JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.29.78

178.20.29.78 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 2%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.29.78

Whois 178.20.29.78

IP Abuse Reports for 178.20.29.78:

This IP address has been reported a total of 19 times from 16 distinct sources. 178.20.29.78 was first reported on June 9th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-06-04 08:56:45 (1 week ago)	178.20.29.78 - - [04/Jun/2026:10:56:44 +0200] "POST /xmlrpc.php HTTP/2.0" 403 433 "-" "Mozilla/5.0 ( ... show more 178.20.29.78 - - [04/Jun/2026:10:56:44 +0200] "POST /xmlrpc.php HTTP/2.0" 403 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-15 17:26:28 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 178.20.29.78 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 178.20.29.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 12:26:21.977561 2025] [security2:error] [pid 29999:tid 29999] [client 178.20.29.78:45821] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|plumpen.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "plumpen.com"] [uri "/"] [unique_id "aRi3vRPtP3i2T2jfMdlYNAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2025-07-20 19:43:23 (10 months ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa01]	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2025-06-20 12:34:00 (11 months ago)	Web password guessing	Brute-Force
Anonymous	2025-06-13 11:25:25 (1 year ago)	Gateway / Website scripted login attempts	Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack
🇮🇹 Progetto1	2025-06-02 02:43:01 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2025-05-27 15:47:22 (1 year ago)	Failed Wordpress Logins	Web App Attack
🇪🇸 10dencehispahard SL	2025-05-27 05:42:03 (1 year ago)	DDOS fasthttp	DDoS Attack
🇺🇸 nowyouknow	2025-05-13 20:39:39 (1 year ago)	(From [email protected]) We have partnered with one of the largest public relations firms on the ... show more (From [email protected]) We have partnered with one of the largest public relations firms on the east coast, Kotton Grammer Media, and we're developing a media piece on how chiropractors are using AI to stay competitive. We are looking to conduct a 7-min interview via email/zoom with a few business owners from Henrico, and get your feedback & thoughts on our Voice AI technology. In return, your feedback will be used in an upcoming article that will be published - a great way to bring positive attention to your business at no cost. Want more information? Best, Scotlyn Lozano Relationship Manager FromFuture.io show less	Phishing Web Spam
🇨🇭 backslash	2025-05-01 13:35:03 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇦 wil.com	2025-04-01 10:52:49 (1 year ago)	GlobalProtect login attempts with user NATALIES.	VPN IP Brute-Force
🇨🇿 lp	2025-03-17 01:21:44 (1 year ago)	Unauthorized VPN login attempts: 3 attempts were recorded from 178.20.29.78 2025-03-17T01:23:27+01:0 ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 178.20.29.78 2025-03-17T01:23:27+01:00 vpn Access-Reject 'johnos' station: 178.20.29.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-03-17T01:28:46+01:00 vpn Access-Reject 'johnnycat' station: 178.20.29.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-03-17T01:30:05+01:00 vpn Access-Reject 'jefftest' station: 178.20.29.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-16 02:50:36 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.29.78 2025-03-16T02:50:51+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 178.20.29.78 2025-03-16T02:50:51+01:00 vpn Access-Reject 'junebug' station: 178.20.29.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-15 04:22:17 (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 178.20.29.78 2025-03-15T03:47:54+01:0 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 178.20.29.78 2025-03-15T03:47:54+01:00 vpn Access-Reject 'discover' station: 178.20.29.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-03-15T03:52:40+01:00 vpn Access-Reject 'quincy' station: 178.20.29.78 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇭 backslash	2025-03-12 09:00:22 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.116.59.144

🇧🇷 189.114.136.231

🇻🇪 154.62.123.117

🇭🇰 152.32.189.59

🇨🇦 142.93.153.43

🇻🇳 103.179.172.233

🇩🇪 69.5.169.127

🇺🇸 2001:470:1:fb5::22b

🇪🇸 193.125.46.254

🇦🇷 190.221.217.137

🇭🇰 152.32.171.99

🇯🇵 124.156.212.23

🇨🇳 123.145.9.253

🇺🇸 104.248.77.54

🇩🇪 57.129.5.143

🇺🇸 47.88.94.171

🇳🇱 45.148.10.151

🇬🇧 45.82.76.117

🇺🇸 20.65.194.183

🇺🇸 205.210.31.77