JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.206.107.78

20.206.107.78 was found in our database!

This IP was reported 424 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇧🇷 Brazil
City	Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.206.107.78

Whois 20.206.107.78

IP Abuse Reports for 20.206.107.78:

This IP address has been reported a total of 424 times from 298 distinct sources. 20.206.107.78 was first reported on July 17th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Bytemark	2026-07-19 04:39:32 (8 minutes ago)	20.206.107.78 - - [19/Jul/2026:05:39:06 +0100] "GET /wp-login.php HTTP/1.1" 301 537 "-" "-" 20.206.1 ... show more 20.206.107.78 - - [19/Jul/2026:05:39:06 +0100] "GET /wp-login.php HTTP/1.1" 301 537 "-" "-" 20.206.107.78 - - [19/Jul/2026:05:39:06 +0100] "GET /wp-login.php HTTP/1.1" 404 293 "-" "-" 20.206.107.78 - - [19/Jul/2026:05:39:30 +0100] "GET /xmlrpc.php HTTP/1.1" 301 533 "-" "-" show less	Brute-Force Web App Attack
🇺🇸 Epimetheus	2026-07-19 04:38:18 (9 minutes ago)	Unauthorized access attempts: [GET] /wp-content/themes/ [GET] /wp-admin/css/colors/midnight/ [GET] ... show more Unauthorized access attempts: [GET] /wp-content/themes/ [GET] /wp-admin/css/colors/midnight/ [GET] /wp-admin/user/index.php [GET] /wp-includes/pomo/ [GET] /wso.php [GET] /akcc.php [GET] /wp-includes/images/ [GET] /public/css.php [GET] /wp-content.php.php [GET] /wp-admin/css/colors/ UA: Unknown show less	Web App Attack
🇧🇪 taivas.nl	2026-07-19 04:32:43 (15 minutes ago)	Many_bad_calls	Web App Attack
🇩🇰 HostingGroup	2026-07-19 04:31:53 (16 minutes ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-07-19. show less	Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-19 04:31:13 (16 minutes ago)	[redacted] 20.206.107.78 - - [19/Jul/2026:05:31:09 +0100] "GET /[redacted] HTTP/1.1" 302 1554 0/6033 ... show more [redacted] 20.206.107.78 - - [19/Jul/2026:05:31:09 +0100] "GET /[redacted] HTTP/1.1" 302 1554 0/60334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 20.206.107.78 - - [19/Jul/2026:05:31:11 +0100] "GET /wp-includes/[redacted] HTTP/1.1" 302 1554 0/72883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇭🇺 DumaNet	2026-07-19 04:28:00 (20 minutes ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 18. 22:16:18 Source IP: 20.206.107.78 Portion o ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 18. 22:16:18 Source IP: 20.206.107.78 Portion of the log(s): 20.206.107.78 - [18/Jul/2026:22:16:18 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.107.78 - [18/Jul/2026:22:16:18 +0200] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.107.78 - [18/Jul/2026:22:16:18 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.107.78 - [18/Jul/2026:22:16:17 +0200] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.107.78 - [18/Jul/2026:22:16:17 show less	Web App Attack Hacking
🇧🇪 madeit	2026-07-19 04:27:19 (20 minutes ago)		Web App Attack
🇳🇱 CryptoYakari	2026-07-19 04:21:39 (26 minutes ago)	20.206.107.78 - - [19/Jul/2026:07:21:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.206.107.78 - - [19/Jul/2026:07:21:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 8030 "-" "-" 20.206.107.78 - - [19/Jul/2026:07:21:35 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.0" 404 3053 "-" "-" 20.206.107.78 - - [19/Jul/2026:07:21:35 +0300] "GET /admin.php HTTP/1.0" 404 3069 "-" "-" 20.206.107.78 - - [19/Jul/2026:07:21:35 +0300] "GET /public/css.php HTTP/1.0" 404 3056 "-" "-" 20.206.107.78 - - [19/Jul/2026:07:21:36 +0300] "GET /classwithtostring.php HTTP/1.0" 404 3059 "-" "-" ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇳🇱 i-turnradio.nl	2026-07-19 04:20:17 (27 minutes ago)	2026-07-19 @ 06:20:16 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-19 @ 06:20:16 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇲🇽 octageeks.com	2026-07-19 04:10:45 (37 minutes ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇮🇹 Inartis	2026-07-19 04:06:18 (41 minutes ago)	20.206.107.78 - - [19/Jul/2026:06:06:17 +0200] "GET /admin.php HTTP/1.1" 302 397 "-" "-" ...	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-07-19 04:02:49 (45 minutes ago)	[Sun Jul 19 05:02:46.438383 2026] [proxy_fcgi:error] [pid 1939144:tid 139826401629760] [client 20.20 ... show more [Sun Jul 19 05:02:46.438383 2026] [proxy_fcgi:error] [pid 1939144:tid 139826401629760] [client 20.206.107.78:55490] AH01071: Got error 'Primary script unknown' [Sun Jul 19 05:02:46.867609 2026] [proxy_fcgi:error] [pid 1939144:tid 139826393237056] [client 20.206.107.78:55490] AH01071: Got error 'Primary script unknown' [Sun Jul 19 05:02:47.330444 2026] [proxy_fcgi:error] [pid 1939144:tid 139826401629760] [client 20.206.107.78:55490] AH01071: Got error 'Primary script unknown' [Sun Jul 19 05:02:49.065627 2026] [proxy_fcgi:error] [pid 1939144:tid 139826527454784] [client 20.206.107.78:55490] AH01071: Got error 'Primary script unknown' [Sun Jul 19 05:02:49.487094 2026] [proxy_fcgi:error] [pid 1939144:tid 139826368058944] [client 20.206.107.78:55490] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇭🇺 DumaNet	2026-07-19 03:55:00 (53 minutes ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 18. 20:34:41 Source IP: 20.206.107.78 Portion o ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 18. 20:34:41 Source IP: 20.206.107.78 Portion of the log(s): 20.206.107.78 - [18/Jul/2026:20:34:41 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.107.78 - [18/Jul/2026:20:34:41 +0200] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.107.78 - [18/Jul/2026:20:34:41 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.107.78 - [18/Jul/2026:20:34:41 +0200] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.206.107.78 - [18/Jul/2026:20:34:40 show less	Web App Attack Hacking
🇫🇷 ol.st	2026-07-19 03:52:11 (55 minutes ago)	This IP accessed the path /wp-admin/js/autoload_classmap.php from Mozilla/5.0 (Windows NT 10.0; Win6 ... show more This IP accessed the path /wp-admin/js/autoload_classmap.php from Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36, which is banned. Powered by ListenCaddy show less	Bad Web Bot Web App Attack
🇬🇧 Smish	2026-07-19 03:48:25 (59 minutes ago)	HONEYPOT HIT --> Fail2ban time=1784432904 log=2026-07-19T04:48:24+01:00 ip=20.206.107.78 host=infra. ... show more HONEYPOT HIT --> Fail2ban time=1784432904 log=2026-07-19T04:48:24+01:00 ip=20.206.107.78 host=infra.bya.ac method=GET uri="/admin.php" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ref="-" rid=64f7023ff5b6a46619ca2291d8591b08 show less	Web App Attack

Showing 1 to 15 of 424 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.186.115.35

🇮🇷 5.237.86.117

🇧🇷 205.210.31.197

🇬🇧 188.240.59.6

🇬🇧 188.214.15.56

🇫🇷 185.241.143.14

🇨🇦 165.22.225.218

🇦🇷 148.222.217.240

🇨🇳 115.190.138.163

🇨🇳 111.225.214.177

🇵🇱 109.205.211.211

🇺🇸 66.132.172.224

🇳🇱 34.6.66.100

🇺🇸 216.25.89.83

🇫🇮 147.185.133.61

🇺🇸 147.185.132.176

🇺🇸 147.182.195.65

🇺🇸 142.147.131.155

🇮🇳 103.181.109.62

🇩🇪 69.5.169.176