JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

20.197.3.34

Neutral Activity

Abuse confidence score ?

0% Low Risk

31 reports

19 reporters · latest 4 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

20.197.3.34 has been reported 31 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 20.197.3.34

Export CSV

This IP address has been reported a total of 31 times from 19 distinct sources. 20.197.3.34 was first reported on September 5th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-09-20 05:10:24 (4 years ago)	[Tue Sep 20 11:10:21.707399 2022] [fcgid:warn] [pid 3297:tid 140627077486336] [client 20.197.3.34:60 ... show more [Tue Sep 20 11:10:21.707399 2022] [fcgid:warn] [pid 3297:tid 140627077486336] [client 20.197.3.34:60484] mod_fcgid: stderr: WP User : admin authentication failure \| IP : 20.197.3.34 \| URL https://rue-du-bagage.com/wp-admin/ [Tue Sep 20 11:10:22.404783 2022] [fcgid:warn] [pid 3093:tid 140628193158912] [client 20.197.3.34:60556] mod_fcgid: stderr: WP User : admin authentication failure \| IP : 20.197.3.34 \| URL https://rue-du-bagage.com/wp-admin/ [Tue Sep 20 11:10:23.751994 2022] [fcgid:warn] [pid 3297:tid 140627085879040] [client 20.197.3.34:60722] mod_fcgid: stderr: WP User : admin authentication failure \| IP : 20.197.3.34 \| URL https://rue-du-bagage.com/wp-admin/ ... show less	Brute-Force Web App Attack
🇺🇸 tradenet	2022-09-20 04:32:23 (4 years ago)	20.197.3.34 - - [20/Sep/2022:03:32:16 -0500] "POST //xmlrpc.php HTTP/2.0" 200 212 "-" "Mozilla/5.0 ( ... show more 20.197.3.34 - - [20/Sep/2022:03:32:16 -0500] "POST //xmlrpc.php HTTP/2.0" 200 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.197.3.34 - - [20/Sep/2022:03:32:16 -0500] "POST //xmlrpc.php HTTP/2.0" 200 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.197.3.34 - - [20/Sep/2022:03:32:17 -0500] "POST //xmlrpc.php HTTP/2.0" 200 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.197.3.34 - - [20/Sep/2022:03:32:18 -0500] "POST //xmlrpc.php HTTP/2.0" 200 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.197.3.34 - - [20/Sep/2022:03:32:18 -0500] "POST //xmlrpc.php HTTP/2.0" 200 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 ... show less	Bad Web Bot Web App Attack
Anonymous	2022-09-20 03:01:31 (4 years ago)	chaangnoifulda.de 20.197.3.34 [20/Sep/2022:09:01:29 +0200] "POST //xmlrpc.php HTTP/1.1" 200 682 "-" ... show more chaangnoifulda.de 20.197.3.34 [20/Sep/2022:09:01:29 +0200] "POST //xmlrpc.php HTTP/1.1" 200 682 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" chaangnoifulda.de 20.197.3.34 [20/Sep/2022:09:01:30 +0200] "POST //xmlrpc.php HTTP/1.1" 200 5938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Web App Attack
🇩🇪 Sklurk	2022-09-19 17:34:04 (4 years ago)	Web App Attack	Web App Attack
🇬🇧 BRHosting	2022-09-19 16:57:07 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇩🇪 nextweb	2022-09-19 14:12:26 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.197.3.34 (IN/India/Maharashtra/Pune/-/[AS807 ... show more (mod_security) mod_security (id:210410) triggered by 20.197.3.34 (IN/India/Maharashtra/Pune/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇨🇦 mitsurugi	2022-09-19 08:54:02 (4 years ago)	WordPress xmlrpc attack.	Brute-Force Web App Attack
Anonymous	2022-09-19 07:44:29 (4 years ago)	[Mon Sep 19 13:44:27.244284 2022] [fcgid:warn] [pid 15566:tid 140189301188352] [client 20.197.3.34:6 ... show more [Mon Sep 19 13:44:27.244284 2022] [fcgid:warn] [pid 15566:tid 140189301188352] [client 20.197.3.34:62557] mod_fcgid: stderr: WP User : elliot authentication failure \| IP : 20.197.3.34 \| URL https://www.eruanna.net/wp-admin/ [Mon Sep 19 13:44:27.980658 2022] [fcgid:warn] [pid 15566:tid 140192483407616] [client 20.197.3.34:62727] mod_fcgid: stderr: WP User : elliot authentication failure \| IP : 20.197.3.34 \| URL https://www.eruanna.net/wp-admin/ [Mon Sep 19 13:44:29.390920 2022] [fcgid:warn] [pid 15566:tid 140191549351680] [client 20.197.3.34:63152] mod_fcgid: stderr: WP User : elliot authentication failure \| IP : 20.197.3.34 \| URL https://www.eruanna.net/wp-admin/ ... show less	Brute-Force Web App Attack
🇩🇪 rh24	2022-09-19 06:49:52 (4 years ago)	(wordpress) Failed wordpress login from 20.197.3.34 (IN/India/-): (CF_ENABLE)	Brute-Force
Anonymous	2022-09-18 22:20:18 (4 years ago)	20.197.3.34 - - [19/Sep/2022:04:20:17 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10. ... show more 20.197.3.34 - - [19/Sep/2022:04:20:17 +0200] "GET / HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.197.3.34 - - [19/Sep/2022:04:20:17 +0200] "GET //feed/ HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.197.3.34 - - [19/Sep/2022:04:20:17 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.197.3.34 - - [19/Sep/2022:04:20:17 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.197.3.34 - - [19/Sep/2022:04:20:17 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 470 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro ... show less	Web App Attack
🇩🇪 maxxsense	2022-09-18 17:39:36 (4 years ago)	(wordpress) Failed wordpress login from 20.197.3.34 (IN/India/-)	Brute-Force
🇩🇪 nextweb	2022-09-18 06:28:22 (4 years ago)	(mod_security) mod_security (id:210410) triggered by 20.197.3.34 (IN/India/Maharashtra/Pune/-/[AS807 ... show more (mod_security) mod_security (id:210410) triggered by 20.197.3.34 (IN/India/Maharashtra/Pune/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇸🇬 pusathosting.com	2022-09-18 06:15:04 (4 years ago)	uvcm 20.197.3.34 [18/Sep/2022:17:14:58 "http://www.bigdaymart.com//wp-login.php" "POST //wp-login.ph ... show more uvcm 20.197.3.34 [18/Sep/2022:17:14:58 "http://www.bigdaymart.com//wp-login.php" "POST //wp-login.php 200 7000 20.197.3.34 [18/Sep/2022:17:14:59 "http://www.bigdaymart.com//wp-login.php" "POST //wp-login.php 200 7000 20.197.3.34 [18/Sep/2022:17:14:59 "http://www.bigdaymart.com//wp-login.php" "POST //wp-login.php 200 7000 show less	Brute-Force Web App Attack
🇬🇧 findlab	2022-09-14 17:21:52 (4 years ago)	Backdrop CMS module - Request: //xmlrpc.php?rsd	Bad Web Bot Web App Attack
🇩🇪 expandmade.com	2022-09-14 09:59:21 (4 years ago)	trolling for installation vulnerabilities [14/Sep/2022:13:59:21 "GET //2020/wp-includes/wlwmanifest. ... show more trolling for installation vulnerabilities [14/Sep/2022:13:59:21 "GET //2020/wp-includes/wlwmanifest.xml"] show less	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 190.112.210.251

🇻🇳 103.141.176.102

🇬🇧 35.214.40.143

🇨🇦 35.203.113.114

🇻🇳 14.224.181.58

🇰🇷 210.204.108.48

🇵🇰 182.184.219.37

🇧🇾 178.120.54.3

🇺🇸 146.190.74.52

🇸🇬 104.43.56.65

🇺🇸 96.3.173.178

🇬🇧 87.236.176.142

🇧🇪 35.205.242.25

🇰🇷 221.159.119.6

🇧🇷 201.139.186.238

🇮🇳 152.58.138.24

🇺🇸 134.209.211.232

🇨🇦 85.217.149.62

🇲🇦 41.249.40.82

🇺🇸 24.144.94.246