JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.78.137.129

20.78.137.129 was found in our database!

This IP was reported 200 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.78.137.129

Whois 20.78.137.129

IP Abuse Reports for 20.78.137.129:

This IP address has been reported a total of 200 times from 155 distinct sources. 20.78.137.129 was first reported on July 8th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-10 03:10:51 (2 hours ago)	Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 20.78.137.129 172.71.100.160 - - [08/Jul/2026:10:32:20 ... show more Fail2Ban Jail s2: tomcat-honeypot \| Evidence: 20.78.137.129 172.71.100.160 - - [08/Jul/2026:10:32:20 -0300] "GET /adminfuns.php HTTP/1.1" 404 414 show less	Bad Web Bot
Anonymous	2026-07-09 12:03:39 (17 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-09 05:16:38 (1 day ago)	605 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/index.php HTTP/1.1 GET /item.php ... show more 605 attacks on ACME URLs, PHP URLs: GET /.well-known/acme-challenge/index.php HTTP/1.1 GET /item.php HTTP/1.1 show less	Web App Attack
🇧🇪 taivas.nl	2026-07-09 04:32:55 (1 day ago)	Many_bad_calls	Web App Attack
🇲🇽 octageeks.com	2026-07-09 04:24:30 (1 day ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇫🇷 SpaceHost-Server	2026-07-08 22:29:00 (1 day ago)		Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-08 22:03:25 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-08	Web App Attack SSH Hacking
Anonymous	2026-07-08 21:45:22 (1 day ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇵🇱 alianet	2026-07-08 21:13:30 (1 day ago)	[Wed Jul 08 11:02:49.421956 2026] [proxy_fcgi:error] [pid 1783980:tid 1784028] [client 20.78.137.129 ... show more [Wed Jul 08 11:02:49.421956 2026] [proxy_fcgi:error] [pid 1783980:tid 1784028] [client 20.78.137.129:19063] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:02:51.719676 2026] [proxy_fcgi:error] [pid 1783980:tid 1784069] [client 20.78.137.129:19063] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:02:52.929660 2026] [proxy_fcgi:error] [pid 1783980:tid 1784031] [client 20.78.137.129:19063] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:02:54.687320 2026] [proxy_fcgi:error] [pid 1783980:tid 1784029] [client 20.78.137.129:19063] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:02:55.840087 2026] [proxy_fcgi:error] [pid 1783980:tid 1784037] [client 20.78.137.129:19063] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:02:57.269737 2026] [proxy_fcgi:error] [pid 1783980:tid 1784076] [client 20.78.137.129:19063] AH01071: Got error 'Primary script unknown' [Wed Jul 08 11:02:58.495882 2026] [proxy_fcgi:error] [pid 1783980:tid 1784053] [client 2 ... show less	Port Scan Web App Attack
🇩🇰 ScamAware	2026-07-08 17:33:10 (1 day ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 2. Unique request paths counted internally: 2. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Web App Attack
🇺🇸 antlac1	2026-07-08 17:32:57 (1 day ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 ipblock.com	2026-07-08 17:26:00 (1 day ago)	IPBlock protected site ID [2711-bg]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-08 17:23:35 (1 day ago)	PSCSERV WPSCAN 20.78.137.129	Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-07-08 17:10:19 (1 day ago)	20.78.137.129 - - [09/Jul/2026:03:10:18 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 20.78.137.129 - - [09/Jul/2026:03:10:18 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 994 "-" "-" 20.78.137.129 - - [09/Jul/2026:03:10:18 +1000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 16 "-" "-" 20.78.137.129 - - [09/Jul/2026:03:10:18 +1000] "GET /admin.php HTTP/1.1" 404 16 "-" "-" 20.78.137.129 - - [09/Jul/2026:03:10:18 +1000] "GET /public/css.php HTTP/1.1" 404 994 "-" "-" 20.78.137.129 - - [09/Jul/2026:03:10:18 +1000] "GET /classwithtostring.php HTTP/1.1" 404 16 "-" "-" 20.78.137.129 - - [09/Jul/2026:03:10:18 +1000] "GET /wp-includes/block-supports/ HTTP/1.1" 404 994 "-" "-" ... show less	Bad Web Bot
🇺🇸 Epimetheus	2026-07-08 17:08:21 (1 day ago)	Zombie network / Bot scanner detected: [GET] /xmrlpc.php [GET] /cache.php [GET] /images/images/abou ... show more Zombie network / Bot scanner detected: [GET] /xmrlpc.php [GET] /cache.php [GET] /images/images/about.php [GET] /wp-includes/js/crop/ [GET] /wp-includes/images/smilies/ [GET] /index/function.php [GET] /wp-admin/js/widgets/ [GET] /wp-admin/network/ [GET] /wp-includes/js/crop/ [GET] /moon.php [GET] /akcc.php [GET] /sf.php [GET] /wp-login.php [GET] /wp-includes/rest-api/ [GET] /wp-includes/block-bindings/ [GET] /vendor/ [GET] /wp-includes/php-compat/ [GET] /wp-admin/maint/admin.php [GET] /o.php [GET] /classwithtostring.php [GET] /wp-admin/network/index.php [GET] /system_log.php [GET] /info.php [GET] /wp-admin/css/colors/ [GET] /wp-includes/blocks/shortcode/index.php [GET] /sf.php [GET] /cah.php [GET] /wp-includes/ID3/index.php [GET] /public/css.php [GET] /0x.php [GET] /wp-admin/css/ [GET] /wp-includes/js/ [GET] /403.php [GET] /222.php [GET] /k.php [GET] /gelay.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 200 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.162.204

🇨🇳 103.217.186.162

🇫🇷 91.231.89.131

🇨🇱 45.166.147.237

🇺🇸 162.216.149.250

🇧🇷 143.255.126.101

🇺🇸 96.78.175.41

🇺🇸 81.30.98.81

🇺🇸 71.6.134.230

🇺🇸 64.62.197.73

🇳🇱 45.142.193.169

🇬🇧 35.203.210.44

🇺🇸 34.222.58.93

🇺🇸 3.130.168.2

🇺🇸 216.25.89.68

🇷🇺 212.104.70.143

🇮🇳 209.38.121.186

🇹🇭 159.192.132.34

🇫🇮 95.216.147.230

🇺🇸 64.62.197.178