JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.196.199.78

Recent Activity

Abuse confidence score ?

100% Critical

1,107 reports

518 reporters · latest 8 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 20.196.199.78

Export CSV

This IP address has been reported a total of 1,107 times from 518 distinct sources. 20.196.199.78 was first reported on October 16th 2026, and the most recent report was 8 hours ago. In the last 60 days, the top reporter locations were: Germany with 287 reports; United States of America with 205 reports; France with 112 reports. The most common categories in these recent reports were: Web App Attack 849 times; Bad Web Bot 295 times; Brute-Force 263 times; Hacking 217 times; Port Scan 71 times; Other 161 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2026-10-27 13:07:52 (8 hours ago)	Unauthorized web scan.	Web App Attack
🇩🇪 ghostwarriors	2026-10-27 00:21:58 (20 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rayulcifer	2026-10-26 21:22:32 (23 hours ago)	[Fri Oct 16 16:39:43.840001 2026] [authz_core:error] [pid 2412939:tid 134154472351424] [client 20.19 ... show more [Fri Oct 16 16:39:43.840001 2026] [authz_core:error] [pid 2412939:tid 134154472351424] [client 20.196.199.78:28909] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Fri Oct 16 16:39:44.025039 2026] [authz_core:error] [pid 2412939:tid 134154360444608] [client 20.196.199.78:28909] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Fri Oct 16 16:39:44.209873 2026] [authz_core:error] [pid 2412939:tid 134152565290688] [client 20.196.199.78:28909] AH01630: client denied by server configuration: proxy:http://localhost:4000/init-notica.php [Fri Oct 16 16:39:44.395781 2026] [authz_core:error] [pid 2412939:tid 134153756464832] [client 20.196.199.78:28909] AH01630: client denied by server configuration: proxy:http://localhost:4000/index/function.php [Fri Oct 16 16:39:44.580509 2026] [authz_core:error] [pid 2412939:tid 134152414287552] [client 20.196.199.78:28909] AH ... show less	Brute-Force SSH
🇩🇪 rh24	2026-10-25 20:00:08 (2 days ago)	HTTP flood or excessive requests, blocked by host firewall.	DDoS Attack Web App Attack
Anonymous	2026-10-25 19:47:21 (2 days ago)	$f2bV_matches	Brute-Force
🇳🇱 Alt255	2026-10-25 13:15:58 (2 days ago)	[topuurbd] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 20 ... show more [topuurbd] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 20.196.199.78 - - \[18/Oct/2026:15:47:05 +0200\] "GET /adminer.php HTTP/1.1" 301 579 "-" "-" 20.196.199.78 - - \[18/Oct/2026:15:47:06 +0200\] "GET /adminer.php HTTP/1.1" 503 6996 "-" "-" ... show less	Bad Web Bot Web App Attack
🇩🇪 rh24	2026-10-24 20:00:07 (3 days ago)	HTTP flood or excessive requests, blocked by host firewall.	DDoS Attack Web App Attack
🇦🇺 CalmBrain	2026-10-24 16:00:56 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-10-24 13:46:05 (3 days ago)	fail2ban jail apache-scanner: 20.196.199.78 - - [16/Oct/2026:10:46:37 -0700] "GET /yich.php HTTP/1.1 ... show more fail2ban jail apache-scanner: 20.196.199.78 - - [16/Oct/2026:10:46:37 -0700] "GET /yich.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:38 -0700] "GET /kk00.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:39 -0700] "GET /wp-logis.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:39 -0700] "GET /g1.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:40 -0700] "GET /2.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:40 -0700] "GET /robots.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:41 -0700] "GET /k.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:42 -0700] "GET /w.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:42 -0700] "GET /images.php HTTP/1.1" 404 65489 "-" "-" 20.196.199.78 - - [16/Oct/2026:10:46:43 -0700] "GET /alls.php HTTP/1.1" 404 65489 "-" "-" show less	Web App Attack Port Scan
🇨🇦 zXero	2026-10-24 12:51:49 (3 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇺🇸 Rayulcifer	2026-10-23 11:08:23 (4 days ago)	[Sat Oct 17 08:17:48.805797 2026] [access_compat:error] [pid 1116762:tid 126876991055552] [client 20 ... show more [Sat Oct 17 08:17:48.805797 2026] [access_compat:error] [pid 1116762:tid 126876991055552] [client 20.196.199.78:40116] AH01797: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php [Sat Oct 17 08:17:48.989301 2026] [access_compat:error] [pid 1116762:tid 126876756473536] [client 20.196.199.78:40116] AH01797: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php [Sat Oct 17 08:17:49.185051 2026] [access_compat:error] [pid 1116762:tid 126876731295424] [client 20.196.199.78:40116] AH01797: client denied by server configuration: proxy:http://localhost:4000/init-notica.php [Sat Oct 17 08:17:49.368489 2026] [access_compat:error] [pid 1116762:tid 126876706117312] [client 20.196.199.78:40116] AH01797: client denied by server configuration: proxy:http://localhost:4000/index/function.php [Sat Oct 17 08:17:49.556291 2026] [access_compat:error] [pid 1116762:tid 126875395421888] [client 20.196.1 ... show less	Brute-Force SSH
🇫🇮 ☠\|ʂɧąɖơῳ\|☠	2026-10-23 06:24:56 (4 days ago)	[2026-10-23 06:24:56 UTC] Malicious User-Agent/scanning tool detected from 20.196.199.78 () UA: unkn ... show more [2026-10-23 06:24:56 UTC] Malicious User-Agent/scanning tool detected from 20.196.199.78 () UA: unknown PATHS: unknown show less	Bad Web Bot Web App Attack
🇬🇧 sc user	2026-10-23 05:51:09 (4 days ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇧🇷 Peregrine	2026-10-23 03:13:44 (4 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.196.199.78 141.101.84.137 - - [19/Oct/2026:03:55 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 20.196.199.78 141.101.84.137 - - [19/Oct/2026:03:55:27 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇨🇱 Fernando Soto	2026-10-23 03:05:52 (4 days ago)	WAF propio vps1 (CL): abuseipdb_ext100 score 8 en 1h. actividad hostil.	Bad Web Bot

Showing 1 to 15 of 1107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.233

🇺🇸 173.249.217.38

🇦🇷 153.67.181.231

🇨🇳 112.102.84.105

🇧🇩 103.134.31.40

🇺🇸 66.132.159.131

🇮🇩 36.75.0.144

🇨🇳 8.129.229.164

🇬🇧 198.244.183.52

🇧🇷 191.241.3.72

🇲🇽 189.140.1.53

🇺🇸 184.186.73.96

🇨🇳 118.196.86.3

🇬🇧 54.38.147.120

🇩🇪 43.228.157.59

🇺🇸 20.29.59.15

🇰🇷 1.235.183.146

🇳🇱 200.138.46.96

🇵🇱 195.88.180.51

🇨🇴 181.141.209.6