This IP address has been reported a total of
11
times from
8 distinct
sources.
195.3.134.38 was first reported on
November 6th 2025 , and the most recent report was
3 weeks ago India
with 3
reports;
France
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Brute-Force
3
times;
Bad Web Bot
1
time;
Hacking
1
time;
DDoS Attack
1
time;
Web App Attack
1
time.
Old Reports
The most recent abuse report for this IP address is from
3 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
zulzeen
2026-09-10 23:09:09
(3 weeks ago)
[incypit-web] Blocked by SysWarden Firewall [GEO] (Web Attack)
Hacking
Web App Attack
🇺🇸
kosada.com
2026-08-25 12:38:01
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇳
Bharat Datacenter
2026-08-14 06:41:53
(1 month ago)
15: date=2026-08-14 time=11:33:34 eventtime=1786687414652916401 tz="+0530" logid="0720018432" type=" ...
show more
15: date=2026-08-14 time=11:33:34 eventtime=1786687414652916401 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=195.3.134.38 srccountry="Russian Federation" dstip=198.105.113.205 dstcountry="Netherlands" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=138337 attack="tcp_syn_flood" srcport=37354 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4441 > threshold 2000, repeats 138337 times since last log, pps 4485 of prior second" crscore=50 craction=4096 crlevel="critical"
show less
Brute-Force
🇮🇳
Bharat Datacenter
2026-08-14 06:25:15
(1 month ago)
9: date=2026-08-14 time=11:33:34 eventtime=1786687414652916401 tz="+0530" logid="0720018432" type="u ...
show more
9: date=2026-08-14 time=11:33:34 eventtime=1786687414652916401 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=195.3.134.38 srccountry="Russian Federation" dstip=198.105.113.205 dstcountry="Netherlands" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=138337 attack="tcp_syn_flood" srcport=37354 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4441 > threshold 2000, repeats 138337 times since last log, pps 4485 of prior second" crscore=50 craction=4096 crlevel="critical"
show less
Brute-Force
🇮🇳
Bharat Datacenter
2026-08-14 06:08:53
(1 month ago)
2: date=2026-08-14 time=11:33:34 eventtime=1786687414652916401 tz="+0530" logid="0720018432" type="u ...
show more
2: date=2026-08-14 time=11:33:34 eventtime=1786687414652916401 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=195.3.134.38 srccountry="Russian Federation" dstip=198.105.113.205 dstcountry="Netherlands" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=138337 attack="tcp_syn_flood" srcport=37354 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4441 > threshold 2000, repeats 138337 times since last log, pps 4485 of prior second" crscore=50 craction=4096 crlevel="critical"
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-08-04 12:26:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 195.3.134.38 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 195.3.134.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 08:25:19.578304 2026] [security2:error] [pid 4096099:tid 4096099] [client 195.3.134.38:46052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drrw.net"] [uri "/api/.env"] [unique_id "anHaL0O3_EyLFSHXI6v7sgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-01 08:35:18
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
SMARTNET
2026-05-27 06:03:53
(4 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 5b730afc-5cec-4742-843f-18085cc64e5c
DDoS Attack
🇷🇺
Agrohim
2026-04-28 00:33:47
(5 months ago)
Gate Inet blocked for categories:
DDoS Attack
Ping of Death
Port Scan
Hacking
Brute-Force
2025-11-15 18:05:32
(10 months ago)
scanning http requests from known botnet
Web App Attack
🇩🇪
Nerdscave Hosting
2025-11-06 04:21:27
(10 months ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
Showing 1 to
11
of 11 reports
