|
🇧🇷
ICS Labs
|
|
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-21 UTC.
|
Brute-Force
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
34.95.42.38 - - [21/Oct/2026:06:44:41 -0500] "GET /.env.supabase HTTP/1.1" 403 199 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.95.42.38
34.95.42.38 - - [21/Oct/2026:06:44:42 -0500] "GET /.env.secret HTTP/1.1" 403 199 "-" "Mozill ...
show more
34.95.42.38 - - [21/Oct/2026:06:44:41 -0500] "GET /.env.supabase HTTP/1.1" 403 199 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.95.42.38
34.95.42.38 - - [21/Oct/2026:06:44:42 -0500] "GET /.env.secret HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.95.42.38
34.95.42.38 - - [21/Oct/2026:06:44:42 -0500] "GET /.env.dev.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.95.42.38
34.95.42.38 - - [21/Oct/2026:06:44:42 -0500] "GET /.env.keys HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 34.95.42.38
34.95.42.38 - - [21/Oct/2026:06:44:42 -0500] "GET /.env.production.local HTTP/1.1" 403 199 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.95.42.38
34.95.42.38 - - [21/Oct/2026:06:44:42 -0500] "GET /.env.staging.local HTTP/1.1
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇾
lns.bz
|
|
Too many 404 requests [BY]
|
Web App Attack
|
|
🇩🇪
yitzhaq
|
|
34.95.42.38 - - [21/Oct/2026:13:26:58 +0200] "GET /chatbot/.env HTTP/2.0" 404 292 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/apple ...
show more
34.95.42.38 - - [21/Oct/2026:13:26:58 +0200] "GET /chatbot/.env HTTP/2.0" 404 292 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.95.42.38 - - [21/Oct/2026:13:26:59 +0200] "GET /scripts/.env HTTP/2.0" 403 318 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email])"
34.95.42.38 - - [21/Oct/2026:13:26:59 +0200] "GET /agent/.env HTTP/2.0" 403 295 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.95.42.38 - - [21/Oct/2026:13:26:59 +0200] "GET /bot/.env HTTP/2.0" 404 292 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.95.42.38 - - [21/Oct/2026:13:26:59 +0200] "GET /common/.env HTTP/2.0" 403 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email])"
34.95.42.38 - - [21/Oct/2026:13:26:59 +0200] "GET /utils/.env HTTP/2.0" 403 295 "-" "
show less
|
Web App Attack
Hacking
|
|
🇬🇧
Aetherweb Ark
|
|
(mod_security) mod_security (id:949110) triggered by 34.95.42.38 (CA/Canada/38.42.95.34.bc.googleusercontent.com): N in the last X secs
|
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
Anonymous
|
|
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack
|
|
🇩🇪
Petros Stefanakis
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.95.42.38 (CA/Canada/38.42.95.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇺🇸
Mundo Bueno
|
|
[ISILIA Protection v2.3] Tentative d'accès: /images../.env [RATE LIMITED - 1800s quarantine] | Pays: CA | UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
|
Hacking
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
updown.io
|
|
{"level":"info","ts":1792554098.5686753,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.95.42.38","remote_port":"49900","client_ip":"34.95.42.38","proto":"HTTP/2.0","method":"GET","host":"status.os.university","uri" ...
show more
{"level":"info","ts":1792554098.5686753,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.95.42.38","remote_port":"49900","client_ip":"34.95.42.38","proto":"HTTP/2.0","method":"GET","host":"status.os.university","uri":"/dist/manifest.json","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Platform":["\"Windows\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Site":["none"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Priority":["u=0, i"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Upgrade-Insecure-Requests":["1"],"X-Nextjs-Data":["1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-User":["?1"],"Accept-Language":["en-US,en;q=0.9"],"X-Middleware-Subrequest":["src/middleware:now
...
show less
|
DDoS Attack
Web App Attack
|
|
🇹🇷
Jova
|
|
Exploit attempts against a web server: 2 requests.
|
Hacking
Web App Attack
|
|
🇫🇷
COMAITE
|
|
Common web attack from 34.95.42.38.
|
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.95.42.38 - - [20/Oct/2026:19:02:35 +0200] "GET /z9x8c7v6b5-debug-trigger-account.oudewaterzorgt.nl HTTP/2.0" 404 2004 "-" "Mozilla ...
show more
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.95.42.38 - - [20/Oct/2026:19:02:35 +0200] "GET /z9x8c7v6b5-debug-trigger-account.oudewaterzorgt.nl HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.95.42.38 - - [20/Oct/2026:19:02:35 +0200] "GET /vorf16uksd8su3jq5l1b HTTP/2.0" 404 2004 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.95.42.38 - - [20/Oct/2026:19:02:35 +0200] "GET /zd1drp3xt39u6osle28l HTTP/2.0" 404 2004 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.95.42.38 - - [20/Oct/2026:19:02:35 +0200] "POST /graphql HTTP/2.0" 404 2004 "https://ac
...
show less
|
Bad Web Bot
Web App Attack
|