JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.21.245.24

34.21.245.24 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	24.245.21.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.21.245.24

Whois 34.21.245.24

IP Abuse Reports for 34.21.245.24:

This IP address has been reported a total of 22 times from 21 distinct sources. 34.21.245.24 was first reported on July 21st 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-22 06:00:00 (11 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇿 ptlab	2026-07-22 00:45:34 (16 hours ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 23:57:00 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.21.245.24 (24.245.21.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.21.245.24 (24.245.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 19:56:52.435567 2026] [security2:error] [pid 349746:tid 349762] [client 34.21.245.24:50918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manage.aafm.us"] [uri "/.env.production"] [unique_id "amAHRA2AHlevRu69-CnZCgAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-07-21 23:04:45 (18 hours ago)	34.21.245.24 - - [22/Jul/2026:09:04:45 +1000] "GET /rclone.conf HTTP/2.0" 404 1144 "https://api.aran ... show more 34.21.245.24 - - [22/Jul/2026:09:04:45 +1000] "GET /rclone.conf HTTP/2.0" 404 1144 "https://api.aranguren.org/rclone.conf" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.21.245.24 - - [22/Jul/2026:09:04:45 +1000] "GET /.aws/config HTTP/2.0" 404 1144 "https://api.aranguren.org/.aws/config" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)" 34.21.245.24 - - [22/Jul/2026:09:04:45 +1000] "GET /z9x8c7v6b5-debug-trigger-api.aranguren.org HTTP/2.0" 404 1206 "https://api.aranguren.org/z9x8c7v6b5-debug-trigger-api.aranguren.org" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.21.245.24 - - [22/Jul/2026:09:04:45 +1000] "GET /.git-credentials HTTP/2.0" 404 1154 "https://api.aranguren.org/.git-credentials" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 34.21.245.24 - - [22/Jul/2026:09:04:45 +1000] "GET /.git/config HTTP/2.0" 404 1144 "https://api.aranguren.org/.git/config" "C ... show less	Bad Web Bot
🇩🇪 Hary74656	2026-07-21 21:40:58 (19 hours ago)	[Tue Jul 21 23:40:23.789594 2026] [security2:error] [pid 176773:tid 176836] [remote 34.21.245.24:416 ... show more [Tue Jul 21 23:40:23.789594 2026] [security2:error] [pid 176773:tid 176836] [remote 34.21.245.24:41684] [client 34.21.245.24] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".conf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "admin.weavernet. ... show less	Web App Attack
🇬🇧 venus.launch.bz	2026-07-21 21:29:02 (19 hours ago)	(gohttpua) Bad UA Go-http-client from 34.21.245.24 (SG/Singapore/24.245.21.34.bc.googleusercontent.c ... show more (gohttpua) Bad UA Go-http-client from 34.21.245.24 (SG/Singapore/24.245.21.34.bc.googleusercontent.com) show less	Hacking
🇺🇸 interbiznw.com	2026-07-21 19:26:38 (21 hours ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 Guardian	2026-07-21 18:29:20 (22 hours ago)	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x13), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x13), Unauthorized attempt to retrieve configuration file (x2) 34.21.245.24 [21/Jul/2026:18:29:17] "GET / HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:17] "GET /rclone.conf HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:18] "GET /.git/config HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:18] "GET /.github/workflows/deploy.yml HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:18] "GET /.git-credentials HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:18] "GET /.aws/credentials HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:19] "GET /wp-json HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:19] "GET /webpack-stats.json HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:19] "GET /z9x8c7v6b5-debug-trigger-dashboard.****.* HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:20] "GET /.gitconfig HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:20] "GET /.gitlab-ci.yml HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:20] "GET /.git/HEAD HTTP/1.1" 34.21.245.24 [21/Jul/2026:18:29:20] "GET /.aws/config HTTP/1.1" 34.21.24 show less	Port Scan Web App Attack
🇳🇱 Savvii	2026-07-21 17:57:35 (23 hours ago)	20 attempts against mh-misbehave-ban on orcus	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 17:15:04 (1 day ago)	34.21.245.24 - - [21/Jul/2026:12:15:01 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compati ... show more 34.21.245.24 - - [21/Jul/2026:12:15:01 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)" 34.21.245.24 34.21.245.24 - - [21/Jul/2026:12:15:01 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 34.21.245.24 34.21.245.24 - - [21/Jul/2026:12:15:01 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" 34.21.245.24 34.21.245.24 - - [21/Jul/2026:12:15:01 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.21.245.24 34.21.245.24 - - [21/Jul/2026:12:15:01 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.21.245.24 34.21.245.24 - - [21/Jul/2026:12:15:01 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatib ... show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-21 16:59:07 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇮🇹 VHosting	2026-07-21 16:45:04 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇨🇦 Mediashaker	2026-07-21 16:32:15 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.21.245.24 (SG/Singapore/24.245.21.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.21.245.24 (SG/Singapore/24.245.21.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 FeG Deutschland	2026-07-21 16:12:36 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇫🇷 COMAITE	2026-07-21 15:31:00 (1 day ago)	Suspicious URL access.	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 148.227.79.14

🇳🇱 91.92.42.87

🇮🇳 68.183.92.206

🇺🇸 20.65.193.104

🇮🇱 2a00:a041:ea32:5b00:a5e3:3130:c6bf:4e3e

🇩🇪 2001:41d0:701:1100::2b7e

🇳🇱 217.60.241.94

🇨🇴 186.96.105.227

🇧🇷 170.0.62.165

🇺🇸 157.230.164.56

🇨🇳 120.52.19.209

🇬🇧 80.4.39.77

🇺🇸 66.132.186.250

🇳🇱 45.148.10.157

🇺🇸 45.38.249.157

🇷🇴 2.57.122.209

🇲🇴 182.93.7.194

🇱🇹 141.98.9.58

🇭🇰 47.82.112.192

🇧🇷 200.193.191.194