75

🇺🇸 167.99.235.237

🇨🇳 119.96.96.14

🇭🇰 2a09:bac5:398f:e6::17:358

🇺🇸 2607:fa18:0:2::57af

🇮🇳 2400:6180:100:d0::8cf:7001

🇸🇬 172.237.71.185

🇺🇸 170.187.165.242

🇺🇸 154.193.18.8

🇧🇯 137.255.13.44

🇨🇳 106.13.70.73

🇺🇸 104.152.52.236

🇰🇼 94.187.171.125

🇹🇷 94.154.43.103

🇲🇽 38.49.154.30

🇬🇧 35.203.211.46

🇧🇷 20.195.181.10